511] blkdev_get_by_path+0x81/0x130 [ 204.609771] mount_bdev+0x5d/0x3c0 [ 204.613323] ? hfsplus_iget+0x7d0/0x7d0 [ 204.617315] hfsplus_mount+0x35/0x40 [ 204.621040] mount_fs+0xae/0x331 [ 204.624424] vfs_kern_mount.part.0+0x6f/0x410 [ 204.628931] do_mount+0x53e/0x2bc0 [ 204.632484] ? copy_mount_string+0x40/0x40 [ 204.636742] ? _copy_from_user+0xdd/0x150 [ 204.640907] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 204.646455] ? copy_mount_options+0x280/0x3a0 [ 204.650966] ksys_mount+0xdb/0x150 [ 204.654532] __x64_sys_mount+0xbe/0x150 [ 204.658542] do_syscall_64+0x103/0x610 [ 204.662447] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 204.667643] RIP: 0033:0x45b81a [ 204.670844] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2d 8e fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0a 8e fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 204.689754] RSP: 002b:00007fa49ffa8a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 204.697476] RAX: ffffffffffffffda RBX: 00007fa49ffa8b40 RCX: 000000000045b81a [ 204.704759] RDX: 00007fa49ffa8ae0 RSI: 00000000200000c0 RDI: 00007fa49ffa8b00 [ 204.712041] RBP: 0000000000000000 R08: 00007fa49ffa8b40 R09: 00007fa49ffa8ae0 [ 204.719315] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 204.726590] R13: 00000000004c78fc R14: 00000000004dd928 R15: 0000000000000003 21:23:19 executing program 0: mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:23:19 executing program 2: 21:23:19 executing program 1: 21:23:19 executing program 3 (fault-call:0 fault-nth:46): syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 205.143696] FAULT_INJECTION: forcing a failure. [ 205.143696] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 205.166347] CPU: 0 PID: 9777 Comm: syz-executor.3 Not tainted 4.19.38 #6 [ 205.173230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 205.182588] Call Trace: [ 205.185186] dump_stack+0x172/0x1f0 [ 205.188830] should_fail.cold+0xa/0x1b [ 205.192733] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 205.197841] ? ___might_sleep+0x163/0x280 [ 205.202000] ? __might_sleep+0x95/0x190 [ 205.205988] __alloc_pages_nodemask+0x1ee/0x760 [ 205.215977] ? check_preemption_disabled+0x48/0x290 [ 205.220999] ? __alloc_pages_slowpath+0x2870/0x2870 [ 205.226028] ? rcu_read_lock_sched_held+0x110/0x130 [ 205.231046] ? __alloc_pages_nodemask+0x63e/0x760 [ 205.235894] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 205.241432] ? pcpu_alloc+0x144/0x12d0 [ 205.245327] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 205.250877] alloc_pages_current+0x107/0x210 [ 205.255294] get_zeroed_page+0x14/0x50 [ 205.259186] selinux_sb_copy_data+0x2a/0x4a0 [ 205.263599] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 205.269150] security_sb_copy_data+0x71/0xb0 [ 205.275044] mount_fs+0x236/0x331 [ 205.278517] vfs_kern_mount.part.0+0x6f/0x410 [ 205.283019] do_mount+0x53e/0x2bc0 [ 205.286576] ? copy_mount_string+0x40/0x40 [ 205.290818] ? _copy_from_user+0xdd/0x150 [ 205.294976] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 205.300516] ? copy_mount_options+0x280/0x3a0 [ 205.305043] ksys_mount+0xdb/0x150 [ 205.308590] __x64_sys_mount+0xbe/0x150 [ 205.312576] do_syscall_64+0x103/0x610 [ 205.316484] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 205.321676] RIP: 0033:0x45b81a [ 205.324870] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2d 8e fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0a 8e fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 205.343772] RSP: 002b:00007fa49ffa8a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 205.351500] RAX: ffffffffffffffda RBX: 00007fa49ffa8b40 RCX: 000000000045b81a [ 205.358769] RDX: 00007fa49ffa8ae0 RSI: 00000000200000c0 RDI: 00007fa49ffa8b00 [ 205.366040] RBP: 0000000000000000 R08: 00007fa49ffa8b40 R09: 00007fa49ffa8ae0 [ 205.373312] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 205.380580] R13: 00000000004c78fc R14: 00000000004dd928 R15: 0000000000000003 21:23:19 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) syz_open_dev$radio(&(0x7f00000002c0)='/dev/radio#\x00', 0x2, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) setxattr$security_smack_transmute(&(0x7f0000000440)='./bus\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:23:19 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:19 executing program 1: 21:23:19 executing program 2: 21:23:19 executing program 2: 21:23:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x80000000, 0x200006) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/audio\x00', 0x10240, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1f, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1000}, 0x0, 0x4, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000240), &(0x7f0000000740), &(0x7f0000000800)) openat$tun(0xffffffffffffff9c, &(0x7f0000000600)='/dev/net/tun\x00', 0x0, 0x0) r4 = userfaultfd(0x2000000000) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000500)={0x20000008}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141046, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4000, 0x11, r0, 0x0) write$P9_RLOPEN(r5, &(0x7f0000000000)={0x18, 0xd, 0x0, {{0x0, 0x0, 0x8}}}, 0x18) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000640)={{&(0x7f000007f000/0x3000)=nil, 0x3000}, 0x2}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}, 0x4}) ioctl$TIOCLINUX7(r2, 0x541c, &(0x7f0000000680)={0x7, 0x5d5753e5}) r6 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r6) recvfrom$inet6(r2, &(0x7f0000000380)=""/216, 0xd8, 0x40000040, &(0x7f0000000480)={0xa, 0x4e24, 0x6, @ipv4={[], [], @rand_addr=0x5669}, 0x5}, 0x1c) openat$rfkill(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/rfkill\x00', 0x4000, 0x0) mmap(&(0x7f000007e000/0x2000)=nil, 0x2000, 0xfffffffffffffffe, 0x12, r3, 0x0) ioctl$RTC_IRQP_READ(r2, 0x8004700b, &(0x7f0000000040)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x4e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x80, 0x4, 0x80, 0x100000001, 0x6, 0x1]}, 0x5c) ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f00000006c0)={0x3, 0x7, {0x0, 0x3f, 0x80000088a, {0x40, 0x7}, {0xfa, 0x40000000080}, @const={0x7, {0x5, 0x9, 0x0, 0x8001}}}, {0x0, 0x8, 0x4, {0x10000, 0x4}, {0x7, 0xfffffffffffffffe}, @const={0x6728, {0x3, 0x7f92, 0x9, 0x677}}}}) get_thread_area(&(0x7f00000004c0)={0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0x6acbcdb8, 0xd1c, 0x79fe, 0x6, 0x80000000, 0x2, 0x1a}) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xffffffa4]}, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) 21:23:19 executing program 3 (fault-call:0 fault-nth:47): syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:19 executing program 2: [ 205.643126] FAULT_INJECTION: forcing a failure. [ 205.643126] name failslab, interval 1, probability 0, space 0, times 0 [ 205.673999] CPU: 0 PID: 9789 Comm: syz-executor.3 Not tainted 4.19.38 #6 [ 205.680876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 205.690245] Call Trace: [ 205.692847] dump_stack+0x172/0x1f0 [ 205.696501] should_fail.cold+0xa/0x1b [ 205.700408] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 205.705543] ? lock_downgrade+0x810/0x810 [ 205.709704] ? ___might_sleep+0x163/0x280 [ 205.713869] __should_failslab+0x121/0x190 [ 205.718111] should_failslab+0x9/0x14 [ 205.721914] __kmalloc+0x2e5/0x750 [ 205.725485] ? __list_lru_init+0xd5/0x6e0 [ 205.729639] __list_lru_init+0xd5/0x6e0 [ 205.733623] sget_userns+0x81e/0xd30 [ 205.737340] ? kill_litter_super+0x60/0x60 [ 205.741587] ? ns_test_super+0x50/0x50 [ 205.745486] ? ns_test_super+0x50/0x50 [ 205.749380] ? kill_litter_super+0x60/0x60 [ 205.753620] sget+0x10c/0x150 [ 205.756736] mount_bdev+0xff/0x3c0 [ 205.760284] ? hfsplus_iget+0x7d0/0x7d0 [ 205.764271] hfsplus_mount+0x35/0x40 [ 205.767994] mount_fs+0xae/0x331 [ 205.771373] vfs_kern_mount.part.0+0x6f/0x410 [ 205.775879] do_mount+0x53e/0x2bc0 [ 205.779447] ? copy_mount_string+0x40/0x40 [ 205.783781] ? _copy_from_user+0xdd/0x150 [ 205.787947] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 205.793494] ? copy_mount_options+0x280/0x3a0 [ 205.798002] ksys_mount+0xdb/0x150 [ 205.801566] __x64_sys_mount+0xbe/0x150 [ 205.805552] do_syscall_64+0x103/0x610 [ 205.809464] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 205.814652] RIP: 0033:0x45b81a [ 205.817852] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2d 8e fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0a 8e fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 205.836757] RSP: 002b:00007fa49ffa8a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 205.844475] RAX: ffffffffffffffda RBX: 00007fa49ffa8b40 RCX: 000000000045b81a [ 205.851748] RDX: 00007fa49ffa8ae0 RSI: 00000000200000c0 RDI: 00007fa49ffa8b00 [ 205.859031] RBP: 0000000000000000 R08: 00007fa49ffa8b40 R09: 00007fa49ffa8ae0 [ 205.866306] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 205.873578] R13: 00000000004c78fc R14: 00000000004dd928 R15: 0000000000000003 21:23:19 executing program 0: mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:23:19 executing program 2: 21:23:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x80000000, 0x200006) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/audio\x00', 0x10240, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1f, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1000}, 0x0, 0x4, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000240), &(0x7f0000000740), &(0x7f0000000800)) openat$tun(0xffffffffffffff9c, &(0x7f0000000600)='/dev/net/tun\x00', 0x0, 0x0) r4 = userfaultfd(0x2000000000) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000500)={0x20000008}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141046, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4000, 0x11, r0, 0x0) write$P9_RLOPEN(r5, &(0x7f0000000000)={0x18, 0xd, 0x0, {{0x0, 0x0, 0x8}}}, 0x18) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000640)={{&(0x7f000007f000/0x3000)=nil, 0x3000}, 0x2}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}, 0x4}) ioctl$TIOCLINUX7(r2, 0x541c, &(0x7f0000000680)={0x7, 0x5d5753e5}) r6 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r6) recvfrom$inet6(r2, &(0x7f0000000380)=""/216, 0xd8, 0x40000040, &(0x7f0000000480)={0xa, 0x4e24, 0x6, @ipv4={[], [], @rand_addr=0x5669}, 0x5}, 0x1c) openat$rfkill(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/rfkill\x00', 0x4000, 0x0) mmap(&(0x7f000007e000/0x2000)=nil, 0x2000, 0xfffffffffffffffe, 0x12, r3, 0x0) ioctl$RTC_IRQP_READ(r2, 0x8004700b, &(0x7f0000000040)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x4e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x80, 0x4, 0x80, 0x100000001, 0x6, 0x1]}, 0x5c) ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f00000006c0)={0x3, 0x7, {0x0, 0x3f, 0x80000088a, {0x40, 0x7}, {0xfa, 0x40000000080}, @const={0x7, {0x5, 0x9, 0x0, 0x8001}}}, {0x0, 0x8, 0x4, {0x10000, 0x4}, {0x7, 0xfffffffffffffffe}, @const={0x6728, {0x3, 0x7f92, 0x9, 0x677}}}}) get_thread_area(&(0x7f00000004c0)={0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0x6acbcdb8, 0xd1c, 0x79fe, 0x6, 0x80000000, 0x2, 0x1a}) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xffffffa4]}, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) 21:23:19 executing program 3 (fault-call:0 fault-nth:48): syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 206.174002] FAULT_INJECTION: forcing a failure. [ 206.174002] name failslab, interval 1, probability 0, space 0, times 0 [ 206.195030] CPU: 1 PID: 9806 Comm: syz-executor.3 Not tainted 4.19.38 #6 [ 206.201905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 206.211271] Call Trace: [ 206.213877] dump_stack+0x172/0x1f0 [ 206.217525] should_fail.cold+0xa/0x1b [ 206.221432] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 206.226639] ? lock_downgrade+0x810/0x810 [ 206.230796] ? ___might_sleep+0x163/0x280 [ 206.234962] __should_failslab+0x121/0x190 [ 206.239215] should_failslab+0x9/0x14 [ 206.243029] kmem_cache_alloc_trace+0x2cf/0x760 [ 206.247722] ? lock_acquire+0x16f/0x3f0 [ 206.247752] selinux_sb_alloc_security+0x46/0x220 [ 206.247771] security_sb_alloc+0x69/0xb0 [ 206.256578] ? kill_litter_super+0x60/0x60 [ 206.256593] sget_userns+0x210/0xd30 [ 206.256606] ? kill_litter_super+0x60/0x60 [ 206.256626] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 206.256641] ? ns_test_super+0x50/0x50 [ 206.282225] ? ns_test_super+0x50/0x50 [ 206.286116] ? kill_litter_super+0x60/0x60 [ 206.290354] sget+0x10c/0x150 [ 206.293467] mount_bdev+0xff/0x3c0 [ 206.297014] ? hfsplus_iget+0x7d0/0x7d0 [ 206.300997] hfsplus_mount+0x35/0x40 [ 206.304716] mount_fs+0xae/0x331 [ 206.308092] vfs_kern_mount.part.0+0x6f/0x410 [ 206.312594] do_mount+0x53e/0x2bc0 [ 206.316147] ? copy_mount_string+0x40/0x40 [ 206.320387] ? copy_mount_options+0x1ea/0x3a0 [ 206.324895] ? copy_mount_options+0x1f0/0x3a0 [ 206.329414] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 206.334953] ? copy_mount_options+0x280/0x3a0 [ 206.339796] ksys_mount+0xdb/0x150 [ 206.343345] __x64_sys_mount+0xbe/0x150 [ 206.347328] do_syscall_64+0x103/0x610 [ 206.351226] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 206.356422] RIP: 0033:0x45b81a [ 206.359624] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2d 8e fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0a 8e fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 206.378525] RSP: 002b:00007fa49ffa8a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 206.386238] RAX: ffffffffffffffda RBX: 00007fa49ffa8b40 RCX: 000000000045b81a [ 206.393509] RDX: 00007fa49ffa8ae0 RSI: 00000000200000c0 RDI: 00007fa49ffa8b00 [ 206.400777] RBP: 0000000000000000 R08: 00007fa49ffa8b40 R09: 00007fa49ffa8ae0 [ 206.408051] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 206.415326] R13: 00000000004c78fc R14: 00000000004dd928 R15: 0000000000000003 21:23:20 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) syz_open_dev$radio(&(0x7f00000002c0)='/dev/radio#\x00', 0x2, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) setxattr$security_smack_transmute(&(0x7f0000000440)='./bus\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:23:20 executing program 2: 21:23:20 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:20 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x80000000, 0x200006) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/audio\x00', 0x10240, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1f, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1000}, 0x0, 0x4, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000240), &(0x7f0000000740), &(0x7f0000000800)) openat$tun(0xffffffffffffff9c, &(0x7f0000000600)='/dev/net/tun\x00', 0x0, 0x0) r4 = userfaultfd(0x2000000000) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000500)={0x20000008}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141046, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4000, 0x11, r0, 0x0) write$P9_RLOPEN(r5, &(0x7f0000000000)={0x18, 0xd, 0x0, {{0x0, 0x0, 0x8}}}, 0x18) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000640)={{&(0x7f000007f000/0x3000)=nil, 0x3000}, 0x2}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}, 0x4}) ioctl$TIOCLINUX7(r2, 0x541c, &(0x7f0000000680)={0x7, 0x5d5753e5}) r6 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r6) recvfrom$inet6(r2, &(0x7f0000000380)=""/216, 0xd8, 0x40000040, &(0x7f0000000480)={0xa, 0x4e24, 0x6, @ipv4={[], [], @rand_addr=0x5669}, 0x5}, 0x1c) openat$rfkill(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/rfkill\x00', 0x4000, 0x0) mmap(&(0x7f000007e000/0x2000)=nil, 0x2000, 0xfffffffffffffffe, 0x12, r3, 0x0) ioctl$RTC_IRQP_READ(r2, 0x8004700b, &(0x7f0000000040)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x4e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x80, 0x4, 0x80, 0x100000001, 0x6, 0x1]}, 0x5c) ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f00000006c0)={0x3, 0x7, {0x0, 0x3f, 0x80000088a, {0x40, 0x7}, {0xfa, 0x40000000080}, @const={0x7, {0x5, 0x9, 0x0, 0x8001}}}, {0x0, 0x8, 0x4, {0x10000, 0x4}, {0x7, 0xfffffffffffffffe}, @const={0x6728, {0x3, 0x7f92, 0x9, 0x677}}}}) get_thread_area(&(0x7f00000004c0)={0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0x6acbcdb8, 0xd1c, 0x79fe, 0x6, 0x80000000, 0x2, 0x1a}) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xffffffa4]}, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) 21:23:20 executing program 3 (fault-call:0 fault-nth:49): syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:20 executing program 2: [ 206.754126] FAULT_INJECTION: forcing a failure. [ 206.754126] name failslab, interval 1, probability 0, space 0, times 0 [ 206.799316] CPU: 1 PID: 9815 Comm: syz-executor.3 Not tainted 4.19.38 #6 [ 206.806215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 206.815571] Call Trace: [ 206.818170] dump_stack+0x172/0x1f0 [ 206.821818] should_fail.cold+0xa/0x1b [ 206.825727] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 206.830848] ? lock_downgrade+0x810/0x810 [ 206.835027] ? ___might_sleep+0x163/0x280 [ 206.839188] __should_failslab+0x121/0x190 [ 206.839207] should_failslab+0x9/0x14 [ 206.847226] __kmalloc+0x2e5/0x750 [ 206.850786] ? __lockdep_init_map+0x10c/0x5b0 [ 206.855312] ? prealloc_shrinker+0xdf/0x340 [ 206.859642] prealloc_shrinker+0xdf/0x340 [ 206.863798] sget_userns+0x7ef/0xd30 [ 206.867518] ? kill_litter_super+0x60/0x60 [ 206.871761] ? ns_test_super+0x50/0x50 [ 206.875656] ? ns_test_super+0x50/0x50 [ 206.879543] ? kill_litter_super+0x60/0x60 [ 206.883781] sget+0x10c/0x150 [ 206.886898] mount_bdev+0xff/0x3c0 [ 206.890441] ? hfsplus_iget+0x7d0/0x7d0 [ 206.894423] hfsplus_mount+0x35/0x40 [ 206.898143] mount_fs+0xae/0x331 [ 206.901523] vfs_kern_mount.part.0+0x6f/0x410 [ 206.906029] do_mount+0x53e/0x2bc0 [ 206.909576] ? retint_kernel+0x2d/0x2d [ 206.913475] ? copy_mount_string+0x40/0x40 [ 206.917731] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 206.923281] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 206.928826] ? copy_mount_options+0x280/0x3a0 [ 206.933332] ksys_mount+0xdb/0x150 [ 206.936892] __x64_sys_mount+0xbe/0x150 [ 206.940879] do_syscall_64+0x103/0x610 [ 206.944781] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 206.949972] RIP: 0033:0x45b81a [ 206.953175] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2d 8e fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0a 8e fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 206.972081] RSP: 002b:00007fa49ffa8a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 206.979798] RAX: ffffffffffffffda RBX: 00007fa49ffa8b40 RCX: 000000000045b81a [ 206.987067] RDX: 00007fa49ffa8ae0 RSI: 00000000200000c0 RDI: 00007fa49ffa8b00 21:23:20 executing program 0: mknod(0x0, 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) [ 206.994335] RBP: 0000000000000000 R08: 00007fa49ffa8b40 R09: 00007fa49ffa8ae0 [ 207.001611] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 207.008886] R13: 00000000004c78fc R14: 00000000004dd928 R15: 0000000000000003 21:23:21 executing program 1: 21:23:21 executing program 2: 21:23:21 executing program 2: syz_execute_func(&(0x7f00000003c0)="0c0ed52b98cd801b69e429e4e4629b5c7cd9d9d0c40f381cd6385f5bf9fbe23d0bee8fe9589b26c7e4c753fbc4e101ed41660f597ab48fe840ed8ac61954f6852a2a00c4da7676c4c3fd019300000000048f08eeeee0000080c4c3dd6d6807485151660fd09500000000509b129f9b9f9b0000d1c4e1d1ee870c00000020c35b5b45363ef8c4c1c9dd380faee42c240f5e5bf44700000f10eb0f0d18c401fe5ff6e7df64673667667066bd4343660fd2938c0000000f01c36666458fc8389e8e04000000001411c4e2bd45937c930000") 21:23:21 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 21:23:21 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000040)={0x0, 0x1}) 21:23:21 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) setxattr$security_smack_transmute(&(0x7f0000000440)='./bus\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:23:21 executing program 3 (fault-call:0 fault-nth:50): syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:21 executing program 2: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:23:21 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:21 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:21 executing program 0: mknod(0x0, 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) [ 207.914659] FAULT_INJECTION: forcing a failure. [ 207.914659] name failslab, interval 1, probability 0, space 0, times 0 [ 207.926553] CPU: 0 PID: 9838 Comm: syz-executor.3 Not tainted 4.19.38 #6 [ 207.933422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 207.942782] Call Trace: [ 207.945379] dump_stack+0x172/0x1f0 [ 207.949028] should_fail.cold+0xa/0x1b [ 207.952935] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 207.958054] ? lock_downgrade+0x810/0x810 21:23:21 executing program 2: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 207.962212] ? ___might_sleep+0x163/0x280 [ 207.966379] __should_failslab+0x121/0x190 [ 207.970627] should_failslab+0x9/0x14 [ 207.974435] kmem_cache_alloc_trace+0x2cf/0x760 [ 207.979117] ? lock_acquire+0x16f/0x3f0 [ 207.983111] selinux_sb_alloc_security+0x46/0x220 [ 207.987971] security_sb_alloc+0x69/0xb0 [ 207.992045] ? kill_litter_super+0x60/0x60 [ 207.996283] sget_userns+0x210/0xd30 [ 208.000020] ? kill_litter_super+0x60/0x60 [ 208.004272] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 208.009832] ? ns_test_super+0x50/0x50 [ 208.013730] ? ns_test_super+0x50/0x50 [ 208.017627] ? kill_litter_super+0x60/0x60 [ 208.021869] sget+0x10c/0x150 [ 208.024987] mount_bdev+0xff/0x3c0 [ 208.028535] ? hfsplus_iget+0x7d0/0x7d0 [ 208.032518] hfsplus_mount+0x35/0x40 [ 208.036240] mount_fs+0xae/0x331 [ 208.039622] vfs_kern_mount.part.0+0x6f/0x410 [ 208.044124] do_mount+0x53e/0x2bc0 [ 208.047680] ? copy_mount_string+0x40/0x40 [ 208.051933] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 208.057479] ? copy_mount_options+0x280/0x3a0 [ 208.061989] ksys_mount+0xdb/0x150 [ 208.065543] __x64_sys_mount+0xbe/0x150 [ 208.069531] do_syscall_64+0x103/0x610 [ 208.073445] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 208.078637] RIP: 0033:0x45b81a [ 208.081836] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2d 8e fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0a 8e fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 208.091599] audit: type=1804 audit(1556832202.049:82): pid=9850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir494870172/syzkaller.1IyXiN/59/file0" dev="sda1" ino=16915 res=1 [ 208.100733] RSP: 002b:00007fa49ffa8a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 208.100751] RAX: ffffffffffffffda RBX: 00007fa49ffa8b40 RCX: 000000000045b81a [ 208.100761] RDX: 00007fa49ffa8ae0 RSI: 00000000200000c0 RDI: 00007fa49ffa8b00 [ 208.100770] RBP: 0000000000000000 R08: 00007fa49ffa8b40 R09: 00007fa49ffa8ae0 [ 208.100779] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 21:23:22 executing program 2: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 208.100787] R13: 00000000004c78fc R14: 00000000004dd928 R15: 0000000000000003 21:23:22 executing program 2: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:23:22 executing program 2: write(0xffffffffffffffff, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:23:22 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:22 executing program 2: write(0xffffffffffffffff, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 208.742276] audit: type=1804 audit(1556832202.699:83): pid=9847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir494870172/syzkaller.1IyXiN/59/file0" dev="sda1" ino=16915 res=1 21:23:23 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) setxattr$security_smack_transmute(&(0x7f0000000440)='./bus\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2) r1 = dup2(r0, r0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r1, &(0x7f0000000000)={0x20}, 0x20000020) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r2, 0x0, r3, 0x0, 0x4b000000, 0x1) 21:23:23 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:23 executing program 2: write(0xffffffffffffffff, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:23:23 executing program 3 (fault-call:0 fault-nth:51): syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:23 executing program 0: mknod(0x0, 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:23:23 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 209.276114] FAULT_INJECTION: forcing a failure. [ 209.276114] name failslab, interval 1, probability 0, space 0, times 0 [ 209.295849] CPU: 1 PID: 9881 Comm: syz-executor.3 Not tainted 4.19.38 #6 [ 209.302708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 209.312067] Call Trace: [ 209.314665] dump_stack+0x172/0x1f0 [ 209.318313] should_fail.cold+0xa/0x1b [ 209.322222] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 209.327341] ? lock_downgrade+0x810/0x810 [ 209.331498] ? ___might_sleep+0x163/0x280 [ 209.335661] __should_failslab+0x121/0x190 [ 209.339907] should_failslab+0x9/0x14 [ 209.343720] kmem_cache_alloc_trace+0x2cf/0x760 [ 209.348389] ? kasan_unpoison_shadow+0x35/0x50 [ 209.352977] ? kasan_kmalloc+0xce/0xf0 [ 209.356877] __memcg_init_list_lru_node+0x8a/0x1e0 [ 209.361820] __list_lru_init+0x3d3/0x6e0 [ 209.365898] sget_userns+0x81e/0xd30 [ 209.369621] ? kill_litter_super+0x60/0x60 [ 209.373870] ? ns_test_super+0x50/0x50 [ 209.377766] ? ns_test_super+0x50/0x50 [ 209.381654] ? kill_litter_super+0x60/0x60 [ 209.385895] sget+0x10c/0x150 [ 209.389011] mount_bdev+0xff/0x3c0 [ 209.392557] ? hfsplus_iget+0x7d0/0x7d0 [ 209.396540] hfsplus_mount+0x35/0x40 [ 209.400261] mount_fs+0xae/0x331 [ 209.403639] vfs_kern_mount.part.0+0x6f/0x410 [ 209.408141] do_mount+0x53e/0x2bc0 [ 209.411706] ? copy_mount_string+0x40/0x40 [ 209.415952] ? _copy_from_user+0xdd/0x150 [ 209.420314] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 209.425858] ? copy_mount_options+0x280/0x3a0 [ 209.430363] ksys_mount+0xdb/0x150 [ 209.433920] __x64_sys_mount+0xbe/0x150 [ 209.437908] do_syscall_64+0x103/0x610 [ 209.441835] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 209.447025] RIP: 0033:0x45b81a [ 209.447042] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2d 8e fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0a 8e fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 209.447050] RSP: 002b:00007fa49ffa8a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 21:23:23 executing program 2: r0 = socket(0x0, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 209.447066] RAX: ffffffffffffffda RBX: 00007fa49ffa8b40 RCX: 000000000045b81a [ 209.447076] RDX: 00007fa49ffa8ae0 RSI: 00000000200000c0 RDI: 00007fa49ffa8b00 [ 209.447084] RBP: 0000000000000000 R08: 00007fa49ffa8b40 R09: 00007fa49ffa8ae0 [ 209.447091] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 209.447103] R13: 00000000004c78fc R14: 00000000004dd928 R15: 0000000000000003 21:23:23 executing program 2: r0 = socket(0x0, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:23:23 executing program 3 (fault-call:0 fault-nth:52): syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:23 executing program 2: r0 = socket(0x0, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 209.884800] FAULT_INJECTION: forcing a failure. [ 209.884800] name failslab, interval 1, probability 0, space 0, times 0 [ 209.919461] CPU: 0 PID: 9900 Comm: syz-executor.3 Not tainted 4.19.38 #6 [ 209.926351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 209.935706] Call Trace: [ 209.938312] dump_stack+0x172/0x1f0 [ 209.941958] should_fail.cold+0xa/0x1b [ 209.945868] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 209.950992] ? lock_downgrade+0x810/0x810 [ 209.955154] ? ___might_sleep+0x163/0x280 [ 209.959335] __should_failslab+0x121/0x190 [ 209.963582] should_failslab+0x9/0x14 [ 209.967390] kmem_cache_alloc_trace+0x2cf/0x760 [ 209.972066] ? kasan_unpoison_shadow+0x35/0x50 [ 209.978480] ? kasan_kmalloc+0xce/0xf0 [ 209.983343] __memcg_init_list_lru_node+0x8a/0x1e0 [ 209.988289] __list_lru_init+0x3d3/0x6e0 [ 209.992362] sget_userns+0x81e/0xd30 [ 209.996089] ? kill_litter_super+0x60/0x60 [ 210.000331] ? ns_test_super+0x50/0x50 [ 210.004224] ? ns_test_super+0x50/0x50 [ 210.008115] ? kill_litter_super+0x60/0x60 [ 210.012354] sget+0x10c/0x150 [ 210.015474] mount_bdev+0xff/0x3c0 [ 210.019022] ? hfsplus_iget+0x7d0/0x7d0 [ 210.023011] hfsplus_mount+0x35/0x40 [ 210.026735] mount_fs+0xae/0x331 [ 210.030115] vfs_kern_mount.part.0+0x6f/0x410 [ 210.034634] do_mount+0x53e/0x2bc0 [ 210.038208] ? copy_mount_string+0x40/0x40 [ 210.042455] ? _copy_from_user+0xdd/0x150 [ 210.046620] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 210.052181] ? copy_mount_options+0x280/0x3a0 [ 210.056692] ksys_mount+0xdb/0x150 [ 210.060241] __x64_sys_mount+0xbe/0x150 [ 210.064229] do_syscall_64+0x103/0x610 [ 210.068134] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 210.073339] RIP: 0033:0x45b81a [ 210.076537] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2d 8e fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0a 8e fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 210.095539] RSP: 002b:00007fa49ffa8a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 210.103260] RAX: ffffffffffffffda RBX: 00007fa49ffa8b40 RCX: 000000000045b81a [ 210.110534] RDX: 00007fa49ffa8ae0 RSI: 00000000200000c0 RDI: 00007fa49ffa8b00 [ 210.117811] RBP: 0000000000000000 R08: 00007fa49ffa8b40 R09: 00007fa49ffa8ae0 [ 210.125083] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 210.132357] R13: 00000000004c78fc R14: 00000000004dd928 R15: 0000000000000003 21:23:24 executing program 2: r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:23:24 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(0x0, 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:23:24 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) setxattr$security_smack_transmute(&(0x7f0000000440)='./bus\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2) r1 = dup2(r0, r0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r1, &(0x7f0000000000)={0x20}, 0x20000020) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r2, 0x0, r3, 0x0, 0x4b000000, 0x1) [ 210.268741] audit: type=1804 audit(1556832204.229:84): pid=9909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir494870172/syzkaller.1IyXiN/61/file0" dev="sda1" ino=16939 res=1 21:23:24 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:24 executing program 2: r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:23:24 executing program 3 (fault-call:0 fault-nth:53): syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:24 executing program 2: r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:23:24 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:24 executing program 2: socket(0x10, 0x80803, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:23:24 executing program 2: socket(0x10, 0x80803, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 210.705967] FAULT_INJECTION: forcing a failure. [ 210.705967] name failslab, interval 1, probability 0, space 0, times 0 [ 210.735070] CPU: 1 PID: 9917 Comm: syz-executor.3 Not tainted 4.19.38 #6 [ 210.741984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 210.751347] Call Trace: [ 210.753959] dump_stack+0x172/0x1f0 [ 210.757641] should_fail.cold+0xa/0x1b [ 210.761552] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 210.766671] ? lock_downgrade+0x810/0x810 [ 210.770838] ? ___might_sleep+0x163/0x280 [ 210.775004] __should_failslab+0x121/0x190 [ 210.779253] should_failslab+0x9/0x14 [ 210.783062] __kmalloc+0x2e5/0x750 [ 210.786622] ? __lockdep_init_map+0x10c/0x5b0 [ 210.791143] ? prealloc_shrinker+0xdf/0x340 [ 210.795482] prealloc_shrinker+0xdf/0x340 [ 210.799643] sget_userns+0x7ef/0xd30 [ 210.803453] ? kill_litter_super+0x60/0x60 [ 210.807698] ? ns_test_super+0x50/0x50 [ 210.811594] ? ns_test_super+0x50/0x50 [ 210.815495] ? kill_litter_super+0x60/0x60 [ 210.819741] sget+0x10c/0x150 [ 210.822864] mount_bdev+0xff/0x3c0 [ 210.826414] ? hfsplus_iget+0x7d0/0x7d0 [ 210.830407] hfsplus_mount+0x35/0x40 [ 210.834142] mount_fs+0xae/0x331 [ 210.837524] vfs_kern_mount.part.0+0x6f/0x410 [ 210.842036] do_mount+0x53e/0x2bc0 [ 210.845593] ? copy_mount_string+0x40/0x40 [ 210.849840] ? _copy_from_user+0xdd/0x150 [ 210.854007] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 210.859552] ? copy_mount_options+0x280/0x3a0 [ 210.864063] ksys_mount+0xdb/0x150 [ 210.867633] __x64_sys_mount+0xbe/0x150 [ 210.871627] do_syscall_64+0x103/0x610 [ 210.875529] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 210.880724] RIP: 0033:0x45b81a [ 210.883923] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2d 8e fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0a 8e fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 210.902827] RSP: 002b:00007fa49ffa8a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 210.910549] RAX: ffffffffffffffda RBX: 00007fa49ffa8b40 RCX: 000000000045b81a [ 210.917821] RDX: 00007fa49ffa8ae0 RSI: 00000000200000c0 RDI: 00007fa49ffa8b00 [ 210.925107] RBP: 0000000000000000 R08: 00007fa49ffa8b40 R09: 00007fa49ffa8ae0 [ 210.932383] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 210.939657] R13: 00000000004c78fc R14: 00000000004dd928 R15: 0000000000000003 21:23:25 executing program 2: socket(0x10, 0x80803, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 211.049075] audit: type=1804 audit(1556832205.009:85): pid=9910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir494870172/syzkaller.1IyXiN/61/file0" dev="sda1" ino=16939 res=1 21:23:25 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(0x0, 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:23:25 executing program 2: r0 = socket(0x10, 0x80803, 0x0) write(r0, 0x0, 0x0) 21:23:25 executing program 3 (fault-call:0 fault-nth:54): syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:25 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) setxattr$security_smack_transmute(&(0x7f0000000440)='./bus\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2) r1 = dup2(r0, r0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r1, &(0x7f0000000000)={0x20}, 0x20000020) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r2, 0x0, r3, 0x0, 0x4b000000, 0x1) [ 211.392616] audit: type=1804 audit(1556832205.349:86): pid=9940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir494870172/syzkaller.1IyXiN/62/file0" dev="sda1" ino=16925 res=1 [ 211.457107] FAULT_INJECTION: forcing a failure. [ 211.457107] name failslab, interval 1, probability 0, space 0, times 0 [ 211.495102] CPU: 0 PID: 9941 Comm: syz-executor.3 Not tainted 4.19.38 #6 [ 211.501996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 211.511349] Call Trace: [ 211.513953] dump_stack+0x172/0x1f0 [ 211.517592] should_fail.cold+0xa/0x1b [ 211.521494] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 211.526608] ? lock_downgrade+0x810/0x810 [ 211.530759] ? ___might_sleep+0x163/0x280 [ 211.534912] __should_failslab+0x121/0x190 [ 211.539150] should_failslab+0x9/0x14 [ 211.542954] kmem_cache_alloc_trace+0x2cf/0x760 [ 211.547636] ? kasan_unpoison_shadow+0x35/0x50 [ 211.552228] ? kasan_kmalloc+0xce/0xf0 [ 211.556139] __memcg_init_list_lru_node+0x8a/0x1e0 [ 211.561091] __list_lru_init+0x3d3/0x6e0 [ 211.565164] sget_userns+0x81e/0xd30 [ 211.568883] ? kill_litter_super+0x60/0x60 [ 211.573120] ? ns_test_super+0x50/0x50 [ 211.577008] ? ns_test_super+0x50/0x50 [ 211.580895] ? kill_litter_super+0x60/0x60 [ 211.585140] sget+0x10c/0x150 [ 211.588250] mount_bdev+0xff/0x3c0 [ 211.591796] ? hfsplus_iget+0x7d0/0x7d0 [ 211.595778] hfsplus_mount+0x35/0x40 [ 211.599499] mount_fs+0xae/0x331 [ 211.602879] vfs_kern_mount.part.0+0x6f/0x410 [ 211.607390] do_mount+0x53e/0x2bc0 [ 211.610954] ? copy_mount_string+0x40/0x40 [ 211.615199] ? _copy_from_user+0xdd/0x150 [ 211.619359] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 211.624903] ? copy_mount_options+0x280/0x3a0 [ 211.629417] ksys_mount+0xdb/0x150 [ 211.632962] __x64_sys_mount+0xbe/0x150 [ 211.636949] do_syscall_64+0x103/0x610 [ 211.640845] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 211.646034] RIP: 0033:0x45b81a 21:23:25 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:25 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:25 executing program 2: r0 = socket(0x10, 0x80803, 0x0) write(r0, 0x0, 0x0) [ 211.649250] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2d 8e fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0a 8e fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 211.668175] RSP: 002b:00007fa49ffa8a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 211.675893] RAX: ffffffffffffffda RBX: 00007fa49ffa8b40 RCX: 000000000045b81a [ 211.683163] RDX: 00007fa49ffa8ae0 RSI: 00000000200000c0 RDI: 00007fa49ffa8b00 [ 211.690438] RBP: 0000000000000000 R08: 00007fa49ffa8b40 R09: 00007fa49ffa8ae0 [ 211.697880] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 211.697889] R13: 00000000004c78fc R14: 00000000004dd928 R15: 0000000000000003 21:23:25 executing program 2: r0 = socket(0x10, 0x80803, 0x0) write(r0, 0x0, 0x0) 21:23:25 executing program 3 (fault-call:0 fault-nth:55): syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 211.847628] FAULT_INJECTION: forcing a failure. [ 211.847628] name failslab, interval 1, probability 0, space 0, times 0 [ 211.884388] CPU: 0 PID: 9959 Comm: syz-executor.3 Not tainted 4.19.38 #6 [ 211.891276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 211.900635] Call Trace: [ 211.903237] dump_stack+0x172/0x1f0 [ 211.906882] should_fail.cold+0xa/0x1b [ 211.910786] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 211.915902] ? lock_downgrade+0x810/0x810 [ 211.920076] ? ___might_sleep+0x163/0x280 [ 211.924242] __should_failslab+0x121/0x190 [ 211.928486] should_failslab+0x9/0x14 [ 211.932296] kmem_cache_alloc_trace+0x2cf/0x760 [ 211.936974] ? kasan_unpoison_shadow+0x35/0x50 [ 211.941564] ? kasan_kmalloc+0xce/0xf0 [ 211.945472] __memcg_init_list_lru_node+0x8a/0x1e0 [ 211.950420] __list_lru_init+0x3d3/0x6e0 [ 211.954494] sget_userns+0x81e/0xd30 [ 211.958219] ? kill_litter_super+0x60/0x60 [ 211.962467] ? ns_test_super+0x50/0x50 [ 211.966363] ? ns_test_super+0x50/0x50 [ 211.970259] ? kill_litter_super+0x60/0x60 [ 211.974502] sget+0x10c/0x150 [ 211.977620] mount_bdev+0xff/0x3c0 [ 211.981173] ? hfsplus_iget+0x7d0/0x7d0 [ 211.985172] hfsplus_mount+0x35/0x40 [ 211.988896] mount_fs+0xae/0x331 [ 211.992277] vfs_kern_mount.part.0+0x6f/0x410 [ 211.996784] do_mount+0x53e/0x2bc0 [ 212.000339] ? copy_mount_string+0x40/0x40 [ 212.004583] ? _copy_from_user+0xdd/0x150 [ 212.008752] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 212.014299] ? copy_mount_options+0x280/0x3a0 [ 212.018809] ksys_mount+0xdb/0x150 [ 212.022358] __x64_sys_mount+0xbe/0x150 [ 212.026348] do_syscall_64+0x103/0x610 [ 212.030250] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 212.035448] RIP: 0033:0x45b81a [ 212.038647] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2d 8e fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0a 8e fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 212.057557] RSP: 002b:00007fa49ffa8a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 212.065275] RAX: ffffffffffffffda RBX: 00007fa49ffa8b40 RCX: 000000000045b81a [ 212.072549] RDX: 00007fa49ffa8ae0 RSI: 00000000200000c0 RDI: 00007fa49ffa8b00 [ 212.079910] RBP: 0000000000000000 R08: 00007fa49ffa8b40 R09: 00007fa49ffa8ae0 [ 212.087188] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 21:23:26 executing program 2: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000), 0x0) 21:23:26 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 212.094466] R13: 00000000004c78fc R14: 00000000004dd928 R15: 0000000000000003 21:23:26 executing program 2: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000), 0x0) [ 212.195246] audit: type=1800 audit(1556832206.149:87): pid=9942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=16925 res=0 21:23:26 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(0x0, 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:23:26 executing program 2: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000), 0x0) 21:23:26 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 212.447453] audit: type=1804 audit(1556832206.409:88): pid=9973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir494870172/syzkaller.1IyXiN/63/file0" dev="sda1" ino=16925 res=1 21:23:26 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) setxattr$security_smack_transmute(&(0x7f0000000440)='./bus\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:23:26 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:26 executing program 2: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641", 0xe) 21:23:26 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:26 executing program 2: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641", 0xe) 21:23:26 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 212.755443] hfsplus: unable to find HFS+ superblock 21:23:26 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='\nfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:26 executing program 2: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641", 0xe) 21:23:27 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='%fsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:27 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:23:27 executing program 2: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00", 0x15) 21:23:27 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 213.231583] audit: type=1804 audit(1556832207.189:89): pid=9976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir494870172/syzkaller.1IyXiN/63/file0" dev="sda1" ino=16925 res=1 [ 213.618941] audit: type=1804 audit(1556832207.579:90): pid=10016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir494870172/syzkaller.1IyXiN/64/file0" dev="sda1" ino=16921 res=1 21:23:27 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) setxattr$security_smack_transmute(&(0x7f0000000440)='./bus\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:23:27 executing program 2: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00", 0x15) 21:23:27 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:27 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='h\nsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 213.695109] audit: type=1804 audit(1556832207.619:91): pid=9995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir878848298/syzkaller.zmvbe4/72/file0" dev="sda1" ino=16926 res=1 21:23:27 executing program 2: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00", 0x15) 21:23:27 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:27 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='h%splus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:27 executing program 2: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000", 0x18) 21:23:28 executing program 2: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000", 0x18) 21:23:28 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:23:28 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='h.splus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:28 executing program 2: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000", 0x18) [ 214.685600] audit: type=1800 audit(1556832208.649:92): pid=10017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=16921 res=0 [ 214.793007] audit: type=1804 audit(1556832208.749:93): pid=10045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir878848298/syzkaller.zmvbe4/73/file0" dev="sda1" ino=16941 res=1 21:23:28 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) setxattr$security_smack_transmute(&(0x7f0000000440)='./bus\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) [ 214.927706] audit: type=1804 audit(1556832208.889:94): pid=10060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir494870172/syzkaller.1IyXiN/65/file0" dev="sda1" ino=16921 res=1 21:23:29 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='h/splus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:29 executing program 2: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff000000000002", 0x1a) 21:23:29 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:29 executing program 4: connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:29 executing program 2: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff000000000002", 0x1a) 21:23:29 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hf\nplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:29 executing program 2: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff000000000002", 0x1a) 21:23:29 executing program 2: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) setxattr$security_smack_transmute(&(0x7f0000000440)='./bus\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2) r1 = dup2(r0, r0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r1, &(0x7f0000000000)={0x20}, 0x20000020) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r2, 0x0, r3, 0x0, 0x4b000000, 0x1) [ 215.801229] audit: type=1804 audit(1556832209.759:95): pid=10061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir494870172/syzkaller.1IyXiN/65/file0" dev="sda1" ino=16921 res=1 [ 215.967093] audit: type=1800 audit(1556832209.919:96): pid=10078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="file0" dev="sda1" ino=16955 res=0 21:23:30 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:23:30 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hf#plus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:30 executing program 4: connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:30 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:30 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) setxattr$security_smack_transmute(&(0x7f0000000440)='./bus\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:23:30 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hf%plus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 216.436536] audit: type=1804 audit(1556832210.399:97): pid=10109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir494870172/syzkaller.1IyXiN/66/file0" dev="sda1" ino=16958 res=1 21:23:30 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hf*plus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:30 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:30 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:30 executing program 4: connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:30 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hf+plus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:30 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:31 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) setxattr$security_smack_transmute(&(0x7f0000000440)='./bus\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:23:31 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:31 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hf-plus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:31 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:23:31 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:31 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 217.475054] audit: type=1804 audit(1556832211.429:98): pid=10111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir494870172/syzkaller.1IyXiN/66/file0" dev="sda1" ino=16958 res=1 21:23:31 executing program 2: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000200)={0xf97cff8c, 0x8, 'SE Linux', "12000000004c00000600000007000000019f0006000000000308000200000000c27ed0ffd7d9"}, 0x36) 21:23:31 executing program 2: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000200)={0xf97cff8c, 0x8, 'SE Linux', "12000000004c00000600000007000000019f0006000000000308000200000000c27ed0ffd7d9"}, 0x36) 21:23:31 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hf.plus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:31 executing program 2: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000200)={0xf97cff8c, 0x8, 'SE Linux', "12000000004c00000600000007000000019f0006000000000308000200000000c27ed0"}, 0x33) 21:23:31 executing program 2: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:23:31 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hf0plus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:32 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) setxattr$security_smack_transmute(&(0x7f0000000440)='./bus\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:23:32 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:32 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:32 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:23:32 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfXplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:32 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:32 executing program 1: connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:32 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfcplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:33 executing program 2: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:23:33 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfdplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:33 executing program 5: mknod(0x0, 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) setxattr$security_smack_transmute(&(0x7f0000000440)='./bus\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:23:33 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfiplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:33 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:33 executing program 1: connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:33 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hflplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:33 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:23:33 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfoplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:34 executing program 5: mknod(0x0, 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) setxattr$security_smack_transmute(&(0x7f0000000440)='./bus\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:23:34 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfpplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:34 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:34 executing program 2: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:23:34 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfuplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:34 executing program 1: connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:34 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfxplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:34 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:23:34 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfs\nlus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:34 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:35 executing program 5: mknod(0x0, 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) setxattr$security_smack_transmute(&(0x7f0000000440)='./bus\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:23:35 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:35 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfs#lus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:35 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfs%lus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:35 executing program 2: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000200)={0xf97cff8c, 0x8, 'SE Linux', "12000000004c00000600000007000000019f0006"}, 0x24) 21:23:35 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfs*lus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:35 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:35 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:35 executing program 2: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, 0x0, 0x0) 21:23:36 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:23:36 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(0x0, 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) setxattr$security_smack_transmute(&(0x7f0000000440)='./bus\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:23:36 executing program 2: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) r1 = syz_open_dev$radio(&(0x7f00000002c0)='/dev/radio#\x00', 0x2, 0x2) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@loopback, 0x10000, 0x0, 0x2000000ff, 0x1}, 0x20) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) setxattr$security_smack_transmute(&(0x7f0000000440)='./bus\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r2, r2) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:23:36 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfs+lus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:36 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfs-lus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:36 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfs.lus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:36 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:36 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:36 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfs0lus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 222.902162] kauditd_printk_skb: 1 callbacks suppressed [ 222.902175] audit: type=1800 audit(1556832216.859:100): pid=10345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="file0" dev="sda1" ino=16801 res=0 21:23:36 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(0x0, 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) setxattr$security_smack_transmute(&(0x7f0000000440)='./bus\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:23:37 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsXlus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:37 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) openat$cgroup_ro(r0, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) readv(r1, &(0x7f00000002c0), 0x10000000000002f3) 21:23:37 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:23:37 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:37 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsclus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:37 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, 0x0, 0x0) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:37 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) openat$cgroup_ro(r0, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) readv(r1, &(0x7f00000002c0), 0x10000000000002f3) 21:23:37 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsdlus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:37 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) openat$cgroup_ro(r0, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) readv(r1, &(0x7f00000002c0), 0x10000000000002f3) 21:23:37 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) readv(r1, &(0x7f00000002c0), 0x10000000000002f3) 21:23:37 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsilus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:38 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(0x0, 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) setxattr$security_smack_transmute(&(0x7f0000000440)='./bus\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:23:38 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) readv(r1, &(0x7f00000002c0), 0x10000000000002f3) 21:23:38 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, 0x0, 0x0) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 224.114703] audit: type=1804 audit(1556832218.069:101): pid=10391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir878848298/syzkaller.zmvbe4/82/file0" dev="sda1" ino=16801 res=1 21:23:38 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:23:38 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:38 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsllus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:38 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) readv(r1, &(0x7f00000002c0), 0x10000000000002f3) 21:23:38 executing program 2: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) r1 = syz_open_dev$radio(&(0x7f00000002c0)='/dev/radio#\x00', 0x2, 0x2) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@loopback, 0x10000, 0x0, 0x2000000ff, 0x1}, 0x20) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) setxattr$security_smack_transmute(&(0x7f0000000440)='./bus\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2) r3 = dup2(r2, r2) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno'}}) recvmsg(r1, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:23:38 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsolus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 224.623330] 9pnet: Insufficient options for proto=fd 21:23:38 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsslus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:38 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, 0x0, 0x0) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:38 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 225.272626] audit: type=1800 audit(1556832219.229:102): pid=10452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="file0" dev="sda1" ino=16705 res=0 21:23:39 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) setxattr$security_smack_transmute(&(0x7f0000000440)='./bus\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:23:39 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsulus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:39 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:23:39 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:39 executing program 2: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) r1 = syz_open_dev$radio(&(0x7f00000002c0)='/dev/radio#\x00', 0x2, 0x2) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@loopback, 0x10000, 0x0, 0x2000000ff, 0x1}, 0x20) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) setxattr$security_smack_transmute(&(0x7f0000000440)='./bus\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2) r3 = dup2(r2, r2) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno'}}) recvmsg(r1, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:23:39 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:39 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsxlus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:39 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsp\nus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 225.999203] 9pnet: Insufficient options for proto=fd 21:23:40 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsp#us\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:40 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:40 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:23:40 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) setxattr$security_smack_transmute(&(0x7f0000000440)='./bus\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) [ 226.448203] audit: type=1804 audit(1556832220.409:103): pid=10493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir878848298/syzkaller.zmvbe4/84/file0" dev="sda1" ino=16991 res=1 21:23:40 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsp%us\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:40 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:40 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsp*us\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:40 executing program 2: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) r1 = syz_open_dev$radio(&(0x7f00000002c0)='/dev/radio#\x00', 0x2, 0x2) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@loopback, 0x10000, 0x0, 0x2000000ff, 0x1}, 0x20) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) setxattr$security_smack_transmute(&(0x7f0000000440)='./bus\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2) r3 = dup2(r2, r2) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno'}}) recvmsg(r1, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:23:40 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsp+us\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:41 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsp-us\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:41 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:41 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 227.311176] 9pnet: Insufficient options for proto=fd 21:23:41 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsp.us\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:41 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380), 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) [ 227.531113] audit: type=1804 audit(1556832221.489:104): pid=10535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir878848298/syzkaller.zmvbe4/85/file0" dev="sda1" ino=17006 res=1 21:23:42 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) setxattr$security_smack_transmute(&(0x7f0000000440)='./bus\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:23:42 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:42 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:42 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:42 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsp/us\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:42 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:42 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsp0us\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:42 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380), 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:23:42 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfspLus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:42 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:42 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:42 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 229.150721] audit: type=1804 audit(1556832223.109:105): pid=10592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir878848298/syzkaller.zmvbe4/86/file0" dev="sda1" ino=17019 res=1 21:23:43 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) setxattr$security_smack_transmute(&(0x7f0000000440)='./bus\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:23:43 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfspuus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:43 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:43 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:43 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfspl\ns\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:43 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:43 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380), 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:23:43 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfspl#s\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:43 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:44 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfspl%s\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:44 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:44 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:44 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:44 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfspl*s\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:44 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) setxattr$security_smack_transmute(&(0x7f0000000440)='./bus\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:23:44 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfspl+s\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:44 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = dup2(r0, r0) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:23:44 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfspl-s\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:45 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:45 executing program 2: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380), 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:23:45 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfspl.s\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:45 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:45 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) setxattr$security_smack_transmute(&(0x7f0000000440)='./bus\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:23:45 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfspl0s\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:45 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplXs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:45 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:46 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:46 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplcs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:46 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = dup2(r0, r0) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:23:46 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplds\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:46 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:46 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) setxattr$security_smack_transmute(&(0x7f0000000440)='./bus\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:23:46 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:46 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplis\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:46 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 21:23:46 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplls\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:47 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:47 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:47 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = dup2(r0, r0) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:23:47 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplps\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:47 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 21:23:47 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) setxattr$security_smack_transmute(&(0x7f0000000440)='./bus\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:23:47 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:47 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplss\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:47 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplxs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:47 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:48 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplu\n\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:48 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplu#\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:48 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 21:23:48 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) openat$cgroup_ro(r0, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) readv(r1, &(0x7f00000002c0), 0x10000000000002f3) 21:23:48 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:23:48 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:48 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) openat$cgroup_ro(r0, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) readv(r1, &(0x7f00000002c0), 0x10000000000002f3) 21:23:48 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) setxattr$security_smack_transmute(&(0x7f0000000440)='./bus\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:23:48 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplu%\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:48 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) openat$cgroup_ro(r0, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) readv(r1, &(0x7f00000002c0), 0x10000000000002f3) 21:23:49 executing program 2: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) r1 = syz_open_dev$radio(&(0x7f00000002c0)='/dev/radio#\x00', 0x2, 0x2) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@loopback, 0x10000, 0x0, 0x2000000ff, 0x1}, 0x20) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) setxattr$security_smack_transmute(&(0x7f0000000440)='./bus\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r2, r2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:23:49 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplu*\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:49 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40), 0x0, 0x0, 0x0) 21:23:49 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplu+\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:49 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:49 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplu-\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:49 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:23:49 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplu.\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:49 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) setxattr$security_smack_transmute(&(0x7f0000000440)='./bus\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:23:50 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40), 0x0, 0x0, 0x0) 21:23:50 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplu0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:50 executing program 2: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) r1 = syz_open_dev$radio(&(0x7f00000002c0)='/dev/radio#\x00', 0x2, 0x2) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@loopback, 0x10000, 0x0, 0x2000000ff, 0x1}, 0x20) open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) setxattr$security_smack_transmute(&(0x7f0000000440)='./bus\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(r1, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:23:50 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:50 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfspluX\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 236.536252] 9pnet: Insufficient options for proto=fd 21:23:50 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfspluc\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:50 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40), 0x0, 0x0, 0x0) 21:23:50 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:23:50 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplud\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:51 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:51 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) setxattr$security_smack_transmute(&(0x7f0000000440)='./bus\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:23:51 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplui\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:51 executing program 2: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) r1 = syz_open_dev$radio(&(0x7f00000002c0)='/dev/radio#\x00', 0x2, 0x2) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@loopback, 0x10000, 0x0, 0x2000000ff, 0x1}, 0x20) open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) setxattr$security_smack_transmute(&(0x7f0000000440)='./bus\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(r1, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) [ 237.453872] 9pnet: Insufficient options for proto=fd 21:23:51 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplul\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:51 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) r1 = syz_open_dev$radio(&(0x7f00000002c0)='/dev/radio#\x00', 0x2, 0x2) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@loopback, 0x10000, 0x0, 0x2000000ff, 0x1}, 0x20) open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) setxattr$security_smack_transmute(&(0x7f0000000440)='./bus\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(r1, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:23:51 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfspluo\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 237.741562] 9pnet: Insufficient options for proto=fd 21:23:51 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:51 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplup\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:52 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x0, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:23:52 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) setxattr$security_smack_transmute(&(0x7f0000000440)='./bus\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:23:52 executing program 2: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) r1 = syz_open_dev$radio(&(0x7f00000002c0)='/dev/radio#\x00', 0x2, 0x2) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@loopback, 0x10000, 0x0, 0x2000000ff, 0x1}, 0x20) open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) setxattr$security_smack_transmute(&(0x7f0000000440)='./bus\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(r1, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:23:52 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfspluu\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 238.317992] 9pnet: Insufficient options for proto=fd 21:23:52 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:52 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) r1 = syz_open_dev$radio(&(0x7f00000002c0)='/dev/radio#\x00', 0x2, 0x2) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@loopback, 0x10000, 0x0, 0x2000000ff, 0x1}, 0x20) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) setxattr$security_smack_transmute(&(0x7f0000000440)='./bus\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = dup2(r2, r2) write$FUSE_IOCTL(r4, &(0x7f0000000000)={0x20}, 0x20000020) r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) recvmsg(r1, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r6 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r5, 0x0, r6, 0x0, 0x4b000000, 0x1) 21:23:52 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplux\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:52 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x02', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:53 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x03', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:53 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x0, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:23:53 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:53 executing program 2 (fault-call:4 fault-nth:0): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:53 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x04', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:53 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) setxattr$security_smack_transmute(&(0x7f0000000440)='./bus\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:23:53 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x05', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:53 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) r1 = syz_open_dev$radio(&(0x7f00000002c0)='/dev/radio#\x00', 0x2, 0x2) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@loopback, 0x10000, 0x0, 0x2000000ff, 0x1}, 0x20) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) setxattr$security_smack_transmute(&(0x7f0000000440)='./bus\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = dup2(r2, r2) write$FUSE_IOCTL(r4, &(0x7f0000000000)={0x20}, 0x20000020) r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) recvmsg(r1, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r6 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r5, 0x0, r6, 0x0, 0x4b000000, 0x1) 21:23:53 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:53 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x06', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:53 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:54 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\a', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:54 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x0, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:23:54 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) setxattr$security_smack_transmute(&(0x7f0000000440)='./bus\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:23:54 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\t', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:54 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:54 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) 21:23:54 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\n', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:54 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:54 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) r1 = syz_open_dev$radio(&(0x7f00000002c0)='/dev/radio#\x00', 0x2, 0x2) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@loopback, 0x10000, 0x0, 0x2000000ff, 0x1}, 0x20) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) setxattr$security_smack_transmute(&(0x7f0000000440)='./bus\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = dup2(r2, r2) write$FUSE_IOCTL(r4, &(0x7f0000000000)={0x20}, 0x20000020) r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) recvmsg(r1, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r6 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r5, 0x0, r6, 0x0, 0x4b000000, 0x1) 21:23:54 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\r', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:55 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:55 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x0e', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:55 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:55 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:23:55 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) setxattr$security_smack_transmute(&(0x7f0000000440)='./bus\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:23:55 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x10', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:55 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:55 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:55 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:55 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\"', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:56 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x0, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:23:56 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:56 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus#', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:56 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000a5e000/0x1000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0xc33410369e09fc7e, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x80000000}}, 0x18) 21:23:56 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus,', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:56 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:23:56 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0x0, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) setxattr$security_smack_transmute(&(0x7f0000000440)='./bus\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:23:56 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplusH', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:56 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:56 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplusL', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:57 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus`', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:57 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplush', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:57 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000a5e000/0x1000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0xc33410369e09fc7e, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x80000000}}, 0x18) 21:23:57 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:23:57 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose, @rose]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:57 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:57 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0x0, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) setxattr$security_smack_transmute(&(0x7f0000000440)='./bus\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:23:57 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplusl', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:58 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplust', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:58 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplusz', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:58 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x40000, 0x0) ioctl$sock_x25_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)={@null=' \x00', 0xb, 'rose0\x00'}) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000975000/0x2000)=nil, 0x2000, 0x42000000, 0x120050, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={0x0, 0xf83, 0x0, 0xb0}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={r2, @in6={{0xa, 0x4e20, 0x90, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8}}, 0x1, 0x4, 0xffffffff, 0xffffffffffffffff, 0x4e}, &(0x7f0000000100)=0x98) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:58 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 21:23:58 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x1fffe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:23:58 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:23:58 executing program 1 (fault-call:1 fault-nth:0): r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:23:58 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(0x0, 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) [ 244.704288] FAULT_INJECTION: forcing a failure. [ 244.704288] name failslab, interval 1, probability 0, space 0, times 0 [ 244.735038] hfsplus: unable to find HFS+ superblock [ 244.747827] CPU: 0 PID: 11276 Comm: syz-executor.1 Not tainted 4.19.38 #6 [ 244.754806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 244.764171] Call Trace: [ 244.766783] dump_stack+0x172/0x1f0 [ 244.770433] should_fail.cold+0xa/0x1b [ 244.774328] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 244.779443] ? lock_downgrade+0x810/0x810 [ 244.783603] ? ___might_sleep+0x163/0x280 [ 244.787765] __should_failslab+0x121/0x190 [ 244.792009] should_failslab+0x9/0x14 [ 244.795988] kmem_cache_alloc_node+0x26f/0x710 [ 244.800589] __alloc_skb+0xd5/0x5f0 [ 244.804228] ? skb_scrub_packet+0x490/0x490 [ 244.808564] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 244.814106] ? netlink_autobind.isra.0+0x228/0x310 [ 244.819047] netlink_sendmsg+0x97b/0xd70 [ 244.823123] ? netlink_unicast+0x720/0x720 [ 244.827371] ? selinux_socket_sendmsg+0x36/0x40 [ 244.832051] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 244.837593] ? security_socket_sendmsg+0x93/0xc0 [ 244.842352] ? netlink_unicast+0x720/0x720 [ 244.846597] sock_sendmsg+0xdd/0x130 [ 244.850317] sock_write_iter+0x27c/0x3e0 [ 244.854399] ? sock_sendmsg+0x130/0x130 [ 244.858427] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 244.863969] ? iov_iter_init+0xc6/0x1f0 [ 244.867949] __vfs_write+0x58e/0x820 [ 244.871671] ? kernel_read+0x120/0x120 [ 244.875572] ? selinux_file_permission+0x92/0x550 [ 244.880428] ? security_file_permission+0x8f/0x230 [ 244.885365] ? rw_verify_area+0x118/0x360 [ 244.889524] vfs_write+0x20c/0x560 [ 244.893076] ksys_write+0xea/0x1f0 [ 244.896624] ? __ia32_sys_read+0xb0/0xb0 [ 244.900700] ? do_syscall_64+0x26/0x610 21:23:58 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0x0, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) setxattr$security_smack_transmute(&(0x7f0000000440)='./bus\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) [ 244.904685] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 244.910147] ? do_syscall_64+0x26/0x610 [ 244.914134] __x64_sys_write+0x73/0xb0 [ 244.918030] do_syscall_64+0x103/0x610 [ 244.921939] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 244.927137] RIP: 0033:0x458da9 [ 244.930334] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 244.949238] RSP: 002b:00007f09a960dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 244.956956] RAX: ffffffffffffffda RBX: 00007f09a960dc90 RCX: 0000000000458da9 [ 244.964232] RDX: 000000000000001b RSI: 0000000020000000 RDI: 0000000000000003 [ 244.971505] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 244.978777] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f09a960e6d4 [ 244.986051] R13: 00000000004c4d89 R14: 00000000004de1b0 R15: 0000000000000004 21:23:59 executing program 1 (fault-call:1 fault-nth:1): r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 245.024892] hfsplus: unable to find HFS+ superblock 21:23:59 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 245.123721] FAULT_INJECTION: forcing a failure. [ 245.123721] name failslab, interval 1, probability 0, space 0, times 0 [ 245.159931] 9pnet: Insufficient options for proto=fd [ 245.180552] CPU: 1 PID: 11288 Comm: syz-executor.1 Not tainted 4.19.38 #6 [ 245.187520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 245.187527] Call Trace: [ 245.187549] dump_stack+0x172/0x1f0 [ 245.187574] should_fail.cold+0xa/0x1b [ 245.187592] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 245.187610] ? lock_downgrade+0x810/0x810 [ 245.187627] ? ___might_sleep+0x163/0x280 [ 245.224110] __should_failslab+0x121/0x190 [ 245.228372] should_failslab+0x9/0x14 [ 245.232186] kmem_cache_alloc_node_trace+0x277/0x720 [ 245.237299] ? __alloc_skb+0xd5/0x5f0 [ 245.241114] __kmalloc_node_track_caller+0x3d/0x80 [ 245.241135] __kmalloc_reserve.isra.0+0x40/0xf0 [ 245.241153] __alloc_skb+0x10b/0x5f0 [ 245.254436] ? skb_scrub_packet+0x490/0x490 [ 245.258777] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 245.264341] ? netlink_autobind.isra.0+0x228/0x310 [ 245.269283] netlink_sendmsg+0x97b/0xd70 [ 245.273974] ? netlink_unicast+0x720/0x720 [ 245.278227] ? selinux_socket_sendmsg+0x36/0x40 [ 245.282907] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 245.284458] hfsplus: unable to find HFS+ superblock [ 245.288448] ? security_socket_sendmsg+0x93/0xc0 [ 245.288465] ? netlink_unicast+0x720/0x720 [ 245.288486] sock_sendmsg+0xdd/0x130 [ 245.288501] sock_write_iter+0x27c/0x3e0 [ 245.288519] ? sock_sendmsg+0x130/0x130 [ 245.314235] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 245.319785] ? iov_iter_init+0xc6/0x1f0 [ 245.323783] __vfs_write+0x58e/0x820 [ 245.327512] ? kernel_read+0x120/0x120 [ 245.331415] ? selinux_file_permission+0x92/0x550 [ 245.336279] ? security_file_permission+0x8f/0x230 [ 245.341226] ? rw_verify_area+0x118/0x360 [ 245.345383] vfs_write+0x20c/0x560 [ 245.348934] ksys_write+0xea/0x1f0 [ 245.352487] ? __ia32_sys_read+0xb0/0xb0 [ 245.356561] ? do_syscall_64+0x26/0x610 [ 245.360550] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 245.365931] ? do_syscall_64+0x26/0x610 [ 245.370008] __x64_sys_write+0x73/0xb0 [ 245.373909] do_syscall_64+0x103/0x610 [ 245.377822] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 245.383022] RIP: 0033:0x458da9 [ 245.386222] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 245.405142] RSP: 002b:00007f09a960dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 245.412876] RAX: ffffffffffffffda RBX: 00007f09a960dc90 RCX: 0000000000458da9 [ 245.420157] RDX: 000000000000001b RSI: 0000000020000000 RDI: 0000000000000003 21:23:59 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 21:23:59 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x100000000, 0x0) syz_extract_tcp_res(&(0x7f0000000180), 0x80000001, 0xbc11b6e) ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f00000000c0)={0x0, @reserved}) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 245.427439] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 245.434720] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f09a960e6d4 [ 245.441996] R13: 00000000004c4d89 R14: 00000000004de1b0 R15: 0000000000000004 21:23:59 executing program 1 (fault-call:1 fault-nth:2): r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 245.497067] hfsplus: unable to find HFS+ superblock 21:23:59 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 245.592710] FAULT_INJECTION: forcing a failure. [ 245.592710] name failslab, interval 1, probability 0, space 0, times 0 [ 245.637426] CPU: 1 PID: 11301 Comm: syz-executor.1 Not tainted 4.19.38 #6 [ 245.644402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 245.653763] Call Trace: [ 245.656375] dump_stack+0x172/0x1f0 [ 245.660026] should_fail.cold+0xa/0x1b [ 245.663934] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 245.669054] ? netlink_deliver_tap+0x146/0xc30 [ 245.673659] __should_failslab+0x121/0x190 [ 245.677906] should_failslab+0x9/0x14 [ 245.681716] kmem_cache_alloc+0x47/0x700 [ 245.685797] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 245.691355] ? check_preemption_disabled+0x48/0x290 [ 245.696380] ? lock_acquire+0x16f/0x3f0 [ 245.700365] skb_clone+0x156/0x3c0 [ 245.703919] netlink_deliver_tap+0x98a/0xc30 [ 245.708343] netlink_unicast+0x5ad/0x720 [ 245.712417] ? netlink_attachskb+0x770/0x770 [ 245.716842] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 245.722393] netlink_sendmsg+0x8ae/0xd70 [ 245.726468] ? netlink_unicast+0x720/0x720 [ 245.730719] ? selinux_socket_sendmsg+0x36/0x40 [ 245.735410] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 245.740957] ? security_socket_sendmsg+0x93/0xc0 [ 245.745724] ? netlink_unicast+0x720/0x720 [ 245.749969] sock_sendmsg+0xdd/0x130 [ 245.753697] sock_write_iter+0x27c/0x3e0 [ 245.757771] ? sock_sendmsg+0x130/0x130 [ 245.761776] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 245.767329] ? iov_iter_init+0xc6/0x1f0 [ 245.771321] __vfs_write+0x58e/0x820 [ 245.775047] ? kernel_read+0x120/0x120 [ 245.778950] ? selinux_file_permission+0x92/0x550 [ 245.783816] ? security_file_permission+0x8f/0x230 [ 245.788757] ? rw_verify_area+0x118/0x360 [ 245.792918] vfs_write+0x20c/0x560 [ 245.796473] ksys_write+0xea/0x1f0 [ 245.800021] ? __ia32_sys_read+0xb0/0xb0 [ 245.804098] ? do_syscall_64+0x26/0x610 [ 245.808084] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 245.813453] ? do_syscall_64+0x26/0x610 [ 245.817439] __x64_sys_write+0x73/0xb0 [ 245.821339] do_syscall_64+0x103/0x610 [ 245.825241] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 245.830437] RIP: 0033:0x458da9 [ 245.833638] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 245.852547] RSP: 002b:00007f09a960dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 245.860267] RAX: ffffffffffffffda RBX: 00007f09a960dc90 RCX: 0000000000458da9 [ 245.867559] RDX: 000000000000001b RSI: 0000000020000000 RDI: 0000000000000003 [ 245.874833] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 21:23:59 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(0x0, 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) [ 245.882108] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f09a960e6d4 [ 245.889380] R13: 00000000004c4d89 R14: 00000000004de1b0 R15: 0000000000000004 [ 245.910964] hfsplus: unable to find HFS+ superblock 21:23:59 executing program 1 (fault-call:1 fault-nth:3): r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 245.971574] hfsplus: unable to find HFS+ superblock 21:24:00 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) setxattr$security_smack_transmute(&(0x7f0000000440)='./bus\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:24:00 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 246.039017] 9pnet: Insufficient options for proto=fd [ 246.103580] hfsplus: unable to find HFS+ superblock [ 246.173996] hfsplus: unable to find HFS+ superblock 21:24:00 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:00 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) [ 246.324665] hfsplus: unable to find HFS+ superblock 21:24:00 executing program 2: syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x5, 0x60080) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 246.380926] hfsplus: unable to find HFS+ superblock 21:24:00 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:00 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 246.547241] hfsplus: unable to find HFS+ superblock 21:24:00 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="0f00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 246.636868] hfsplus: unable to find HFS+ superblock 21:24:00 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1000000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:00 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x0e', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:00 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(0x0, 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:24:00 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1c00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 246.976300] 9pnet: Insufficient options for proto=fd 21:24:01 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) setxattr$security_smack_transmute(&(0x7f0000000440)='./bus\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:24:01 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="c000000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:01 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:01 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40), 0x0, 0x0, 0x0) 21:24:01 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x301200, 0x0) getsockopt$inet_mreq(r1, 0x0, 0x0, &(0x7f0000000700)={@multicast2, @empty}, &(0x7f0000000740)=0x8) recvmmsg(r0, &(0x7f0000001580)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)=""/193, 0xc1}, {&(0x7f0000000880)=""/105, 0x69}, {&(0x7f0000000900)=""/211, 0xd3}, {&(0x7f0000000a00)=""/203, 0xcb}, {&(0x7f0000000b00)=""/179, 0xb3}], 0x5}, 0xfffffffffffffffd}, {{&(0x7f0000000c40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000cc0)=""/78, 0x4e}, {&(0x7f0000000d40)=""/32, 0x20}, {&(0x7f0000000d80)=""/153, 0x99}, {&(0x7f0000000e40)=""/133, 0x85}], 0x4, &(0x7f0000000f40)=""/13, 0xd}, 0xd7a}, {{&(0x7f0000000f80)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000001440)=[{&(0x7f0000001000)=""/144, 0x90}, {&(0x7f00000010c0)=""/124, 0x7c}, {&(0x7f0000001140)=""/223, 0xdf}, {&(0x7f0000001240)=""/209, 0xd1}, {&(0x7f0000001340)=""/37, 0x25}, {&(0x7f0000001380)=""/187, 0xbb}], 0x6, &(0x7f00000014c0)=""/191, 0xbf}, 0x81}], 0x3, 0x40002060, &(0x7f0000001640)={0x0, 0x989680}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000006c0)={0x8, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}]}) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x7, 0x280000) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000140)={0x3, 0x9, 0x4, 0x40000020, {0x0, 0x2710}, {0x7, 0x0, 0x7, 0x400, 0xff, 0x5, "006cd0c7"}, 0xbb08, 0x0, @planes=&(0x7f0000000100)={0xc10, 0xfffffffffffffff7, @fd=r3, 0x9}, 0x4}) [ 247.172278] hfsplus: unable to find HFS+ superblock 21:24:01 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="c00e000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 247.257281] hfsplus: unable to find HFS+ superblock 21:24:01 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="effd000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:01 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:01 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="e03f030018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 247.439428] hfsplus: unable to find HFS+ superblock [ 247.528240] hfsplus: unable to find HFS+ superblock 21:24:01 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00002018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:01 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:24:01 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\f', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 247.921028] 9pnet: Insufficient options for proto=fd 21:24:02 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) setxattr$security_smack_transmute(&(0x7f0000000440)='./bus\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:24:02 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="effdffff18000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:02 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40), 0x0, 0x0, 0x0) 21:24:02 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:02 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) socket$inet(0x2, 0x3, 0x100000000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 248.213625] hfsplus: unable to find HFS+ superblock 21:24:02 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b0000000f000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 248.280459] hfsplus: unable to find HFS+ superblock [ 248.331056] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pig=11411 comm=syz-executor.1 21:24:02 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:02 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000010000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 248.457515] hfsplus: unable to find HFS+ superblock [ 248.519936] hfsplus: unable to find HFS+ superblock 21:24:02 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000011000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:02 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:24:02 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 248.668130] hfsplus: unable to find HFS+ superblock 21:24:02 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000012000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 248.726685] hfsplus: unable to find HFS+ superblock [ 248.805957] 9pnet: Insufficient options for proto=fd 21:24:03 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) setxattr$security_smack_transmute(&(0x7f0000000440)='./bus\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:24:03 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000013000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:03 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:03 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40), 0x0, 0x0, 0x0) 21:24:03 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xfff, 0x1) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x53d) [ 249.279566] hfsplus: unable to find HFS+ superblock 21:24:03 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000014000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 249.376806] hfsplus: unable to find HFS+ superblock [ 249.386377] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 21:24:03 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose, 0xfffffffffffffffd}, [@rose, @rose, @default, @default, @netrom, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose, @bcast]}, 0x38) listen(r0, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x7ffd, 0x0) accept$alg(r1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0xe, &(0x7f0000000480)="cc4ae4c49af08cba3f6e38bcae5f016232e30c8bf5f3575555acff203e3cfc", 0x1f) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00000003c0)={0x0, 0x5a, "dbc5963f2837122e52841cac2df63f2c459a30e3ca95181376456e6245814ced492d21b878c121d70c7424e4cc386b50daa406cacbd4f62b068cc4d89a6f8e2a94ee1c59fdf51183afdb1447106e7c1150c1872b1a114fbb314d"}, &(0x7f0000000440)=0x62) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000580)=ANY=[@ANYRES32=r2, @ANYBLOB="ff07d8006e5020b4beb4e61f415aec35b99465895f2efc717a49251455fdff3accd60a4a6722c46e02b1909a1664624c86acbdd98472961b268931e540938b6c70653b0f3bee5ae9ca05c912af02af3f6a9d1ad4536b269e72f50fd3395a3ba1776d4fae86b76f2cd28baadaa84122a53239035eafd2cc70814d35dac91d170b5bc2ed984c26c1968fd326c7ac913546cc0fd81d1e54284be190d0a3ed4a1e0b8f30138dae1e0d1c258e263fe48bac5db43e383e30ce15bb330fe45253fa1189e7861c93a3748a404e9e5da9d7384da7b33e7f6e3644020000000000"], 0xfffffffffffffe85) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'vet\x00', 0x402}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) connect$l2tp(r1, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @remote}, 0x1, 0x2, 0x2, 0x3}}, 0x26) accept$alg(r1, 0x0, 0x0) accept$alg(r0, 0x0, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f00000000c0)={@empty, @multicast1, 0x0}, &(0x7f00000001c0)=0xc) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6=@loopback, 0x4e21, 0x0, 0x4e23, 0x3, 0x2, 0x0, 0x80, 0x3d, r3, r4}, {0x6, 0x12e9, 0xbe0, 0x7ff, 0x2, 0x7fffffff, 0xff, 0x3f}, {0xfffffffffffffffd, 0x5, 0x1, 0x6}, 0x40, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x15}, 0x4d4, 0xff}, 0x2, @in6=@rand_addr="d9defbf90be8b5e5690d4fbb1ff5afa1", 0x3501, 0x7, 0x1, 0x6, 0x9, 0x88, 0x5c}}, 0xe8) 21:24:03 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplusH', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:03 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000015000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:03 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) [ 249.561325] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 21:24:03 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000016000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 249.706031] 9pnet: Insufficient options for proto=fd 21:24:03 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 249.737101] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. [ 249.801716] hfsplus: unable to find HFS+ superblock [ 249.869737] hfsplus: unable to find HFS+ superblock 21:24:04 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) setxattr$security_smack_transmute(&(0x7f0000000440)='./bus\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:24:04 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b02000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:04 executing program 4: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000015000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:04 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:04 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x20000, 0x40) 21:24:04 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:24:04 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b04000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:04 executing program 4: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000015000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 250.471594] hfsplus: unable to find HFS+ superblock [ 250.472190] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. [ 250.555762] hfsplus: unable to find HFS+ superblock 21:24:04 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b06000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 250.590534] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. 21:24:04 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:04 executing program 4: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000015000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:04 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b0a000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 250.742235] hfsplus: unable to find HFS+ superblock [ 250.771495] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. [ 250.803203] hfsplus: unable to find HFS+ superblock 21:24:05 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(0x0, 0x27e, 0x32) setxattr$security_smack_transmute(&(0x7f0000000440)='./bus\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:24:05 executing program 4: write(0xffffffffffffffff, &(0x7f0000000000)="1b00000015000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:05 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplusD', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:05 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b0c000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:05 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f00000000c0), &(0x7f0000000100)=0xc) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:24:05 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:24:05 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x13, 0x0, 0x0, 0x0, 0xffffffffffffff6c}}], 0x1f8, 0x0, 0x0) 21:24:05 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b0e000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:05 executing program 4: write(0xffffffffffffffff, &(0x7f0000000000)="1b00000015000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:05 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b0f000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:05 executing program 4: write(0xffffffffffffffff, &(0x7f0000000000)="1b00000015000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:05 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplusB', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:06 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(0x0, 0x27e, 0x32) setxattr$security_smack_transmute(&(0x7f0000000440)='./bus\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:24:06 executing program 4: r0 = socket(0x0, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000015000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:06 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b10000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:06 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:06 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f00000000c0)) 21:24:06 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) [ 252.832945] hfsplus: unable to find HFS+ superblock 21:24:06 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b60000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:06 executing program 4: r0 = socket(0x0, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000015000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 252.909177] hfsplus: unable to find HFS+ superblock 21:24:06 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus+', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:06 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1be0000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:07 executing program 4: r0 = socket(0x0, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000015000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:07 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1bf0000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:07 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(0x0, 0x27e, 0x32) setxattr$security_smack_transmute(&(0x7f0000000440)='./bus\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:24:07 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1bb5010018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:07 executing program 4: r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000000)="1b00000015000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:07 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplusX', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:07 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x1f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:24:07 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(0x0, 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:24:07 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00060018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:07 executing program 4: r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000000)="1b00000015000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:07 executing program 4: r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000000)="1b00000015000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:07 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b000a0018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:07 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:07 executing program 4: socket(0x10, 0x80803, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="1b00000015000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 254.023055] 9pnet: Insufficient options for proto=fd [ 254.023443] hfsplus: unable to find HFS+ superblock [ 254.074049] hfsplus: unable to find HFS+ superblock 21:24:08 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x32) setxattr$security_smack_transmute(&(0x7f0000000440)='./bus\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:24:08 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b000c0018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:08 executing program 4: socket(0x10, 0x80803, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="1b00000015000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:08 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplusP', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:08 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)={{0x10b, 0x7fff, 0x1, 0x2fc, 0xa2, 0x5000000, 0xeb, 0xfffffffffffffffb}, "3fcb87d0b86b"}, 0x26) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:24:08 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(0x0, 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:24:08 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b000e0018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:08 executing program 4: socket(0x10, 0x80803, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="1b00000015000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:08 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b000f0018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:08 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplusM', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:08 executing program 4: r0 = socket(0x10, 0x80803, 0x0) write(r0, 0x0, 0x0) 21:24:08 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b003f0018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 255.091282] 9pnet: Insufficient options for proto=fd 21:24:09 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x32) setxattr$security_smack_transmute(&(0x7f0000000440)='./bus\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:24:09 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b65580018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:09 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplusT', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:09 executing program 4: r0 = socket(0x10, 0x80803, 0x0) write(r0, 0x0, 0x0) 21:24:09 executing program 2: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x4800) ioctl$RTC_VL_CLR(r0, 0x7014) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:24:09 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(0x0, 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:24:09 executing program 4: r0 = socket(0x10, 0x80803, 0x0) write(r0, 0x0, 0x0) 21:24:09 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) syz_mount_image$ntfs(&(0x7f00000000c0)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x2, 0x9, &(0x7f0000000740)=[{&(0x7f0000000140)="fa3be9c52b10df2e1a5040f2fbb02abdf00766a9aab4e7484dfdbc8e92d5ed7ffcb605a235b553de5cddf615cf242d93ea69c37463db0a71312ae732f6b16e915c8dcdce712b89de8bbadf904cd2d02d17b5c93f26a0e8654b84c6748a32f1676bd604835e01f70760fcd0a1f9025b4b8b8bd11f5ebd3c94274f923d61d9c8e10208b7d230056c75adb5e532f998b3384ef49659deb5d28f1d34294002139a339e0e3e1ea80d1dc1f09372", 0xab, 0x5}, {&(0x7f0000000200)="7be74a183ce347bb7d04c5008780f2f6e6a47dadedf3a386cbe31f0b578cd121519d59f30da82470edbc1e7c773a4ca896e43f3ecd23171375c2e02ae21346bbe2d89f384143bf7c44a23dd20a14935966995e7721f01a023ba9fdc0dc339ebc0e91fdf055cc4af389ff05a494330f6fae4892e7f0d707efc0fc03644606dfd2af7ac1e3db243ac67590349b6e1157855a4f2ea34a422ee08ae89429957b1c51812424c7d889fec9f6dbd4e9827da7", 0xaf, 0x8b}, {&(0x7f00000002c0)="9c533cf5daaa31e326f58b3d2308276b818dadc77fc25d6f5597c46da2e0ce9b6cbf395c192f25a095a2c88224b5ef01f17c14ccc69dfdc408874094c1edb977eb08c743e0ff41129805bb74cda32342ddef2437bc7dabc73391e2bc9a593c81bda7fada920eea8f4c", 0x69, 0x1}, {&(0x7f0000000340)="e7176f97c2bc4f05385adfb4cb75c28c55e20328cfa4e79aadb7b8e222d26684e1246837606c0007c51689d62247828b03155ba809cdec5384c08c4192c035e18ea28cff52b0e5de6b2b66586d137b86a3ce313d334373cd3e30ce81eef79bbebd88c83c0f518fcdd23ddefdeafeeba8b3be0669afc86497319b9d6f0ed48c3a491b3797d48fb70616ac3503f5f2d93fbcf18cffa773840d34519faa2ddbb6e1f82e282a75d76137855cabdf1b7fe51e8150b1da5a692c20e4b973ceded40bb5ce6371a8ed75bdf26f07ce5260b06fcf923d4fe5fade52c7032f2729fa0d7180eb753bb8aa4cd54695", 0xe9, 0x7cb40000}, {&(0x7f0000000440)="097ce7924f1f50c1a9cfbf1e80c2bb9517a1627c285f50fcfcfb1ce0b022cf10b0e55f1610b143e9aaebcd57f69d5b6db326b856c5d6a31365d8053c822c9bb31c7bee0f2fc5ba", 0x47, 0x5}, {&(0x7f00000004c0)="29fcc3d2f7016d7a35364601c4adade48c24d2377cc51f740092836843c14ba9777fec0ab27e6f9ca5050a11819eb2ab4f550c71a572752040aa7b304bf091117e4221cb308f13be6028d6c7e447dc14ca734cc697149d8bcf3fe5633ec1962032b7e23355c7388f8135cb76defb926f3155a910b24740860356465bafb6ec1fecb2ee8670125cbd110cb4959e638c06230ac73e1794cea6db5e7965aa6627d262a169f9b1c614b5e120760ed3286b1663dc2ffc3c21342abba3992181919e7141e1b75e14abfff1ff1f5d168ef97b9af2e036ac442aff4d1440fded7830ad77c0cd", 0xe2, 0x7}, {&(0x7f00000005c0)="fd6095f4949ad69d9d7f4c2c74cb9279c75543c729743eaa467b500cd1ccca1ff6ebc1a689a4a8f0148c10f6eadcbcc24b1f2e19344570a0db290b915b79eae9c21fd94b46ea1a4e5f1999c26a61916e0b8aeb35e9d513184f5cd2882f489768c3357f45a6999bdf6a96a68bbdd0a57f9609646a71462ec4b051b8f1fe6d0b9e4bc6893170ffc964a6842064244827871df389fea638a2c0c1227b4e91442a", 0x9f, 0x3}, {&(0x7f0000000680)="9be850491f220d826b929d47feb0d5fa6196db11deeb4d97c398b59e365636", 0x1f, 0x10001}, {&(0x7f00000006c0)="419198026e3cfc52e0edc414b558e70050a9a0c21a71336bf9da6d019b18877adec60bd42b7affa1690fb0d3a5b4127d5ffd840f902bc715a7551395d8e894c9a6e0107d4b0a2f4c452372e41543332646c019bb391abaa8f786b3c362e25bf01c8bc8c6abe0274c5f3d08b5ee8d1f49", 0x70, 0x7}], 0x1008, &(0x7f0000000840)={[{@case_sensitive_no='case_sensitive=no'}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@seclabel='seclabel'}, {@smackfstransmute={'smackfstransmute', 0x3d, '/proc/capi/capi20ncci\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/proc/capi/capi20ncci\x00'}}, {@hash='hash'}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0xbcb133c6f285ea58, 0x0) 21:24:09 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00600018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:09 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplusS', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:09 executing program 4: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000), 0x0) 21:24:09 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getsockname$netrom(r0, &(0x7f0000000080)={{0x3, @netrom}, [@bcast, @rose, @remote, @default, @bcast, @remote, @bcast, @default]}, &(0x7f0000000100)=0x48) [ 256.156338] 9pnet: Insufficient options for proto=fd 21:24:10 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x32) setxattr$security_smack_transmute(&(0x7f0000000440)='./bus\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:24:10 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b58650018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:10 executing program 4: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000), 0x0) 21:24:10 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplusH', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:10 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x20001, 0x0) getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000240)=0xfa, &(0x7f0000000280)=0x4) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x7f, 0x7, [0xab, 0x9, 0x5, 0x508, 0x4, 0x4, 0x8000]}, &(0x7f00000001c0)=0x16) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000200)={r2, 0x101}, 0x8) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80001) symlinkat(&(0x7f0000000080)='./file0\x00', r3, &(0x7f0000000100)='./file0\x00') connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:24:10 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(0xffffffffffffffff, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:24:10 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00810018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:10 executing program 4: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000), 0x0) 21:24:10 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x2e74, 0x5, 0x5, 0x2ba, 0x1}) 21:24:10 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:10 executing program 4: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000015000700f677b8ed8641", 0xe) [ 256.877676] hfsplus: unable to find HFS+ superblock 21:24:10 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b01b50018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 256.962533] hfsplus: unable to find HFS+ superblock [ 257.121341] 9pnet: Insufficient options for proto=fd 21:24:11 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(&(0x7f0000000440)='./bus\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:24:11 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00e00018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:11 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:11 executing program 4: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000015000700f677b8ed8641", 0xe) 21:24:11 executing program 4: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000015000700f677b8ed8641", 0xe) [ 257.368226] hfsplus: unable to find HFS+ superblock [ 257.420097] hfsplus: unable to find HFS+ superblock 21:24:11 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(0xffffffffffffffff, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:24:11 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00f00018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:11 executing program 4: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000015000700f677b8ed8641a1c10aab80ff00", 0x15) 21:24:11 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:11 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@rose, @null, @default, @netrom, @netrom, @rose, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) shmget(0x0, 0x2000, 0x78000000, &(0x7f0000ffe000/0x2000)=nil) [ 257.972950] hfsplus: unable to find HFS+ superblock 21:24:11 executing program 4: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000015000700f677b8ed8641a1c10aab80ff00", 0x15) 21:24:12 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000067000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:12 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) [ 258.040289] 9pnet: Insufficient options for proto=fd [ 258.051810] hfsplus: unable to find HFS+ superblock 21:24:12 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:12 executing program 4: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000015000700f677b8ed8641a1c10aab80ff00", 0x15) [ 258.125374] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=103 sclass=netlink_route_socket pig=11753 comm=syz-executor.1 [ 258.194327] hfsplus: unable to find HFS+ superblock 21:24:12 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00020018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:12 executing program 4: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000015000700f677b8ed8641a1c10aab80ff00000000", 0x18) [ 258.300548] hfsplus: unable to find HFS+ superblock 21:24:12 executing program 4: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000015000700f677b8ed8641a1c10aab80ff00000000", 0x18) 21:24:12 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:12 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00040018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:12 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(0xffffffffffffffff, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:24:12 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) r1 = socket(0xf, 0x802, 0xfffffffffffffff7) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x9, 0xfffffffffffffffa, 0x6c}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={r2, 0x7fff, 0xffff, 0x1f0000000000}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x2, 0x1) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:24:12 executing program 4: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000015000700f677b8ed8641a1c10aab80ff00000000", 0x18) [ 258.906336] hfsplus: unable to find HFS+ superblock 21:24:12 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00060018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 258.969185] 9pnet: Insufficient options for proto=fd [ 258.987817] hfsplus: unable to find HFS+ superblock 21:24:13 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, &(0x7f0000000480)='TRUE', 0x4, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:24:13 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b000a0018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:13 executing program 4: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000015000700f677b8ed8641a1c10aab80ff000000000002", 0x1a) 21:24:13 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x100000000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0xf0, 0xc, &(0x7f00000000c0)="f93ca8f5e8168031e0d8293379514889689ca085b5da38d246520e5dad40f15c21df5ff85d56980f3edb43c9c55b4dc75633753507c70736c80782ac75ac7037b30657dada2a5f89c014fb1014595446c4d1ef141a690c96ec6ae17d46d7868163962b772ef1c3f27454bd387f34d2cd103bf3c81d90e56d01dad38734326561937d757ca467340dca0edcc0990c919a4c41828d124052c0b16eb99737037a5a6c0a477006c41b36b4cff1dea92b41347b20695d36daf9e0050a03dd47a41c756f8c9fa3a08174ec395d840acec8bf7948de4a440158a07185b811116ce1e7f35f0e465cf317a319ce329967d453c767", &(0x7f00000001c0)=""/12, 0x52}, 0x28) ioctl$TIOCLINUX6(r0, 0x541c, &(0x7f0000000240)={0x6, 0x7}) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @null, @netrom, @rose, @rose, @bcast]}, 0x48) listen(r1, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20010000, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000280)={0x80, 0x81, 0x81, 0x2, 0x0, 0x3ff, 0x0, 0x9, 0x7, 0x3f, 0x200, 0x1f}) 21:24:13 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\xc0', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:13 executing program 4: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000015000700f677b8ed8641a1c10aab80ff000000000002", 0x1a) 21:24:13 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b000c0018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:13 executing program 4: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000015000700f677b8ed8641a1c10aab80ff000000000002", 0x1a) 21:24:13 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, 0xffffffffffffffff) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:24:13 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:13 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b000e0018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:13 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000280)={0x1, 0x1, @raw_data}) [ 259.819062] hfsplus: unable to find HFS+ superblock [ 259.878024] hfsplus: unable to find HFS+ superblock [ 259.893936] 9pnet: Insufficient options for proto=fd 21:24:14 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:24:14 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b000f0018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:14 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca\x0f.?\xad\xae\x0f\xb5\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\x03?v\xe8$\xfc\xf0\xb8\xda=\x8aWT2\x99?$\xb7FW\x19\xa0\xdbX\t\x10\x8f\xac\xbd') openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='vboxnet1(.\x00'}, 0x30) kcmp(r1, r2, 0x4, r0, r0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:24:15 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) syz_execute_func(&(0x7f00000000c0)="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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 21:24:15 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00f00018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:15 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\xff', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:15 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00b50118000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:15 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) syz_execute_func(&(0x7f00000000c0)="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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 21:24:15 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:15 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, 0xffffffffffffffff) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:24:15 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000618000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 261.653758] hfsplus: unable to find HFS+ superblock [ 261.694337] 9pnet: Insufficient options for proto=fd 21:24:15 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) syz_execute_func(&(0x7f00000000c0)="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") [ 261.722392] hfsplus: unable to find HFS+ superblock 21:24:15 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000a18000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:16 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x0) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:24:16 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplusk', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:16 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000c18000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:16 executing program 2: sysfs$3(0x3) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x60) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e20, @remote}}, 0xffffffffffffffc6, 0x9, 0x8, 0x9, 0x3ff}, &(0x7f0000000440)=0x98) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000480)={r2, 0x3ff, 0x10, "201e5e30d39de490e5dd6f544423692f"}, 0x18) r3 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x7ff, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r3, 0x401870cc, &(0x7f00000000c0)={0x7, 0x4, 0x8, 0xad9f}) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:24:16 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000e18000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:16 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:24:16 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000f18000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:16 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:16 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) syz_execute_func(&(0x7f00000000c0)="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") [ 262.709734] hfsplus: unable to find HFS+ superblock 21:24:16 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00003f18000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 262.761437] hfsplus: unable to find HFS+ superblock 21:24:16 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:16 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00655818000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 262.946902] hfsplus: unable to find HFS+ superblock [ 263.010254] hfsplus: unable to find HFS+ superblock 21:24:17 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x0) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:24:17 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00006018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:17 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:17 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000100)=0xc000) ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e22, 0xfffffffffffffffe, @ipv4={[], [], @broadcast}, 0xffffffff}}, [0xfffffffffffffffb, 0x1, 0x5, 0x7, 0xfff, 0x2, 0x6a9, 0x5, 0x4, 0x1, 0x0, 0x8e61, 0x9, 0x1, 0x4fb7]}, &(0x7f00000002c0)=0x100) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000300)={r2, 0x3}, 0x8) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) listen(r0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000180)) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f00000003c0)=""/74) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000340), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcs\x00', 0x40080000, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x1cd}}], 0x1, 0x140, 0x0) 21:24:17 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:24:17 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) syz_execute_func(&(0x7f00000000c0)="984a2ae92c18964c0f05bf03000000c4a37bf0c50341e2e9c422e9aabb3c0000004a0fc7a4ea70db00000f383a9e020000000f0d2046205032104b26660f38091e8f897c80443f00a2631bc421045f4607c421dd589fc4e10bf8e426f2f045f61964620f42d25d2f262e2e66450f7d64c60865f2ad3a0065f20f7cd8efa1a12ad764d38f53efc4211de34f006766f2ab440fec3f66f3adc462b1f72ec3c489309294d8d8000000000fc4634148f70000c2a0c10b00cca27a0e0fc481cb5ac70f9f3c6436b2aa66450fc4650000c4e39978c10443a171dd4ecdcda2660f38346800c4e3295d4c3d2a147c7cc104b05c7d75c4426507af0f0000000f5fd25cf3460f2aabeeee0f7ba5a9a50000ffff660f79ca553131fbfb3b62") [ 263.631232] hfsplus: unable to find HFS+ superblock 21:24:17 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) r1 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x7a, 0x206080) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000100)={0x8, {{0xa, 0x4e24, 0x7, @empty, 0x80}}, {{0xa, 0x4e24, 0x2, @empty, 0x4}}}, 0x108) r2 = getpgrp(0xffffffffffffffff) mq_notify(r1, &(0x7f0000000280)={0x0, 0x29, 0x0, @tid=r2}) listen(r0, 0x3) ioctl$TCGETX(r1, 0x5432, &(0x7f0000000240)) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x10000, 0x0) fcntl$addseals(r3, 0x409, 0x8) mmap(&(0x7f00003d7000/0x3000)=nil, 0x3000, 0x3, 0x8031, r0, 0xfffffffffffffffd) 21:24:17 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00586518000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 263.708277] hfsplus: unable to find HFS+ superblock 21:24:17 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:17 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00008118000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:17 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) fcntl$setpipe(r0, 0x407, 0x0) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x400400, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000180)=0xffffffff00000000) recvmmsg(r1, &(0x7f0000003a40), 0x0, 0x2000000000000000, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000001c0)={0xd4, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1a}}}}, 0x88) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x24, &(0x7f0000000080)={@dev, @initdev, 0x0}, &(0x7f00000000c0)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'nr0\x00', r2}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000280), 0x4) [ 263.892106] hfsplus: unable to find HFS+ superblock 21:24:17 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b0001b518000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 263.960434] hfsplus: unable to find HFS+ superblock 21:24:18 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(0xffffffffffffffff, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:24:18 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:18 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b0000e018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:18 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:24:18 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @default}, [@rose, @rose, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom, @netrom, @rose, @rose, @bcast]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) recvmmsg(r0, &(0x7f0000003a40), 0x1, 0x0, 0x0) 21:24:18 executing program 4: syz_execute_func(&(0x7f00000000c0)="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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 264.771086] hfsplus: unable to find HFS+ superblock 21:24:18 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b0000f018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:18 executing program 4: syz_execute_func(&(0x7f00000000c0)="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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 264.840703] hfsplus: unable to find HFS+ superblock 21:24:18 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:18 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b0000000f000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:19 executing program 4: syz_execute_func(&(0x7f00000000c0)="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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 265.018200] hfsplus: unable to find HFS+ superblock 21:24:19 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000011000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 265.064086] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pig=11974 comm=syz-executor.1 [ 265.096265] hfsplus: unable to find HFS+ superblock 21:24:19 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(0xffffffffffffffff, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:24:19 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:19 executing program 4: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_execute_func(&(0x7f00000000c0)="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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 21:24:19 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000012000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:19 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) getsockopt(r0, 0x40, 0x5, &(0x7f0000000080)=""/211, &(0x7f0000000180)=0xd3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:24:19 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, 0x0, 0x0) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:24:20 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000013000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 266.021923] hfsplus: unable to find HFS+ superblock 21:24:20 executing program 4: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_execute_func(&(0x7f00000000c0)="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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 266.108096] hfsplus: unable to find HFS+ superblock 21:24:20 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:20 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000014000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:20 executing program 4: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_execute_func(&(0x7f00000000c0)="984a2ae92c18964c0f05bf03000000c4a37bf0c50341e2e9c422e9aabb3c0000004a0fc7a4ea70db00000f383a9e020000000f0d2046205032104b26660f38091e8f897c80443f00a2631bc421045f4607c421dd589fc4e10bf8e426f2f045f61964620f42d25d2f262e2e66450f7d64c60865f2ad3a0065f20f7cd8efa1a12ad764d38f53efc4211de34f006766f2ab440fec3f66f3adc462b1f72ec3c489309294d8d8000000000fc4634148f70000c2a0c10b00cca27a0e0fc481cb5ac70f9f3c6436b2aa66450fc4650000c4e39978c10443a171dd4ecdcda2660f38346800c4e3295d4c3d2a147c7cc104b05c7d75c4426507af0f0000000f5fd25cf3460f2aabeeee0f7ba5a9a50000ffff660f79ca553131fbfb3b62") sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 266.271529] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. [ 266.293968] hfsplus: unable to find HFS+ superblock 21:24:20 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000015000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 266.382810] hfsplus: unable to find HFS+ superblock [ 266.425097] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 21:24:20 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(0xffffffffffffffff, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:24:20 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:20 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) syz_execute_func(0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 21:24:20 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000016000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:20 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose, 0x8000000000003}, [@rose, @rose, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose]}, 0xfffffffffffffebd) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:24:20 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, 0x0, 0x0) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:24:20 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) syz_execute_func(0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 266.866601] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. [ 266.901618] hfsplus: unable to find HFS+ superblock 21:24:20 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000218000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:20 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000418000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 266.976324] hfsplus: unable to find HFS+ superblock 21:24:20 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) syz_execute_func(0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 21:24:21 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:21 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) syz_execute_func(&(0x7f00000000c0)="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") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 267.306543] hfsplus: unable to find HFS+ superblock [ 267.395057] hfsplus: unable to find HFS+ superblock 21:24:21 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, 0xffffffffffffffff) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:24:21 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000618000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:21 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:21 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x10003) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x1ff) r1 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000440)=""/225, 0xe1}, {&(0x7f00000000c0)=""/33, 0x21}, {&(0x7f0000000540)=""/92, 0x5c}, {&(0x7f00000005c0)=""/42, 0x2a}], 0x4, 0x0, 0x0, 0x40000}, 0x4004) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x40002, 0x0) setsockopt$inet_opts(r2, 0x0, 0x1000000, &(0x7f0000000140)="ad18407aea60c35dd3baf74e36d67e4019033706b595f059b1b72622b329bf2420fb2ea2d2b8f3ad42cef5f2a388f6520a6acb3abf6de76cafc73e796904b444a07ca0f83aead878f499ab83b96ca23e29a75a680c36a80e8197f1c50b8a5687fd67fc35f84f11752e67731bbfe3acfa3c4ff0cc727d139cc57eda55903bc647db8529002a7dbc5e02eb851e3de0a04c2b4e101f005474318f843cbad1107a4e0d5f89e8270474451e5534015414bd5baa5d8600"/200, 0xffffffffffffffce) accept$inet(r0, 0x0, &(0x7f0000000300)=0x1cb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000680)={0x0, 0x80, 0x4, 0x2}, 0x10) recvfrom(r0, &(0x7f0000000340)=""/226, 0xe2, 0x2100, &(0x7f0000000280)=@l2={0x1f, 0x3, {0x9fcf, 0x1000, 0x5, 0x7, 0x8607, 0x3}, 0x3, 0x6}, 0x80) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) connect$l2tp(r2, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @remote}, 0x2, 0x3, 0x0, 0x4}}, 0x26) 21:24:21 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, 0x0, 0x0) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) [ 267.797300] hfsplus: unable to find HFS+ superblock 21:24:21 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000a18000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 267.870152] hfsplus: unable to find HFS+ superblock 21:24:21 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:21 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000c18000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 268.016617] hfsplus: unable to find HFS+ superblock [ 268.069868] hfsplus: unable to find HFS+ superblock 21:24:22 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000e18000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:22 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:22 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000f18000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 268.222612] hfsplus: unable to find HFS+ superblock 21:24:22 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) syz_execute_func(&(0x7f00000000c0)="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") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 268.280182] hfsplus: unable to find HFS+ superblock 21:24:22 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, 0xffffffffffffffff) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:24:22 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:22 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00001018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:22 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x315, 0x0}}], 0x1, 0x2, 0x0) 21:24:22 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:24:22 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00006018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 268.711497] hfsplus: unable to find HFS+ superblock [ 268.780227] hfsplus: unable to find HFS+ superblock 21:24:22 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b0000e018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:22 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 268.910187] hfsplus: unable to find HFS+ superblock [ 268.961944] hfsplus: unable to find HFS+ superblock 21:24:22 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000067000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:22 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 269.081674] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=103 sclass=netlink_route_socket pig=12109 comm=syz-executor.1 [ 269.081830] hfsplus: unable to find HFS+ superblock 21:24:23 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b0000000f000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:23 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) syz_execute_func(&(0x7f00000000c0)="984a2ae92c18964c0f05bf03000000c4a37bf0c50341e2e9c422e9aabb3c0000004a0fc7a4ea70db00000f383a9e020000000f0d2046205032104b26660f38091e8f897c80443f00a2631bc421045f4607c421dd589fc4e10bf8e426f2f045f61964620f42d25d2f262e2e66450f7d64c60865f2ad3a0065f20f7cd8efa1a12ad764d38f53efc4211de34f006766f2ab440fec3f66f3adc462b1f72ec3c489309294d8d8000000000fc4634148f70000c2a0c10b00cca27a0e0fc481cb5ac70f9f3c6436b2aa66450fc4650000c4e39978c10443a171dd4ecdcda2660f38346800c4e3295d4c3d2a147c7cc104b05c7d75c4426507af0f0000000f5fd25cf3460f2aabeeee0f7ba5a9a50000ffff660f79ca553131fbfb3b62") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 269.198295] hfsplus: unable to find HFS+ superblock [ 269.210375] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pig=12113 comm=syz-executor.1 21:24:23 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, 0xffffffffffffffff) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:24:23 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req={0x1, 0x2, 0x5, 0x7}, 0x10) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:24:23 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:23 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000010000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:23 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) [ 269.602149] hfsplus: unable to find HFS+ superblock 21:24:23 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000011000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 269.677971] hfsplus: unable to find HFS+ superblock 21:24:23 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000012000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:23 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:23 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000013000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 269.847868] hfsplus: unable to find HFS+ superblock [ 269.918589] hfsplus: unable to find HFS+ superblock 21:24:23 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:23 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000014000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 270.058925] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. [ 270.072091] hfsplus: unable to find HFS+ superblock 21:24:24 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x18100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 270.134735] hfsplus: unable to find HFS+ superblock 21:24:24 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:24:24 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000015000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:24 executing program 4: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000), 0x0) 21:24:24 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:24 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:24:24 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x0, 0x0) epoll_pwait(r1, &(0x7f00000000c0)=[{}, {}, {}, {}], 0x4, 0x4, &(0x7f0000000100)={0x5}, 0x8) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000001c0)=""/151, 0x97}, {&(0x7f0000000280)=""/147, 0x93}, {&(0x7f0000000340)=""/209, 0xd1}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x4}, 0x5}, {{&(0x7f0000001480)=@x25, 0x163, &(0x7f0000002840)=[{&(0x7f0000004880)=""/92, 0x5c}, {&(0x7f0000001580)=""/148, 0x94}, {&(0x7f0000001640)=""/120, 0x78}, {&(0x7f00000016c0)=""/68, 0x44}, {&(0x7f0000001740)=""/203, 0xcb}, {&(0x7f0000001840)=""/4096, 0x1000}], 0x6, &(0x7f00000028c0)=""/4096, 0x1000}, 0x5}, {{&(0x7f00000038c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f0000003f40)=[{&(0x7f0000003940)=""/109, 0x6d}, {&(0x7f0000003a80)=""/144, 0x90}, {&(0x7f00000039c0)=""/92, 0x5c}, {&(0x7f0000003b40)=""/229, 0xe5}, {&(0x7f0000003c40)=""/136, 0x88}, {&(0x7f0000003d00)}, {&(0x7f0000003d40)=""/122, 0x7a}, {&(0x7f0000003dc0)=""/133, 0x85}, {&(0x7f0000003e80)=""/72, 0x48}, {&(0x7f0000003f00)=""/2, 0x2}], 0xa}, 0x2}, {{&(0x7f0000004000)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004080)=""/58, 0x3a}, {&(0x7f00000047c0)=""/130, 0x82}, {&(0x7f0000004180)=""/40, 0x28}], 0x3, &(0x7f0000004200)=""/78, 0x4e}, 0x9}, {{&(0x7f0000004280)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000004540)=[{&(0x7f0000004300)=""/144, 0x90}, {&(0x7f00000043c0)=""/65, 0x41}, {&(0x7f0000004440)=""/229, 0xe5}], 0x3, &(0x7f0000004900)=""/236, 0xec}}], 0x1, 0x0, 0x0) [ 270.492531] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 21:24:24 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000016000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000140)="0f060f20e06635004000000f22e0666436362e660f554c0066b9010a00000f3266b8000000000f23d00f21f86635100000020f23f8baa000b80e00ef87f5660f38dd2366b80b0000000f23c00f21f86635000009000f23f80f2060", 0x5b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 270.551451] hfsplus: unable to find HFS+ superblock [ 270.627869] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. [ 270.643071] hfsplus: unable to find HFS+ superblock 21:24:24 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000067000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:24 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:24 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) readv(r1, &(0x7f00000002c0), 0x17e) [ 270.777310] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=103 sclass=netlink_route_socket pig=12175 comm=syz-executor.1 [ 270.831346] hfsplus: unable to find HFS+ superblock 21:24:24 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018020700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 270.907348] hfsplus: unable to find HFS+ superblock [ 270.968226] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=536 sclass=netlink_route_socket pig=12183 comm=syz-executor.1 21:24:25 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:24:25 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:25 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018040700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:25 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'bond_slave_1\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}) 21:24:25 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) readv(r1, &(0x7f00000002c0), 0x17e) 21:24:25 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) [ 271.415051] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1048 sclass=netlink_route_socket pig=12193 comm=syz-executor.1 [ 271.441633] hfsplus: unable to find HFS+ superblock 21:24:25 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018060700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 271.529820] hfsplus: unable to find HFS+ superblock [ 271.570942] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1560 sclass=netlink_route_socket pig=12200 comm=syz-executor.1 21:24:25 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:25 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b000000180a0700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 271.748371] hfsplus: unable to find HFS+ superblock 21:24:25 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) readv(r1, &(0x7f00000002c0), 0x17e) [ 271.771909] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pig=12207 comm=syz-executor.1 21:24:25 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b000000180c0700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 271.847148] hfsplus: unable to find HFS+ superblock 21:24:25 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 271.971092] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3096 sclass=netlink_route_socket pig=12214 comm=syz-executor.1 [ 272.021913] hfsplus: unable to find HFS+ superblock [ 272.100001] hfsplus: unable to find HFS+ superblock 21:24:26 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:24:26 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b000000180e0700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:26 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x200}], 0x30}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x271) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x10c}, {&(0x7f0000000780)=""/98, 0x7c}, {&(0x7f0000000280)=""/112, 0x70}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4, &(0x7f0000000180)=""/45, 0x2d}}], 0x4000000000000e9, 0x0, &(0x7f0000000640)={0x77359400}) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000000)={{0x6, @rose}, [@null, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r3, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x700, 0x0) ioctl$NBD_SET_SIZE(r4, 0xab02, 0x4) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000180)={0x17, 0xae, &(0x7f00000000c0)="a149628b5500183476b90ceb41e62f231497a1098775edd0d908ddaf26f3b9384c1c25a02fed292157af75d4f19a0c8fe0502488e43b9817519cbb2a2af3b2b2ee7a37dfd9e0469a82567777a5795bf2f65223e4c73a816a5dbe72b574965aa0b22de96aefb0c6a34d9163f0519db477e3ffd9e6dbfe1e70c84ac15245b13c298a1de7682c28db44a96b0fc7c36e023a7a49737574725670f15505cb3b990ab93af546f399ba3e98dcb5ad5f64e6"}) 21:24:26 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) readv(r1, &(0x7f00000002c0), 0x17e) 21:24:26 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:26 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) [ 272.625986] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3608 sclass=netlink_route_socket pig=12222 comm=syz-executor.1 [ 272.628863] hfsplus: unable to find HFS+ superblock 21:24:26 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b000000180f0700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 272.746888] hfsplus: unable to find HFS+ superblock 21:24:26 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 272.865197] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3864 sclass=netlink_route_socket pig=12233 comm=syz-executor.1 [ 272.909784] hfsplus: unable to find HFS+ superblock 21:24:26 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f00000002c0), 0x17e) 21:24:26 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018100700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 272.980523] hfsplus: unable to find HFS+ superblock 21:24:27 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 273.064574] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4120 sclass=netlink_route_socket pig=12244 comm=syz-executor.1 21:24:27 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f00000002c0), 0x17e) [ 273.162352] hfsplus: unable to find HFS+ superblock [ 273.237267] hfsplus: unable to find HFS+ superblock 21:24:27 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, &(0x7f00000001c0)) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:24:27 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018600700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:27 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000140)={0xff, 0xffff}) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40), 0x0, 0x0, 0x0) r2 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7, 0x400) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f00000000c0)=0x4, 0x4) 21:24:27 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f00000002c0), 0x17e) 21:24:27 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:27 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:24:27 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) readv(r1, &(0x7f00000002c0), 0x17e) [ 273.841614] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=24600 sclass=netlink_route_socket pig=12260 comm=syz-executor.1 [ 273.862859] hfsplus: unable to find HFS+ superblock 21:24:27 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018e00700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 273.931185] hfsplus: unable to find HFS+ superblock 21:24:27 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:28 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018003500f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 274.100030] hfsplus: unable to find HFS+ superblock 21:24:28 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) readv(r1, &(0x7f00000002c0), 0x17e) [ 274.167109] hfsplus: unable to find HFS+ superblock 21:24:28 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018001000f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:28 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, &(0x7f00000001c0)) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:24:28 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:28 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) readv(r1, &(0x7f00000002c0), 0x17e) 21:24:28 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018003500f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:28 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x480003, 0x0) ioctl$RTC_AIE_ON(r1, 0x7001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getsockname(r0, &(0x7f0000000100)=@nl, &(0x7f0000000180)=0x80) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000080)=0x8, &(0x7f00000000c0)=0x4) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x4, 0x1, 0xffffffffffffffff, 0x40, 0x8, "7fa891357b914564b1532ddd6964584ad0c601", 0x2}) 21:24:28 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:24:29 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000702f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 275.031947] hfsplus: unable to find HFS+ superblock [ 275.108174] hfsplus: unable to find HFS+ superblock 21:24:29 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f00000002c0), 0x17e) 21:24:29 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000704f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:29 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 275.273178] hfsplus: unable to find HFS+ superblock 21:24:29 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000706f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:29 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f00000002c0), 0x17e) [ 275.352402] hfsplus: unable to find HFS+ superblock 21:24:30 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:24:30 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:30 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b0000001800070af677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:30 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f00000002c0), 0x17e) 21:24:30 executing program 2: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x400, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0xd) listen(r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x2, 0x7, 0x2000}, 0x4) ioctl$sock_netdev_private(r0, 0x89f3, &(0x7f00000000c0)="9571a786dd8b302b62cab024cfae1158b83a7ab7fb997417855feb7ab6cbe1541c9bcfbb89a7f9ff3fdfe4e9ac2e2e97c22ea3dcc206e215864f5db6dd00c435d7c2bcbcd123a4c3cef30cf22fb752ad76db58392288b8a559180b77e4e3fef91d") recvmmsg(r1, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:24:30 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:24:30 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b0000001800070cf677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 276.158794] hfsplus: unable to find HFS+ superblock 21:24:30 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) readv(r0, &(0x7f00000002c0), 0x17e) [ 276.249797] hfsplus: unable to find HFS+ superblock 21:24:30 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b0000001800070ef677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:30 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\xff', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:30 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) readv(r0, &(0x7f00000002c0), 0x17e) 21:24:30 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b0000001800070ff677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:31 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:24:31 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) readv(r0, &(0x7f00000002c0), 0x17e) 21:24:31 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:31 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000710f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:31 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:24:31 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000100)={0x6, 0xfff, 0x2, 0x9c5}, 0x8) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f00000000c0)={0x3, 0x1}) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 277.310885] hfsplus: unable to find HFS+ superblock 21:24:31 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000760f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:31 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) readv(r1, &(0x7f00000002c0), 0x17e) [ 277.377249] hfsplus: unable to find HFS+ superblock 21:24:31 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\xff', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:31 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) readv(r1, &(0x7f00000002c0), 0x17e) 21:24:31 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b000000180007e0f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:24:31 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff02000000000236", 0x1b) 21:24:32 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:24:32 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) readv(r1, &(0x7f00000002c0), 0x17e) 21:24:32 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\xff', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:32 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff04000000000236", 0x1b) 21:24:32 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x1000000008031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:24:32 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = dup2(r1, r1) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:24:32 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff06000000000236", 0x1b) 21:24:32 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) readv(r0, &(0x7f00000002c0), 0x17e) 21:24:32 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) readv(r0, &(0x7f00000002c0), 0x17e) 21:24:32 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\xff', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:32 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff0a000000000236", 0x1b) 21:24:32 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff0c000000000236", 0x1b) 21:24:33 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:24:33 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) readv(r0, &(0x7f00000002c0), 0x17e) 21:24:33 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\xff', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:33 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff0e000000000236", 0x1b) 21:24:33 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x80000001, 0x22000) getsockname$llc(r1, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000100)=0x10) connect$netrom(r1, &(0x7f0000000000)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@rose, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose, @bcast]}, 0x48) listen(r0, 0x0) signalfd4(r0, &(0x7f0000000180)={0x4ca2}, 0x8, 0x80000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x2d8, 0x20001000, 0xffffffffffffffff, 0x8000, 0x1, 0xffffffffffff0000, 0x81, 0x5dd0b7fe, 0x6, 0x20}, 0x10) 21:24:33 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = dup2(r1, r1) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:24:33 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) readv(r1, &(0x7f00000002c0), 0x17e) 21:24:33 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff0f000000000236", 0x1b) 21:24:33 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) readv(r1, &(0x7f00000002c0), 0x17e) 21:24:33 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff10000000000236", 0x1b) 21:24:33 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 279.649273] hfsplus: unable to find HFS+ superblock 21:24:33 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff60000000000236", 0x1b) [ 279.741617] hfsplus: unable to find HFS+ superblock 21:24:34 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) write$FUSE_IOCTL(r2, 0x0, 0x0) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:24:34 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) readv(r1, &(0x7f00000002c0), 0x17e) 21:24:34 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\xfc', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:34 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ffe0000000000236", 0x1b) 21:24:34 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x2000) write$P9_RUNLINKAT(r1, &(0x7f00000000c0)={0x7, 0x4d, 0x2}, 0x7) 21:24:34 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = dup2(r1, r1) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:24:34 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80fff0000000000236", 0x1b) 21:24:34 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) readv(r1, &(0x7f00000002c0), 0x17e) 21:24:34 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\xfd', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:34 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ffb5010000000236", 0x1b) 21:24:34 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) readv(r1, &(0x7f00000002c0), 0x17e) 21:24:34 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00060000000236", 0x1b) 21:24:35 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) write$FUSE_IOCTL(r2, 0x0, 0x0) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:24:35 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x7f', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:35 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff000a0000000236", 0x1b) 21:24:35 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) readv(r1, &(0x7f00000002c0), 0x17e) 21:24:35 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$ax25(0x3, 0x0, 0x6) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x400a00, 0x0) accept4$ax25(r1, &(0x7f00000000c0)={{0x3, @null}, [@rose, @bcast, @rose, @remote, @bcast, @bcast, @rose, @default]}, &(0x7f0000000140)=0x48, 0x80000) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:24:35 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:24:35 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff000c0000000236", 0x1b) 21:24:35 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) readv(r1, &(0x7f00000002c0), 0x17e) 21:24:35 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x8c', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:35 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff000e0000000236", 0x1b) 21:24:35 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\xf5', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:35 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) readv(r1, &(0x7f00000002c0), 0x17e) 21:24:35 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) write$FUSE_IOCTL(r2, 0x0, 0x0) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:24:35 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x4, 0xa0000) 21:24:35 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff000f0000000236", 0x1b) 21:24:35 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) readv(r1, &(0x7f00000002c0), 0x17e) 21:24:35 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\xf6', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 282.037425] 9pnet: Insufficient options for proto=fd 21:24:36 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:24:36 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff003f0000000236", 0x1b) 21:24:36 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) readv(r1, &(0x7f00000002c0), 0x17e) 21:24:36 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:36 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x3, 0x0) listen(r0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 282.687124] hfsplus: unable to find HFS+ superblock 21:24:36 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff65580000000236", 0x1b) 21:24:36 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) readv(r1, &(0x7f00000002c0), 0x17e) [ 282.760013] hfsplus: unable to find HFS+ superblock 21:24:36 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(0x0, 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:24:36 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:36 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00600000000236", 0x1b) 21:24:36 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) readv(r1, &(0x7f00000002c0), 0x17e) [ 282.961066] hfsplus: unable to find HFS+ superblock 21:24:36 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff58650000000236", 0x1b) [ 283.039665] hfsplus: unable to find HFS+ superblock [ 283.145738] 9pnet: Insufficient options for proto=fd 21:24:37 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:24:37 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:37 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00810000000236", 0x1b) 21:24:37 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) readv(r1, &(0x7f00000002c0), 0x17e) 21:24:37 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x8800, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000000c0)={0xa0000010}) 21:24:37 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(0x0, 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:24:37 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff01b50000000236", 0x1b) [ 283.851959] hfsplus: unable to find HFS+ superblock 21:24:37 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) readv(r1, &(0x7f00000002c0), 0x17e) [ 283.935816] hfsplus: unable to find HFS+ superblock 21:24:38 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00e00000000236", 0x1b) 21:24:38 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:38 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) readv(r1, &(0x7f00000002c0), 0x17e) [ 284.105461] hfsplus: unable to find HFS+ superblock 21:24:38 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00f00000000236", 0x1b) [ 284.166303] hfsplus: unable to find HFS+ superblock [ 284.241168] 9pnet: Insufficient options for proto=fd 21:24:38 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = dup2(r1, r1) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno'}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:24:38 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:38 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00), 0x0, 0x0, 0x0) readv(r1, &(0x7f00000002c0), 0x17e) 21:24:38 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00400300000236", 0x1b) 21:24:38 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose, @rose]}, 0x48) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0x30) listen(r0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x8ebe0030a86aac87, 0x0) write$P9_RSTATFS(r1, &(0x7f0000000140)={0x43, 0x9, 0x1, {0x5, 0x8, 0x40, 0x80000001, 0x8, 0x8, 0x2, 0x200, 0x3fe}}, 0x43) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:24:38 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(0x0, 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:24:38 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00034000000236", 0x1b) [ 284.793596] hfsplus: unable to find HFS+ superblock 21:24:38 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00), 0x0, 0x0, 0x0) readv(r1, &(0x7f00000002c0), 0x17e) [ 284.852293] hfsplus: unable to find HFS+ superblock 21:24:38 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:38 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff6b6b6b00000236", 0x1b) 21:24:38 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00), 0x0, 0x0, 0x0) readv(r1, &(0x7f00000002c0), 0x17e) [ 285.001961] hfsplus: unable to find HFS+ superblock 21:24:39 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80fffffff000000236", 0x1b) [ 285.071524] hfsplus: unable to find HFS+ superblock [ 285.114159] 9pnet: Insufficient options for proto=fd 21:24:39 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = dup2(r1, r1) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno'}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:24:39 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:39 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) readv(r1, &(0x7f00000002c0), 0x17e) 21:24:39 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000001000236", 0x1b) 21:24:39 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f00000000c0)={0x4, 0x7, 0x7fffffff, 0x8001, 0x7fff, 0x40}) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:24:39 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(0x0, 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) [ 285.617815] hfsplus: unable to find HFS+ superblock 21:24:39 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) readv(r1, &(0x7f00000002c0), 0x17e) 21:24:39 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000002000236", 0x1b) [ 285.700907] hfsplus: unable to find HFS+ superblock 21:24:39 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:39 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000004000236", 0x1b) 21:24:39 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) readv(r1, &(0x7f00000002c0), 0x17e) [ 285.868932] hfsplus: unable to find HFS+ superblock 21:24:39 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000006000236", 0x1b) [ 285.965637] hfsplus: unable to find HFS+ superblock [ 286.048716] 9pnet: Insufficient options for proto=fd 21:24:40 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = dup2(r1, r1) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno'}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:24:40 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff0000000a000236", 0x1b) 21:24:40 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f00000002c0), 0x17e) 21:24:40 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:40 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) accept4$alg(r1, 0x0, 0x0, 0x80000) 21:24:40 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(0x0, 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:24:40 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff0000000c000236", 0x1b) [ 286.695488] hfsplus: unable to find HFS+ superblock 21:24:40 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f00000002c0), 0x17e) [ 286.789966] hfsplus: unable to find HFS+ superblock 21:24:40 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff0000000e000236", 0x1b) 21:24:40 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:40 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f00000002c0), 0x17e) [ 286.934363] hfsplus: unable to find HFS+ superblock 21:24:40 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff0000000f000236", 0x1b) [ 286.995923] hfsplus: unable to find HFS+ superblock [ 287.006058] 9pnet: Insufficient options for proto=fd 21:24:41 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:24:41 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:41 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) readv(r1, 0x0, 0x0) 21:24:41 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000010000236", 0x1b) 21:24:41 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom$inet6(r1, &(0x7f0000000080)=""/14, 0xe, 0x2, 0x0, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @null}, [@rose, @rose, @default, @netrom, @netrom, @rose, @null]}, 0x48) setsockopt$sock_void(r1, 0x1, 0x3f, 0x0, 0x0) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) recvmmsg(r1, &(0x7f0000005d40)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f00000000c0)=""/57, 0x39}, {&(0x7f0000000100)}, {&(0x7f0000000140)=""/58, 0x3a}, {&(0x7f0000000180)=""/216, 0xd8}, {&(0x7f0000000280)=""/23, 0x17}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/229, 0xe5}, {&(0x7f00000013c0)=""/60, 0x3c}, {&(0x7f0000001400)=""/25, 0x19}, {&(0x7f0000001440)=""/28, 0x1c}], 0xa, &(0x7f0000001540)=""/34, 0x22}, 0x7ff}, {{&(0x7f0000001580)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000002a80)=[{&(0x7f0000001600)=""/196, 0xc4}, {&(0x7f0000001700)=""/249, 0xf9}, {&(0x7f0000001800)=""/74, 0x4a}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000002880)=""/129, 0x81}, {&(0x7f0000002940)=""/119, 0x77}, {&(0x7f00000029c0)=""/23, 0x17}, {&(0x7f0000002a00)=""/106, 0x6a}], 0x8}, 0x5}, {{&(0x7f0000002b00)=@rc, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000002b80)=""/19, 0x13}, {&(0x7f0000003a80)=""/4096, 0x1000}, {&(0x7f0000002bc0)=""/106, 0x6a}, {&(0x7f0000002c40)=""/27, 0x1b}, {&(0x7f0000002c80)=""/93, 0x5d}, {&(0x7f0000002d00)=""/246, 0xf6}, {&(0x7f0000002e00)=""/210, 0xd2}, {&(0x7f0000002f00)=""/152, 0x98}], 0x8, &(0x7f0000003040)=""/96, 0x60}, 0x80000000}, {{&(0x7f00000030c0)=@alg, 0x80, &(0x7f00000034c0)=[{&(0x7f0000003140)}, {&(0x7f0000003180)=""/236, 0xec}, {&(0x7f0000003280)}, {&(0x7f00000032c0)=""/204, 0xcc}, {&(0x7f00000033c0)=""/94, 0x5e}, {&(0x7f0000003440)=""/42, 0x2a}, {&(0x7f0000003480)=""/10, 0xa}], 0x7, &(0x7f0000003540)=""/86, 0x56}}, {{&(0x7f00000035c0)=@isdn, 0x80, &(0x7f0000003800)=[{&(0x7f0000003640)=""/81, 0x51}, {&(0x7f00000036c0)=""/189, 0xbd}, {&(0x7f0000003780)=""/66, 0x42}], 0x3, &(0x7f0000003840)=""/176, 0xb0}, 0x8}, {{&(0x7f0000003900)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f00000039c0)=[{&(0x7f0000004a80)=""/4096, 0x1000}, {&(0x7f0000003980)=""/3, 0x3}], 0x2, &(0x7f0000005a80)=""/219, 0xdb}, 0xffffffffffffffff}, {{&(0x7f0000005b80)=@rc, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003a00)=""/16, 0x10}, {&(0x7f0000005c00)=""/248, 0xf8}], 0x2}, 0x7f0000000000}], 0x7, 0x40000001, &(0x7f0000005f00)={0x77359400}) connect$ax25(r2, &(0x7f0000005f40)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x84, &(0x7f0000005fc0)=[@in6={0xa, 0x4e22, 0x5, @mcast2, 0x30df}, @in6={0xa, 0x4e20, 0x5, @remote, 0xffffffffffffff45}, @in={0x2, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e21, @rand_addr=0x200000000}, @in6={0xa, 0x4e20, 0x3ff, @local, 0x1}]}, &(0x7f0000003140)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000003280)={0x79, 0x208, 0x6, 0x0, r3}, &(0x7f0000006080)=0x10) 21:24:41 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(0x0, 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) [ 287.665164] hfsplus: unable to find HFS+ superblock 21:24:41 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff0000003f000236", 0x1b) 21:24:41 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) readv(r1, 0x0, 0x0) [ 287.748370] hfsplus: unable to find HFS+ superblock 21:24:41 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:41 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000060000236", 0x1b) 21:24:41 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) readv(r1, 0x0, 0x0) [ 287.896396] hfsplus: unable to find HFS+ superblock [ 287.954841] hfsplus: unable to find HFS+ superblock 21:24:41 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00005865000236", 0x1b) 21:24:42 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:24:42 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) readv(r1, &(0x7f00000002c0), 0x17e) 21:24:42 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:42 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff006b6b6b000236", 0x1b) 21:24:42 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) r1 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000000c0)=0x1c) sched_yield() getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000100)={0x2, [0x0, 0x0]}, &(0x7f0000000140)=0xc) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000180)={r2, @in={{0x2, 0x4e22, @multicast2}}}, 0x84) listen(r0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:24:42 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x0, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:24:42 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x400, 0x200) bind$ax25(r1, &(0x7f00000000c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 288.740395] hfsplus: unable to find HFS+ superblock 21:24:42 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000081000236", 0x1b) 21:24:42 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) readv(r1, &(0x7f00000002c0), 0x17e) [ 288.814740] hfsplus: unable to find HFS+ superblock 21:24:42 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:42 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ffffffa888000236", 0x1b) [ 288.982695] hfsplus: unable to find HFS+ superblock [ 289.040213] hfsplus: unable to find HFS+ superblock 21:24:43 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ffffffff9e000236", 0x1b) 21:24:43 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:43 executing program 4: 21:24:43 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff000001b5000236", 0x1b) 21:24:43 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @null}, [@rose, @rose, @bcast, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x272f, 0x101000) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000180)=0xb1) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000001c0)={r2, 0x133b, 0x6, [0x401, 0x1ff, 0xa58a, 0x100, 0x20, 0x70]}, 0x14) dup2(r1, r0) 21:24:43 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(0x0, 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:24:43 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x0, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:24:43 executing program 4: [ 289.853538] hfsplus: unable to find HFS+ superblock 21:24:43 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff000000e0000236", 0x1b) 21:24:43 executing program 4: [ 289.942787] hfsplus: unable to find HFS+ superblock 21:24:44 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:44 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80fffffffff0000236", 0x1b) 21:24:44 executing program 4: [ 290.104415] hfsplus: unable to find HFS+ superblock 21:24:44 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff88a8ffff000236", 0x1b) [ 290.172664] hfsplus: unable to find HFS+ superblock 21:24:44 executing program 4: 21:24:44 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:44 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080), &(0x7f00000000c0)=0x4) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 290.340074] hfsplus: unable to find HFS+ superblock [ 290.407738] hfsplus: unable to find HFS+ superblock 21:24:44 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(0x0, 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:24:44 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00f0ffff000236", 0x1b) 21:24:44 executing program 4: 21:24:44 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:44 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000000c0)=r1) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x4000, 0x0) ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f0000000140)) 21:24:44 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x0, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:24:44 executing program 4: clone(0x3102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x1) 21:24:44 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff9effffff000236", 0x1b) [ 290.992670] hfsplus: unable to find HFS+ superblock 21:24:45 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80fff0ffffff000236", 0x1b) [ 291.087347] hfsplus: unable to find HFS+ superblock 21:24:45 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8984413869d6e3ae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd'}]}, 0xfdef) 21:24:45 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:45 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00020000000236", 0x1b) [ 291.214006] device nr0 entered promiscuous mode [ 291.248013] hfsplus: unable to find HFS+ superblock [ 291.308243] hfsplus: unable to find HFS+ superblock [ 291.660178] device nr0 entered promiscuous mode 21:24:45 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(0x0, 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:24:45 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001680)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000016c0)={@ipv4={[], [], @local}, 0x2d, r2}) r3 = shmget(0x0, 0x10000, 0x80, &(0x7f0000fed000/0x10000)=nil) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000080)={{{@in=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000180)=0xe8) r5 = getgid() getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f00000002c0)=0xe8) getgroups(0x2, &(0x7f0000000300)=[0xee00, 0xee01]) fcntl$getownex(r1, 0x10, &(0x7f0000000340)={0x0, 0x0}) r9 = getpid() ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000400)={0x0, @aes256, 0x2, "1f075fc961c8f214"}) shmctl$IPC_SET(r3, 0x1, &(0x7f0000000380)={{0x7, r4, r5, r6, r7, 0x4, 0x4}, 0xa2, 0x1, 0x0, 0x20, r8, r9, 0x7}) 21:24:45 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:45 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00040000000236", 0x1b) 21:24:45 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x4b000000, 0x1) [ 291.838330] hfsplus: unable to find HFS+ superblock [ 291.904807] hfsplus: unable to find HFS+ superblock 21:24:45 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 292.083085] hfsplus: unable to find HFS+ superblock [ 292.143577] hfsplus: unable to find HFS+ superblock 21:24:46 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00060000000236", 0x1b) 21:24:46 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:46 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) io_setup(0x3, &(0x7f0000000000)=0x0) io_submit(r1, 0x21e, &(0x7f00000005c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x0, 0xfffffffffffffffc}]) 21:24:46 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7, 0x80000) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x4}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x562b}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000001c0)={r2, 0x7, 0x4, 0x2, 0x5, 0xffffffffffffffc0, 0x100000000, 0x401, {r3, @in6={{0xa, 0x4e22, 0x0, @local}}, 0x4, 0x4, 0x81, 0x17f, 0x4}}, &(0x7f0000000280)=0xb0) listen(r1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000002c0)={r4, 0x1, 0x30}, &(0x7f0000000300)=0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:24:46 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff000a0000000236", 0x1b) [ 292.308476] hfsplus: unable to find HFS+ superblock 21:24:46 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r0}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000000c0)) [ 292.365253] hfsplus: unable to find HFS+ superblock 21:24:46 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x0, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:24:46 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff000c0000000236", 0x1b) 21:24:46 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:46 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x73, 0x0, &(0x7f00000000c0)) 21:24:46 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x4b000000, 0x1) 21:24:46 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000080)='security.capability\x00', &(0x7f00000000c0)=@v1={0x1000000, [{0x5}]}, 0xc, 0x1bc3e709d6dea23b) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000694000/0x2000)=nil, 0x2000, 0x3, 0x8031, r0, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:24:46 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff000e0000000236", 0x1b) [ 292.705125] hfsplus: unable to find HFS+ superblock 21:24:46 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) flock(r0, 0x0) 21:24:46 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40), 0x3fffe6a, 0x0, 0x0) setxattr$security_smack_transmute(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000100)='TRUE', 0x4, 0x1) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x8) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000180)={0x0, 0x0, 0x4}) r3 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x6, 0x200000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000200)={r2, 0x0, r3}) [ 292.766981] hfsplus: unable to find HFS+ superblock 21:24:46 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:46 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) flock(r0, 0x0) 21:24:46 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff000f0000000236", 0x1b) [ 292.920693] hfsplus: unable to find HFS+ superblock [ 292.973240] hfsplus: unable to find HFS+ superblock 21:24:47 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x0, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:24:47 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00100000000236", 0x1b) 21:24:47 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) flock(r0, 0x0) 21:24:47 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 293.559231] hfsplus: unable to find HFS+ superblock 21:24:47 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x4b000000, 0x1) 21:24:47 executing program 2: setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'U+'}, 0x28, 0x3) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@rose, @bcast, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = getpgid(0xffffffffffffffff) r2 = syz_open_procfs(r1, &(0x7f0000000140)='comm\x00') recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) accept4$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14, 0x80800) sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000180), 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x84, 0x14, 0x400, 0x70bd27, 0x25dfdbfe, {0xa, 0x80, 0x2, 0xfe, r3}, [@IFA_CACHEINFO={0x14, 0x6, {0x7ff, 0xfff, 0x10000}}, @IFA_LOCAL={0x14, 0x2, @empty}, @IFA_FLAGS={0x8}, @IFA_CACHEINFO={0x14, 0x6, {0xe6, 0x7ff, 0x7, 0x95a}}, @IFA_ADDRESS={0x14, 0x1, @loopback}, @IFA_LOCAL={0x14, 0x2, @mcast2}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) 21:24:47 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) flock(r0, 0x0) 21:24:47 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00600000000236", 0x1b) [ 293.627663] hfsplus: unable to find HFS+ superblock 21:24:47 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:47 executing program 4: flock(0xffffffffffffffff, 0x0) 21:24:47 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00e00000000236", 0x1b) 21:24:47 executing program 4: flock(0xffffffffffffffff, 0x0) [ 293.782797] hfsplus: unable to find HFS+ superblock [ 293.841395] hfsplus: unable to find HFS+ superblock 21:24:48 executing program 4: flock(0xffffffffffffffff, 0x0) 21:24:48 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00f00000000236", 0x1b) 21:24:48 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:48 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x0, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:24:48 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x4b000000, 0x1) 21:24:48 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, &(0x7f00000001c0)=0xe8) getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)=0x0) r3 = syz_open_dev$ndb(0xffffffffffffffff, 0x0, 0x10200) ioctl$BLKREPORTZONE(r3, 0xc0101282, &(0x7f00000002c0)={0x100000001, 0x4, 0x0, [{0x8, 0x4a8, 0x2, 0x9, 0x1, 0x6, 0x20}, {0x80000000, 0xffffffff, 0x4, 0x7e0000000, 0xa60d}, {0x3, 0x1, 0x401, 0x1, 0x9, 0x2, 0x5}, {0x6e5, 0x1ff, 0x24e0a5ed, 0x0, 0x7fffffff, 0x9, 0x2}]}) fchown(r0, r1, r2) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x101000, 0x0) mmap$perf(&(0x7f000009c000/0x1000)=nil, 0x1000, 0x1000000, 0x50, r4, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:24:48 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0xa0103, 0x0) flock(r0, 0x0) 21:24:48 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00b50100000236", 0x1b) [ 294.478186] hfsplus: unable to find HFS+ superblock 21:24:48 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @null, @default, @netrom, @bcast, @rose, @rose]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 294.566436] hfsplus: unable to find HFS+ superblock 21:24:48 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0xa0103, 0x0) flock(r0, 0x0) 21:24:48 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000600000236", 0x1b) 21:24:48 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:48 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000a00000236", 0x1b) 21:24:48 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0xa0103, 0x0) flock(r0, 0x0) [ 294.734450] hfsplus: unable to find HFS+ superblock [ 294.804894] hfsplus: unable to find HFS+ superblock 21:24:48 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000c00000236", 0x1b) 21:24:49 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:24:49 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x4b000000, 0x1) 21:24:49 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x0, 0x0) flock(r0, 0x0) 21:24:49 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:49 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000e00000236", 0x1b) 21:24:49 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4000000000003, 0x50, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:24:49 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x0, 0x0) flock(r0, 0x0) 21:24:49 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f00000000c0)={0x1, 0x200, 0xffffffff00000000, 0x3ff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:24:49 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000f00000236", 0x1b) [ 295.471285] hfsplus: unable to find HFS+ superblock 21:24:49 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x0, 0x0) flock(r0, 0x0) [ 295.551613] hfsplus: unable to find HFS+ superblock 21:24:49 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00003f00000236", 0x1b) 21:24:49 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 295.716147] hfsplus: unable to find HFS+ superblock [ 295.783664] hfsplus: unable to find HFS+ superblock 21:24:50 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:24:50 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x4b000000, 0x1) 21:24:50 executing program 4: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) flock(0xffffffffffffffff, 0x0) 21:24:50 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00655800000236", 0x1b) 21:24:50 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:50 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose]}, 0xffffffdd) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 296.334014] hfsplus: unable to find HFS+ superblock 21:24:50 executing program 4: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) flock(0xffffffffffffffff, 0x0) 21:24:50 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00006000000236", 0x1b) [ 296.404112] hfsplus: unable to find HFS+ superblock 21:24:50 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:50 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00586500000236", 0x1b) 21:24:50 executing program 4: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) flock(0xffffffffffffffff, 0x0) 21:24:50 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00008100000236", 0x1b) [ 296.591039] hfsplus: unable to find HFS+ superblock [ 296.657812] hfsplus: unable to find HFS+ superblock 21:24:51 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:24:51 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x0, 0x1) 21:24:51 executing program 4: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:24:51 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff0001b500000236", 0x1b) 21:24:51 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:51 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000692000/0x3000)=nil, 0x3000, 0x3, 0x803f, r0, 0x0) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe1b}, 0x1}], 0x1, 0x40000000, 0x0) 21:24:51 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff0000e000000236", 0x1b) [ 297.238490] hfsplus: unable to find HFS+ superblock 21:24:51 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x101) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r4 = getgid() getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e24, 0x9, @mcast1, 0x7ff}}, [0x7fffffff, 0x9, 0x80000000, 0x1, 0x0, 0x3, 0x3, 0x1ff, 0x4, 0x401, 0x6, 0x6, 0x95b, 0x3f, 0x9]}, &(0x7f0000000340)=0x100) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000380)=@assoc_id=r5, 0x4) write$FUSE_ATTR(r1, &(0x7f0000000180)={0x78, 0xffffffffffffffff, 0x6, {0x1, 0x2a8ef377, 0x0, {0x1, 0xfae, 0x0, 0x40, 0x7, 0x3, 0x4, 0x48, 0x0, 0xe0, 0x101, r2, r4, 0x40, 0x4}}}, 0x78) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setuid(r3) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000200)={&(0x7f000027d000/0x4000)=nil, 0xff, 0x5, 0x0, &(0x7f00005b4000/0x4000)=nil, 0x5}) [ 297.294491] hfsplus: unable to find HFS+ superblock 21:24:51 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff0000f000000236", 0x1b) 21:24:51 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:51 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x2, @random="60bcb0046b53", 'bcsf0\x00'}}) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:24:51 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000004440)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={'rose', 0x0}, 0x930, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) recvmmsg(r0, &(0x7f0000004280)=[{{&(0x7f0000000080)=@nfc_llcp, 0x80, &(0x7f0000000540)=[{&(0x7f0000000100)=""/171, 0xab}, {&(0x7f00000001c0)=""/187, 0xbb}, {&(0x7f0000000280)=""/9, 0x9}, {&(0x7f00000002c0)=""/73, 0x49}, {&(0x7f0000000340)}, {&(0x7f0000000380)=""/59, 0x3b}, {&(0x7f00000003c0)=""/183, 0xb7}, {&(0x7f0000000480)=""/139, 0x8b}], 0x8, &(0x7f00000005c0)=""/17, 0x11}, 0x80}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000680)=""/213, 0xd5}, {&(0x7f0000000780)=""/169, 0xa9}, {&(0x7f0000000840)=""/116, 0x74}, {&(0x7f00000008c0)=""/29, 0x1d}, {&(0x7f0000000900)=""/194, 0xc2}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/77, 0x4d}, {&(0x7f0000001a80)=""/173, 0xad}], 0x8}, 0x36f}, {{&(0x7f0000001bc0)=@ipx, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001c40)=""/34, 0x22}, {&(0x7f0000001c80)=""/215, 0xd7}, {&(0x7f0000001d80)=""/51, 0x33}, {&(0x7f0000001dc0)=""/53, 0x35}, {&(0x7f0000001e00)=""/240, 0xf0}], 0x5, &(0x7f0000001f80)=""/183, 0xb7}, 0x4}, {{0x0, 0x0, &(0x7f00000020c0)=[{&(0x7f0000002040)=""/66, 0x42}], 0x1}, 0x3}, {{&(0x7f0000002100)=@nfc_llcp, 0x80, &(0x7f00000035c0)=[{&(0x7f0000002180)=""/2, 0x2}, {&(0x7f00000021c0)=""/118, 0x76}, {&(0x7f0000002240)=""/84, 0x54}, {&(0x7f00000022c0)=""/165, 0xa5}, {&(0x7f0000002380)=""/4096, 0x1000}, {&(0x7f0000003380)=""/104, 0x68}, {&(0x7f0000003400)=""/127, 0x7f}, {&(0x7f0000003480)=""/70, 0x46}, {&(0x7f0000003500)=""/133, 0x85}], 0x9, &(0x7f0000003680)=""/239, 0xef}, 0x3}, {{&(0x7f0000003780)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000003e80)=[{&(0x7f0000003800)=""/226, 0xe2}, {&(0x7f0000003900)=""/172, 0xac}, {&(0x7f0000003a80)=""/139, 0x8b}, {&(0x7f00000039c0)=""/102, 0x66}, {&(0x7f0000003b40)=""/183, 0xb7}, {&(0x7f0000003c00)=""/134, 0x86}, {&(0x7f0000003cc0)=""/184, 0xb8}, {&(0x7f0000003d80)=""/225, 0xe1}], 0x8, &(0x7f0000003f00)=""/220, 0xdc}, 0x4}, {{&(0x7f0000004000)=@llc, 0x80, &(0x7f0000004240)=[{&(0x7f0000004080)=""/215, 0xd7}, {&(0x7f0000004180)=""/87, 0x57}, {&(0x7f0000004200)=""/58, 0x3a}], 0x3}, 0x100000001}], 0x7, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x4010, r0, 0xffffe) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 297.440929] hfsplus: unable to find HFS+ superblock [ 297.505519] hfsplus: unable to find HFS+ superblock 21:24:51 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x4b000000, 0x1) 21:24:52 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x0, 0x1) 21:24:52 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00004003000236", 0x1b) 21:24:52 executing program 2: syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0xff, 0x2400) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:24:52 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:52 executing program 4: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) [ 298.152326] hfsplus: unable to find HFS+ superblock 21:24:52 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000340000236", 0x1b) [ 298.223309] hfsplus: unable to find HFS+ superblock 21:24:52 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:52 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff006b6b6b000236", 0x1b) 21:24:52 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00fffff0000236", 0x1b) [ 298.385974] hfsplus: unable to find HFS+ superblock [ 298.445926] hfsplus: unable to find HFS+ superblock 21:24:52 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000010236", 0x1b) 21:24:52 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 298.582533] hfsplus: unable to find HFS+ superblock [ 298.658309] hfsplus: unable to find HFS+ superblock 21:24:52 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x4b000000, 0x1) 21:24:52 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x0, 0x1) 21:24:52 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000020236", 0x1b) 21:24:52 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) connect$netrom(r0, &(0x7f00000000c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2}, [@bcast, @null, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r1 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x3, 0x100) getsockopt$inet_buf(r1, 0x0, 0x28, &(0x7f0000000180)=""/75, &(0x7f0000000200)=0x4b) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$KVM_SMI(r2, 0xaeb7) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:24:52 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 299.046860] hfsplus: unable to find HFS+ superblock [ 299.130869] hfsplus: unable to find HFS+ superblock 21:24:53 executing program 4: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:24:53 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x2000, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0xd4, "3faee7cae65520d24c856fbce442f507a30cb61e7852c64e1547d6628e211486df51c5f2e50351ba1235ef8666fb8523b877424086b77582327dff42207d05b48db5ca8a7e65d3f467a4357074eca8abe0d868eaea2d980ae58a7c850c3a3e20e296f044da413db7ebab42bc36388084d18938c01dd9f5402161e15bec9980129ce16870f41ed19fb7f0eff2e0da1e64c9d2a2e79fd397fee44b1a6e3e039e5cb86570cb6efd42402cc6b828ad0bfdf5c0c2405e9e9eaed931f853b7bac64f82e8036d102580cb4ae3b3b9ba59dc358ad5cf4988"}, &(0x7f00000001c0)=0xdc) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e24, 0x0, @mcast2, 0x1}}}, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:24:53 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000040236", 0x1b) 21:24:53 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 299.382755] hfsplus: unable to find HFS+ superblock 21:24:53 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000060236", 0x1b) 21:24:53 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) tee(r0, r0, 0x2, 0x7) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2d5}}], 0x1, 0x0, 0x0) [ 299.450005] hfsplus: unable to find HFS+ superblock 21:24:53 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 299.581946] hfsplus: unable to find HFS+ superblock 21:24:53 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x4b000000, 0x1) [ 299.671689] hfsplus: unable to find HFS+ superblock 21:24:53 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x0) 21:24:53 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff000000000a0236", 0x1b) 21:24:53 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:53 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) modify_ldt$write(0x1, &(0x7f0000000080)={0x80000001, 0x20000000, 0x4000, 0x1, 0x3, 0x0, 0x913, 0x5, 0x2, 0x6}, 0x10) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x3, 0x2) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000140)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write$P9_RRENAME(r0, &(0x7f00000000c0)={0x7, 0x15, 0x1}, 0x7) [ 299.977470] hfsplus: unable to find HFS+ superblock [ 300.069907] hfsplus: unable to find HFS+ superblock 21:24:54 executing program 4: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x4b000000, 0x1) 21:24:54 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff000000000c0236", 0x1b) 21:24:54 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:54 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000100)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x200000, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x0) r4 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f0000000240)) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000140)=""/251, 0xfb}], 0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x15) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f00000000c0)={0x4, 0x67, 0x0, 0x9, 0x8000}) 21:24:54 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x0, 0x1) 21:24:54 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40), 0x0, 0x0, 0x0) [ 300.639606] hfsplus: unable to find HFS+ superblock 21:24:54 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff000000000e0236", 0x1b) [ 300.720917] hfsplus: unable to find HFS+ superblock 21:24:54 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:54 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x0) 21:24:54 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff000000000f0236", 0x1b) [ 300.910195] hfsplus: unable to find HFS+ superblock 21:24:54 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000100236", 0x1b) [ 300.982376] hfsplus: unable to find HFS+ superblock 21:24:55 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 301.150474] hfsplus: unable to find HFS+ superblock [ 301.217931] hfsplus: unable to find HFS+ superblock 21:24:55 executing program 4: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x4b000000, 0x1) 21:24:55 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff000000003f0236", 0x1b) 21:24:55 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x101840, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa8, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xae}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'caif0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x87}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x45}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5d}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x44005) 21:24:55 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:55 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x0, 0x1) 21:24:55 executing program 5: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose, @rose]}, 0x48) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0x30) listen(r0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x8ebe0030a86aac87, 0x0) write$P9_RSTATFS(r1, &(0x7f0000000140)={0x43, 0x9, 0x1, {0x5, 0x8, 0x40, 0x80000001, 0x8, 0x8, 0x2, 0x200, 0x3fe}}, 0x43) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 301.835517] hfsplus: unable to find HFS+ superblock 21:24:55 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000600236", 0x1b) [ 301.886984] hfsplus: unable to find HFS+ superblock 21:24:55 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:56 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000058650236", 0x1b) [ 302.035136] hfsplus: unable to find HFS+ superblock [ 302.097150] hfsplus: unable to find HFS+ superblock 21:24:56 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:56 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00006b6b6b0236", 0x1b) 21:24:56 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000810236", 0x1b) [ 302.256684] hfsplus: unable to find HFS+ superblock [ 302.340387] hfsplus: unable to find HFS+ superblock 21:24:56 executing program 4: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x4b000000, 0x1) 21:24:56 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x4, 0x8480) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x200200, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000001c0)={0x5, 0x7, 0x4, 0x1084001, {0x0, 0x7530}, {0x5, 0xc, 0x1, 0x40, 0x0, 0x100000001, "eacfaf20"}, 0x1700, 0x4, @fd=r1, 0x4}) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r2, 0x0) mmap(&(0x7f000059d000/0x2000)=nil, 0x2000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/current\x00', 0x2, 0x0) recvmmsg(r2, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x400100, 0x0) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x1000000c) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000000c0)) 21:24:56 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00ffffa8880236", 0x1b) 21:24:56 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\xff', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:24:56 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:24:56 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x0, 0x1) 21:24:56 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0) 21:24:56 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00ffffff9e0236", 0x1b) [ 302.866959] 9pnet: Insufficient options for proto=fd 21:24:56 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000001b50236", 0x1b) 21:24:56 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x2, 0x0, 0x0, 0x0, 0x0) [ 303.048816] hfsplus: unable to find HFS+ superblock 21:24:57 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000e00236", 0x1b) [ 303.123228] hfsplus: unable to find HFS+ superblock 21:24:57 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00fffffff00236", 0x1b) 21:24:57 executing program 4: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:24:57 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x3, 0x0, 0x0, 0x0, 0x0) 21:24:57 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000000c0)=0x1, 0x4) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:24:57 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff0088a8ffff0236", 0x1b) [ 303.646283] hfsplus: unable to find HFS+ superblock 21:24:57 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:24:57 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x0) 21:24:57 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff0000f0ffff0236", 0x1b) [ 303.706576] hfsplus: unable to find HFS+ superblock 21:24:57 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x4, 0x0, 0x0, 0x0, 0x0) 21:24:57 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff009effffff0236", 0x1b) [ 303.842326] hfsplus: unable to find HFS+ superblock [ 303.917497] hfsplus: unable to find HFS+ superblock 21:24:57 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00f0ffffff0236", 0x1b) 21:24:57 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x5, 0x0, 0x0, 0x0, 0x0) [ 304.099849] hfsplus: unable to find HFS+ superblock 21:24:58 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000136", 0x1b) [ 304.169830] hfsplus: unable to find HFS+ superblock [ 304.194348] 9pnet: Insufficient options for proto=fd 21:24:58 executing program 4: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:24:58 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x6, 0x0, 0x0, 0x0, 0x0) 21:24:58 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100), 0x0, 0xfffffffffffffffa) r2 = request_key(&(0x7f0000000140)='rxrpc_s\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)='(#}\x00', 0xfffffffffffffffe) keyctl$reject(0x13, r1, 0x401, 0x1, r2) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:24:58 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000200000236", 0x1b) [ 304.550451] hfsplus: unable to find HFS+ superblock [ 304.638316] hfsplus: unable to find HFS+ superblock 21:24:59 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:24:59 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000400000236", 0x1b) 21:24:59 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x0) 21:24:59 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x7, 0x0, 0x0, 0x0, 0x0) [ 305.108093] hfsplus: unable to find HFS+ superblock 21:24:59 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000600000236", 0x1b) [ 305.179463] hfsplus: unable to find HFS+ superblock 21:24:59 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x9, 0x0, 0x0, 0x0, 0x0) 21:24:59 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000a00000236", 0x1b) [ 305.330019] hfsplus: unable to find HFS+ superblock [ 305.403126] hfsplus: unable to find HFS+ superblock 21:24:59 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000c00000236", 0x1b) [ 305.461369] 9pnet: Insufficient options for proto=fd 21:24:59 executing program 4: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:24:59 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0xa, 0x0, 0x0, 0x0, 0x0) 21:24:59 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000080)={r0}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x5, 0x30}, &(0x7f0000000180)=0xc) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000001c0)={0x80000001, 0x8, 0x100, 0x2, r2}, 0x10) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:24:59 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000e00000236", 0x1b) [ 305.676757] hfsplus: unable to find HFS+ superblock [ 305.753186] hfsplus: unable to find HFS+ superblock 21:25:00 executing program 5: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x80000001, 0x22000) getsockname$llc(r1, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000100)=0x10) connect$netrom(r1, &(0x7f0000000000)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@rose, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose, @bcast]}, 0x48) listen(r0, 0x0) signalfd4(r0, &(0x7f0000000180)={0x4ca2}, 0x8, 0x80000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x2d8, 0x20001000, 0xffffffffffffffff, 0x8000, 0x1, 0xffffffffffff0000, 0x81, 0x5dd0b7fe, 0x6, 0x20}, 0x10) 21:25:00 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000f00000236", 0x1b) 21:25:00 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0xd, 0x0, 0x0, 0x0, 0x0) 21:25:00 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x0) 21:25:00 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x2b3) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:25:00 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00001000000236", 0x1b) [ 306.372654] hfsplus: unable to find HFS+ superblock [ 306.436083] hfsplus: unable to find HFS+ superblock 21:25:00 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0xe, 0x0, 0x0, 0x0, 0x0) 21:25:00 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00006000000236", 0x1b) [ 306.590851] hfsplus: unable to find HFS+ superblock [ 306.677331] hfsplus: unable to find HFS+ superblock 21:25:00 executing program 4: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = dup2(r1, r1) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:25:00 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff0000e000000236", 0x1b) 21:25:00 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x10, 0x0, 0x0, 0x0, 0x0) [ 306.864115] hfsplus: unable to find HFS+ superblock 21:25:00 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff0000f000000236", 0x1b) [ 306.934840] hfsplus: unable to find HFS+ superblock 21:25:01 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:25:01 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x22, 0x0, 0x0, 0x0, 0x0) 21:25:01 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x400000, 0x0) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x4) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:25:01 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff0000b501000236", 0x1b) 21:25:01 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) [ 307.322877] hfsplus: unable to find HFS+ superblock 21:25:01 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000006000236", 0x1b) [ 307.403890] hfsplus: unable to find HFS+ superblock 21:25:01 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x23, 0x0, 0x0, 0x0, 0x0) 21:25:01 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff0000000a000236", 0x1b) [ 307.571855] hfsplus: unable to find HFS+ superblock [ 307.658861] hfsplus: unable to find HFS+ superblock 21:25:01 executing program 4: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = dup2(r1, r1) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:25:01 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff0000000c000236", 0x1b) 21:25:01 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x2c, 0x0, 0x0, 0x0, 0x0) 21:25:01 executing program 2: r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x10) write(r0, &(0x7f0000000100), 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000140)={{0xff, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x1, 'wlc\x00', 0x10, 0x5, 0xc3}, {@multicast2, 0x4e21, 0x0, 0xbfab, 0x5, 0x2}}, 0x44) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) [ 308.017956] hfsplus: unable to find HFS+ superblock [ 308.074764] hfsplus: unable to find HFS+ superblock 21:25:02 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) readv(r1, &(0x7f00000002c0), 0x17e) 21:25:02 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff0000000e000236", 0x1b) 21:25:02 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x48, 0x0, 0x0, 0x0, 0x0) [ 308.403415] hfsplus: unable to find HFS+ superblock 21:25:02 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff0000000f000236", 0x1b) [ 308.466908] hfsplus: unable to find HFS+ superblock 21:25:02 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:25:02 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x4c, 0x0, 0x0, 0x0, 0x0) 21:25:02 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff0000003f000236", 0x1b) [ 308.618796] hfsplus: unable to find HFS+ superblock 21:25:02 executing program 2: connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x62000, 0x0) listen(0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {&(0x7f00000000c0), r1, 0x7}}, 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 308.692466] hfsplus: unable to find HFS+ superblock 21:25:02 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x60, 0x0, 0x0, 0x0, 0x0) 21:25:02 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00006558000236", 0x1b) 21:25:02 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/178, 0xb2}, 0x1) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:25:02 executing program 4: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = dup2(r1, r1) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:25:02 executing program 2: syz_emit_ethernet(0x371, &(0x7f0000000000)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff6c, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff83, 0x0, 0x0, 0x0, [0x0, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(r1, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x1, 0x4}}, 0x10) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L+'}, 0x28, 0x3) [ 309.069196] hfsplus: unable to find HFS+ superblock 21:25:03 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000060000236", 0x1b) [ 309.115104] hfsplus: unable to find HFS+ superblock 21:25:03 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x68, 0x0, 0x0, 0x0, 0x0) 21:25:03 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00005865000236", 0x1b) [ 309.291839] hfsplus: unable to find HFS+ superblock [ 309.379826] hfsplus: unable to find HFS+ superblock 21:25:03 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:25:03 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000081000236", 0x1b) 21:25:03 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x6c, 0x0, 0x0, 0x0, 0x0) 21:25:03 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x400000, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0x8000) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x100, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 309.890736] hfsplus: unable to find HFS+ superblock 21:25:03 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff000001b5000236", 0x1b) [ 309.962305] hfsplus: unable to find HFS+ superblock 21:25:04 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x74, 0x0, 0x0, 0x0, 0x0) 21:25:04 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) syz_execute_func(&(0x7f00000000c0)="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") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 21:25:04 executing program 4: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:25:04 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff000000e0000236", 0x1b) [ 310.126000] hfsplus: unable to find HFS+ superblock [ 310.190326] hfsplus: unable to find HFS+ superblock 21:25:04 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff000000f0000236", 0x1b) 21:25:04 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x7a, 0x0, 0x0, 0x0, 0x0) [ 310.377393] hfsplus: unable to find HFS+ superblock 21:25:04 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000336", 0x1b) [ 310.464158] hfsplus: unable to find HFS+ superblock 21:25:04 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x0) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:25:04 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x300, 0x0, 0x0, 0x0, 0x0) 21:25:04 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000003536", 0x1b) 21:25:04 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) ioctl$SIOCNRDECOBS(r0, 0x89e2) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/checkreqprot\x00', 0x802, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x14) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x400000, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 311.082237] attempt to access beyond end of device 21:25:05 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000002000236", 0x1b) [ 311.109917] loop3: rw=2048, want=3, limit=1 [ 311.119339] hfsplus: unable to find HFS+ superblock [ 311.169191] attempt to access beyond end of device [ 311.174170] loop3: rw=2048, want=3, limit=1 [ 311.198658] hfsplus: unable to find HFS+ superblock 21:25:05 executing program 4: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:25:05 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, &(0x7f0000000480)='TRUE', 0x4, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:25:05 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x500, 0x0, 0x0, 0x0, 0x0) 21:25:05 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000004000236", 0x1b) 21:25:05 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000006000236", 0x1b) [ 311.383553] attempt to access beyond end of device [ 311.401379] loop3: rw=2048, want=3, limit=2 [ 311.413517] hfsplus: unable to find HFS+ superblock [ 311.478187] attempt to access beyond end of device [ 311.483167] loop3: rw=2048, want=3, limit=2 [ 311.504260] hfsplus: unable to find HFS+ superblock 21:25:05 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff0000000a000236", 0x1b) 21:25:05 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x600, 0x0, 0x0, 0x0, 0x0) [ 311.682732] hfsplus: unable to find HFS+ superblock [ 311.746618] hfsplus: unable to find HFS+ superblock 21:25:06 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x600, 0x0, 0x0, 0x0, 0x0) 21:25:06 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff0000000c000236", 0x1b) 21:25:06 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x1ff, 0x200000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000000c0)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x1c) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:25:06 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x700, 0x0, 0x0, 0x0, 0x0) 21:25:06 executing program 4: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:25:06 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff0000000e000236", 0x1b) [ 312.298675] hfsplus: unable to find HFS+ superblock [ 312.348726] hfsplus: unable to find HFS+ superblock 21:25:06 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, &(0x7f0000000480)='TRUE', 0x4, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:25:06 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff0000000f000236", 0x1b) 21:25:06 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x900, 0x0, 0x0, 0x0, 0x0) 21:25:06 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000010000236", 0x1b) [ 312.537732] hfsplus: unable to find HFS+ superblock [ 312.549673] hfsplus: unable to find HFS+ superblock 21:25:06 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, &(0x7f0000000480)='TRUE', 0x4, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:25:06 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000060000236", 0x1b) [ 312.644048] hfsplus: unable to find HFS+ superblock 21:25:06 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0xa00, 0x0, 0x0, 0x0, 0x0) 21:25:06 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff000000e0000236", 0x1b) 21:25:06 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x80200, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 312.808749] hfsplus: unable to find HFS+ superblock 21:25:06 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff000000f0000236", 0x1b) [ 312.872654] hfsplus: unable to find HFS+ superblock 21:25:07 executing program 4: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:25:07 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff000000b5010236", 0x1b) 21:25:07 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, &(0x7f0000000480)='TRUE', 0x4, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:25:07 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0xc0e, 0x0, 0x0, 0x0, 0x0) 21:25:07 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000060236", 0x1b) 21:25:07 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000007240)=[{{&(0x7f00000000c0)=@nfc_llcp, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)=""/41, 0x29}], 0x1, &(0x7f00000001c0)=""/241, 0xf1}, 0x4}, {{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/166, 0xa6}, {&(0x7f0000001380)=""/43, 0x2b}], 0x3}, 0x4}, {{&(0x7f0000001400)=@hci, 0x80, &(0x7f0000002800)=[{&(0x7f0000001480)=""/59, 0x3b}, {&(0x7f00000014c0)=""/125, 0x7d}, {&(0x7f0000001540)=""/3, 0x3}, {&(0x7f0000001580)=""/175, 0xaf}, {&(0x7f0000001640)=""/160, 0xa0}, {&(0x7f0000001700)=""/212, 0xd4}, {&(0x7f0000001800)=""/4096, 0x1000}], 0x7, &(0x7f0000002880)=""/42, 0x2a}, 0x2}, {{&(0x7f00000028c0)=@nl=@unspec, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002940)=""/121, 0x79}, {&(0x7f00000029c0)=""/200, 0xc8}, {&(0x7f0000002ac0)=""/244, 0xf4}, {&(0x7f0000007440)=""/48, 0x30}, {&(0x7f0000002c00)=""/42, 0x2a}, {&(0x7f0000002c40)=""/221, 0xdd}, {&(0x7f0000002d40)=""/181, 0xb5}, {&(0x7f0000003a80)=""/4096, 0x1000}, {&(0x7f0000004a80)=""/4096, 0x1000}], 0x9, &(0x7f0000002ec0)=""/115, 0x73}, 0x5}, {{&(0x7f0000002f40)=@x25={0x9, @remote}, 0x80, &(0x7f0000003380)=[{&(0x7f0000002fc0)=""/181, 0xb5}, {&(0x7f0000003080)=""/22, 0x16}, {&(0x7f00000030c0)=""/192, 0xc0}, {&(0x7f0000003180)=""/233, 0xe9}, {&(0x7f0000003280)=""/206, 0xce}], 0x5, &(0x7f0000003400)=""/164, 0xa4}, 0x6}, {{&(0x7f00000034c0)=@can, 0x80, &(0x7f0000005b40)=[{&(0x7f0000003540)=""/38, 0x26}, {&(0x7f0000003580)=""/103, 0x67}, {&(0x7f0000003600)=""/235, 0xeb}, {&(0x7f0000003700)=""/110, 0x6e}, {&(0x7f0000003780)=""/171, 0xab}, {&(0x7f0000003840)=""/3, 0x3}, {&(0x7f0000003880)=""/121, 0x79}, {&(0x7f0000003900)=""/107, 0x6b}, {&(0x7f0000003980)=""/129, 0x81}, {&(0x7f0000005a80)=""/150, 0x96}], 0xa, &(0x7f0000005c00)=""/29, 0x1d}, 0xe2a}, {{&(0x7f0000005c40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000006040)=[{&(0x7f0000005cc0)=""/219, 0xdb}, {&(0x7f0000005dc0)=""/182, 0xb6}, {&(0x7f0000005e80)=""/82, 0x52}, {&(0x7f0000005f00)=""/7, 0x7}, {&(0x7f0000005f40)=""/125, 0x7d}, {&(0x7f0000005fc0)=""/109, 0x6d}], 0x6}, 0x1}, {{&(0x7f00000060c0)=@ax25={{0x3, @null}, [@rose, @null, @remote, @rose, @bcast, @rose, @default, @null]}, 0x80, &(0x7f0000007200)=[{&(0x7f0000006140)=""/4096, 0x1000}, {&(0x7f0000007140)=""/163, 0xa3}], 0x2}, 0x8}], 0x8, 0x0, 0x0) [ 313.640403] hfsplus: unable to find HFS+ superblock 21:25:07 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:25:07 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff000000000a0236", 0x1b) [ 313.730864] hfsplus: unable to find HFS+ superblock 21:25:07 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff000000000c0236", 0x1b) 21:25:07 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0xd00, 0x0, 0x0, 0x0, 0x0) 21:25:07 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff000000000e0236", 0x1b) [ 313.868663] hfsplus: unable to find HFS+ superblock [ 313.939655] hfsplus: unable to find HFS+ superblock 21:25:07 executing program 4: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:25:08 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0xe00, 0x0, 0x0, 0x0, 0x0) 21:25:08 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff000000000f0236", 0x1b) [ 314.105126] hfsplus: unable to find HFS+ superblock [ 314.189520] hfsplus: unable to find HFS+ superblock 21:25:08 executing program 5 (fault-call:8 fault-nth:0): mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:25:08 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff000000003f0236", 0x1b) 21:25:08 executing program 2: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) setxattr$security_smack_transmute(&(0x7f0000000440)='./bus\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:25:08 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0xe0c, 0x0, 0x0, 0x0, 0x0) [ 314.836658] hfsplus: unable to find HFS+ superblock [ 314.916778] hfsplus: unable to find HFS+ superblock 21:25:09 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000065580236", 0x1b) 21:25:09 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:25:09 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x1f00, 0x0, 0x0, 0x0, 0x0) 21:25:09 executing program 4: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) [ 315.118732] hfsplus: unable to find HFS+ superblock 21:25:09 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000600236", 0x1b) [ 315.151777] FAULT_INJECTION: forcing a failure. [ 315.151777] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 315.172161] CPU: 1 PID: 13650 Comm: syz-executor.5 Not tainted 4.19.38 #6 [ 315.179130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 315.188542] Call Trace: [ 315.191148] dump_stack+0x172/0x1f0 [ 315.194799] should_fail.cold+0xa/0x1b [ 315.198701] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 315.210143] ? ___might_sleep+0x163/0x280 [ 315.210162] ? __might_sleep+0x95/0x190 [ 315.210189] __alloc_pages_nodemask+0x1ee/0x760 [ 315.210210] ? __lock_acquire+0x6eb/0x48f0 [ 315.227202] ? __alloc_pages_slowpath+0x2870/0x2870 [ 315.232237] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 315.232260] alloc_pages_current+0x107/0x210 [ 315.232282] pipe_write+0xa65/0xfb0 [ 315.245838] __vfs_write+0x58e/0x820 [ 315.249561] ? kernel_read+0x120/0x120 [ 315.253458] ? __inode_security_revalidate+0xda/0x120 [ 315.258653] ? selinux_file_permission+0x92/0x550 [ 315.258683] ? security_file_permission+0x8f/0x230 [ 315.258700] ? rw_verify_area+0x118/0x360 [ 315.258715] vfs_write+0x20c/0x560 [ 315.258732] ksys_write+0xea/0x1f0 [ 315.280310] ? __ia32_sys_read+0xb0/0xb0 [ 315.284383] ? do_syscall_64+0x26/0x610 [ 315.288377] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 315.293748] ? do_syscall_64+0x26/0x610 [ 315.297730] __x64_sys_write+0x73/0xb0 [ 315.297748] do_syscall_64+0x103/0x610 21:25:09 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x2000, 0x0, 0x0, 0x0, 0x0) [ 315.297768] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 315.310684] RIP: 0033:0x458da9 [ 315.310699] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 315.310707] RSP: 002b:00007fcc0a7a9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 315.340474] RAX: ffffffffffffffda RBX: 00007fcc0a7a9c90 RCX: 0000000000458da9 [ 315.340484] RDX: 0000000020000020 RSI: 0000000020000000 RDI: 0000000000000004 [ 315.340493] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 315.340501] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc0a7aa6d4 [ 315.340513] R13: 00000000004c80fe R14: 00000000004de4f8 R15: 0000000000000006 [ 315.403483] hfsplus: unable to find HFS+ superblock 21:25:09 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000058650236", 0x1b) [ 315.465031] hfsplus: unable to find HFS+ superblock 21:25:09 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x2200, 0x0, 0x0, 0x0, 0x0) [ 315.599279] hfsplus: unable to find HFS+ superblock [ 315.655955] hfsplus: unable to find HFS+ superblock 21:25:09 executing program 5 (fault-call:8 fault-nth:1): mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:25:09 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000810236", 0x1b) 21:25:09 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x2300, 0x0, 0x0, 0x0, 0x0) 21:25:09 executing program 2: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) setxattr$security_smack_transmute(&(0x7f0000000440)='./bus\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) [ 316.002448] hfsplus: unable to find HFS+ superblock [ 316.020958] FAULT_INJECTION: forcing a failure. [ 316.020958] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 316.051206] CPU: 0 PID: 13679 Comm: syz-executor.5 Not tainted 4.19.38 #6 [ 316.058172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 316.067532] Call Trace: [ 316.070147] dump_stack+0x172/0x1f0 [ 316.073793] should_fail.cold+0xa/0x1b [ 316.077698] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 316.082809] ? ___might_sleep+0x163/0x280 [ 316.086971] ? __might_sleep+0x95/0x190 [ 316.090958] __alloc_pages_nodemask+0x1ee/0x760 [ 316.095636] ? __alloc_pages_slowpath+0x2870/0x2870 [ 316.100660] ? ___might_sleep+0x163/0x280 [ 316.104824] ? copyin+0xb5/0x100 [ 316.108210] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 316.113761] alloc_pages_current+0x107/0x210 [ 316.118181] pipe_write+0xa65/0xfb0 [ 316.121828] __vfs_write+0x58e/0x820 [ 316.125553] ? kernel_read+0x120/0x120 [ 316.129455] ? __inode_security_revalidate+0xda/0x120 [ 316.134657] ? selinux_file_permission+0x92/0x550 [ 316.139515] ? security_file_permission+0x8f/0x230 [ 316.144450] ? rw_verify_area+0x118/0x360 [ 316.148606] vfs_write+0x20c/0x560 [ 316.152160] ksys_write+0xea/0x1f0 [ 316.155705] ? __ia32_sys_read+0xb0/0xb0 [ 316.159774] ? do_syscall_64+0x26/0x610 [ 316.163761] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 316.169145] ? do_syscall_64+0x26/0x610 [ 316.173141] __x64_sys_write+0x73/0xb0 [ 316.177041] do_syscall_64+0x103/0x610 [ 316.180945] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 316.186145] RIP: 0033:0x458da9 [ 316.189343] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 316.208250] RSP: 002b:00007fcc0a7a9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 316.215967] RAX: ffffffffffffffda RBX: 00007fcc0a7a9c90 RCX: 0000000000458da9 [ 316.223238] RDX: 0000000020000020 RSI: 0000000020000000 RDI: 0000000000000004 [ 316.230514] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 316.237786] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc0a7aa6d4 [ 316.245060] R13: 00000000004c80fe R14: 00000000004de4f8 R15: 0000000000000006 [ 316.279742] hfsplus: unable to find HFS+ superblock 21:25:10 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:25:10 executing program 4: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20000020) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r2, 0x0, r3, 0x0, 0x4b000000, 0x1) 21:25:10 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000001b50236", 0x1b) 21:25:10 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x2b48, 0x0, 0x0, 0x0, 0x0) 21:25:10 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000e00236", 0x1b) [ 316.414414] 9pnet: Insufficient options for proto=fd [ 316.421210] hfsplus: unable to find HFS+ superblock [ 316.516342] hfsplus: unable to find HFS+ superblock 21:25:10 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000f00236", 0x1b) 21:25:10 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x2c00, 0x0, 0x0, 0x0, 0x0) 21:25:10 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000020236", 0x1b) [ 316.653273] hfsplus: unable to find HFS+ superblock [ 316.731487] hfsplus: unable to find HFS+ superblock 21:25:10 executing program 5 (fault-call:8 fault-nth:2): mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:25:10 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000040236", 0x1b) 21:25:10 executing program 2: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) setxattr$security_smack_transmute(&(0x7f0000000440)='./bus\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000480)='TRUE', 0x4, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f00000001c0)=0xc) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:25:10 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x3f00, 0x0, 0x0, 0x0, 0x0) [ 316.852672] hfsplus: unable to find HFS+ superblock [ 316.926832] hfsplus: unable to find HFS+ superblock [ 316.929630] FAULT_INJECTION: forcing a failure. [ 316.929630] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 316.960383] CPU: 0 PID: 13714 Comm: syz-executor.5 Not tainted 4.19.38 #6 [ 316.967351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 316.976715] Call Trace: [ 316.979320] dump_stack+0x172/0x1f0 [ 316.982972] should_fail.cold+0xa/0x1b [ 316.986868] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 316.991973] ? ___might_sleep+0x163/0x280 [ 316.996131] ? __might_sleep+0x95/0x190 [ 317.000115] __alloc_pages_nodemask+0x1ee/0x760 [ 317.004799] ? __alloc_pages_slowpath+0x2870/0x2870 [ 317.009817] ? ___might_sleep+0x163/0x280 [ 317.013971] ? copyin+0xb5/0x100 [ 317.017353] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 317.022904] alloc_pages_current+0x107/0x210 [ 317.027321] pipe_write+0xa65/0xfb0 [ 317.030961] __vfs_write+0x58e/0x820 [ 317.034678] ? kernel_read+0x120/0x120 [ 317.038581] ? __inode_security_revalidate+0xda/0x120 [ 317.043783] ? selinux_file_permission+0x92/0x550 [ 317.048643] ? security_file_permission+0x8f/0x230 [ 317.053582] ? rw_verify_area+0x118/0x360 [ 317.057739] vfs_write+0x20c/0x560 [ 317.061295] ksys_write+0xea/0x1f0 [ 317.064875] ? __ia32_sys_read+0xb0/0xb0 [ 317.068945] ? do_syscall_64+0x26/0x610 [ 317.072924] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 317.078296] ? do_syscall_64+0x26/0x610 [ 317.082280] __x64_sys_write+0x73/0xb0 [ 317.086180] do_syscall_64+0x103/0x610 [ 317.090089] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 317.095281] RIP: 0033:0x458da9 [ 317.098481] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 317.117385] RSP: 002b:00007fcc0a7a9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 317.125103] RAX: ffffffffffffffda RBX: 00007fcc0a7a9c90 RCX: 0000000000458da9 [ 317.132371] RDX: 0000000020000020 RSI: 0000000020000000 RDI: 0000000000000004 [ 317.139651] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 317.146923] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc0a7aa6d4 [ 317.154192] R13: 00000000004c80fe R14: 00000000004de4f8 R15: 0000000000000006 21:25:11 executing program 0 (fault-call:12 fault-nth:0): mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x0) 21:25:11 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000060236", 0x1b) 21:25:11 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) 21:25:11 executing program 4: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20000020) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r2, 0x0, r3, 0x0, 0x4b000000, 0x1) 21:25:11 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff000000000a0236", 0x1b) [ 317.610286] 9pnet: Insufficient options for proto=fd [ 317.612192] hfsplus: unable to find HFS+ superblock [ 317.669443] hfsplus: unable to find HFS+ superblock 21:25:11 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x4244, 0x0, 0x0, 0x0, 0x0) 21:25:11 executing program 5 (fault-call:8 fault-nth:3): mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:25:11 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff000000000c0236", 0x1b) [ 317.810394] hfsplus: unable to find HFS+ superblock [ 317.830306] FAULT_INJECTION: forcing a failure. [ 317.830306] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 317.869748] CPU: 0 PID: 13732 Comm: syz-executor.5 Not tainted 4.19.38 #6 [ 317.876733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 317.886091] Call Trace: [ 317.888692] dump_stack+0x172/0x1f0 [ 317.892330] should_fail.cold+0xa/0x1b [ 317.896232] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 317.901344] ? ___might_sleep+0x163/0x280 [ 317.905509] ? __might_sleep+0x95/0x190 [ 317.909494] __alloc_pages_nodemask+0x1ee/0x760 [ 317.914170] ? __alloc_pages_slowpath+0x2870/0x2870 [ 317.919189] ? ___might_sleep+0x163/0x280 [ 317.923341] ? copyin+0xb5/0x100 [ 317.926716] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 317.932261] alloc_pages_current+0x107/0x210 [ 317.936681] pipe_write+0xa65/0xfb0 [ 317.940326] __vfs_write+0x58e/0x820 [ 317.944044] ? kernel_read+0x120/0x120 [ 317.947942] ? __inode_security_revalidate+0xda/0x120 [ 317.953138] ? selinux_file_permission+0x92/0x550 [ 317.958000] ? security_file_permission+0x8f/0x230 [ 317.963051] ? rw_verify_area+0x118/0x360 [ 317.967207] vfs_write+0x20c/0x560 [ 317.970756] ksys_write+0xea/0x1f0 [ 317.974302] ? __ia32_sys_read+0xb0/0xb0 [ 317.978369] ? do_syscall_64+0x26/0x610 [ 317.982345] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 317.987711] ? do_syscall_64+0x26/0x610 [ 317.991694] __x64_sys_write+0x73/0xb0 [ 317.995590] do_syscall_64+0x103/0x610 [ 317.999491] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 318.004680] RIP: 0033:0x458da9 [ 318.007876] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 318.026780] RSP: 002b:00007fcc0a7a9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 318.034495] RAX: ffffffffffffffda RBX: 00007fcc0a7a9c90 RCX: 0000000000458da9 [ 318.041765] RDX: 0000000020000020 RSI: 0000000020000000 RDI: 0000000000000004 [ 318.049037] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 318.056307] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc0a7aa6d4 [ 318.063577] R13: 00000000004c80fe R14: 00000000004de4f8 R15: 0000000000000006 21:25:12 executing program 2 (fault-call:1 fault-nth:0): r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) flock(r0, 0x0) 21:25:12 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff000000000e0236", 0x1b) [ 318.101661] hfsplus: unable to find HFS+ superblock 21:25:12 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x4442, 0x0, 0x0, 0x0, 0x0) 21:25:12 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff000000000f0236", 0x1b) [ 318.194491] FAULT_INJECTION: forcing a failure. [ 318.194491] name failslab, interval 1, probability 0, space 0, times 0 [ 318.195697] hfsplus: unable to find HFS+ superblock [ 318.235054] CPU: 0 PID: 13744 Comm: syz-executor.0 Not tainted 4.19.38 #6 [ 318.242018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 318.251374] Call Trace: [ 318.253984] dump_stack+0x172/0x1f0 [ 318.257623] should_fail.cold+0xa/0x1b [ 318.261527] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 318.266639] ? lock_downgrade+0x810/0x810 [ 318.270803] ? ___might_sleep+0x163/0x280 [ 318.274971] __should_failslab+0x121/0x190 [ 318.279212] should_failslab+0x9/0x14 [ 318.283022] __kmalloc+0x2e5/0x750 [ 318.286573] ? iter_file_splice_write+0x16e/0xbe0 [ 318.291426] iter_file_splice_write+0x16e/0xbe0 [ 318.296111] ? __might_sleep+0x95/0x190 [ 318.300089] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 318.305371] ? __lock_is_held+0xb6/0x140 [ 318.309448] ? rcu_read_lock_sched_held+0x110/0x130 [ 318.314470] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 318.319231] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 318.324770] ? __sb_start_write+0x1ac/0x360 [ 318.329100] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 318.334380] do_splice+0x644/0x1260 [ 318.338020] ? opipe_prep.part.0+0x2d0/0x2d0 [ 318.342435] ? __fget_light+0x1a9/0x230 [ 318.346421] __x64_sys_splice+0x2c6/0x330 [ 318.350754] do_syscall_64+0x103/0x610 [ 318.354651] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 318.359839] RIP: 0033:0x458da9 [ 318.363032] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 318.381933] RSP: 002b:00007fec2baf2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 318.389660] RAX: ffffffffffffffda RBX: 00007fec2baf2c90 RCX: 0000000000458da9 [ 318.396928] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000005 [ 318.404206] RBP: 000000000073bfa0 R08: 000000004b000000 R09: 0000000000000000 [ 318.411479] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fec2baf36d4 [ 318.418746] R13: 00000000004c7e86 R14: 00000000004dd4c0 R15: 0000000000000007 [ 318.457939] hfsplus: unable to find HFS+ superblock 21:25:12 executing program 0 (fault-call:12 fault-nth:1): mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x0) 21:25:12 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) flock(r0, 0x0) 21:25:12 executing program 4: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20000020) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r2, 0x0, r3, 0x0, 0x4b000000, 0x1) 21:25:12 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x4800, 0x0, 0x0, 0x0, 0x0) 21:25:12 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000100236", 0x1b) 21:25:12 executing program 5 (fault-call:8 fault-nth:4): mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:25:13 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000600236", 0x1b) 21:25:13 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x80a0100, 0x0) flock(r0, 0x0) [ 318.999035] hfsplus: unable to find HFS+ superblock [ 319.005664] 9pnet: Insufficient options for proto=fd [ 319.012462] FAULT_INJECTION: forcing a failure. [ 319.012462] name fail_page_alloc, interval 1, probability 0, space 0, times 0 21:25:13 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) flock(r0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) connect$ax25(r0, &(0x7f0000000080)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x5}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) [ 319.056726] hfsplus: unable to find HFS+ superblock [ 319.062232] CPU: 1 PID: 13756 Comm: syz-executor.5 Not tainted 4.19.38 #6 [ 319.069171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 319.078527] Call Trace: [ 319.081129] dump_stack+0x172/0x1f0 [ 319.084772] should_fail.cold+0xa/0x1b [ 319.088671] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 319.093781] ? ___might_sleep+0x163/0x280 [ 319.097954] ? __might_sleep+0x95/0x190 [ 319.101947] __alloc_pages_nodemask+0x1ee/0x760 [ 319.101968] ? __alloc_pages_slowpath+0x2870/0x2870 [ 319.101983] ? ___might_sleep+0x163/0x280 [ 319.102002] ? copyin+0xb5/0x100 [ 319.108190] FAULT_INJECTION: forcing a failure. [ 319.108190] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 319.111676] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 319.111695] alloc_pages_current+0x107/0x210 [ 319.111712] pipe_write+0xa65/0xfb0 [ 319.111734] __vfs_write+0x58e/0x820 [ 319.111752] ? kernel_read+0x120/0x120 21:25:13 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x4a0103, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) flock(r0, 0x0) [ 319.111772] ? __inode_security_revalidate+0xda/0x120 [ 319.131271] ? selinux_file_permission+0x92/0x550 [ 319.131297] ? security_file_permission+0x8f/0x230 [ 319.131315] ? rw_verify_area+0x118/0x360 [ 319.171505] vfs_write+0x20c/0x560 [ 319.175054] ksys_write+0xea/0x1f0 [ 319.178606] ? __ia32_sys_read+0xb0/0xb0 [ 319.182681] ? do_syscall_64+0x26/0x610 [ 319.186661] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 319.192051] ? do_syscall_64+0x26/0x610 [ 319.196039] __x64_sys_write+0x73/0xb0 [ 319.199939] do_syscall_64+0x103/0x610 [ 319.203844] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 319.209034] RIP: 0033:0x458da9 [ 319.212227] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 319.231135] RSP: 002b:00007fcc0a7a9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 319.238855] RAX: ffffffffffffffda RBX: 00007fcc0a7a9c90 RCX: 0000000000458da9 [ 319.246128] RDX: 0000000020000020 RSI: 0000000020000000 RDI: 0000000000000004 [ 319.253411] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 319.260683] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc0a7aa6d4 [ 319.268744] R13: 00000000004c80fe R14: 00000000004de4f8 R15: 0000000000000006 [ 319.278239] CPU: 0 PID: 13767 Comm: syz-executor.0 Not tainted 4.19.38 #6 [ 319.285190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 319.294541] Call Trace: [ 319.297134] dump_stack+0x172/0x1f0 [ 319.300775] should_fail.cold+0xa/0x1b [ 319.304673] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 319.309776] ? ___might_sleep+0x163/0x280 [ 319.313936] ? __might_sleep+0x95/0x190 [ 319.317926] __alloc_pages_nodemask+0x1ee/0x760 [ 319.322602] ? __alloc_pages_slowpath+0x2870/0x2870 [ 319.327632] ? find_get_entry+0x3e8/0x820 [ 319.331796] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 319.337347] alloc_pages_current+0x107/0x210 [ 319.341768] __page_cache_alloc+0x2bd/0x460 [ 319.346097] pagecache_get_page+0x231/0xa40 [ 319.350430] grab_cache_page_write_begin+0x7b/0xb0 [ 319.355369] ext4_da_write_begin+0x2d7/0xec0 [ 319.359790] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 319.365335] ? ext4_write_begin+0x1470/0x1470 [ 319.369837] ? _copy_from_iter_flushcache+0xb30/0xb30 [ 319.375041] generic_perform_write+0x231/0x530 [ 319.379635] ? page_endio+0x780/0x780 [ 319.383443] ? current_time+0x140/0x140 [ 319.387423] ? lock_acquire+0x16f/0x3f0 [ 319.391397] ? ext4_file_write_iter+0x250/0x11a0 [ 319.396161] __generic_file_write_iter+0x25e/0x630 [ 319.401101] ext4_file_write_iter+0x33f/0x11a0 [ 319.405690] ? ext4_file_mmap+0x410/0x410 [ 319.409838] ? __lock_is_held+0xb6/0x140 [ 319.413917] ? __x64_sys_splice+0x2c6/0x330 [ 319.418251] ? ___might_sleep+0x163/0x280 [ 319.422918] do_iter_readv_writev+0x55d/0x830 [ 319.427422] ? vfs_dedupe_file_range+0x6f0/0x6f0 [ 319.432188] ? security_file_permission+0x8f/0x230 [ 319.437123] ? rw_verify_area+0x118/0x360 [ 319.441278] do_iter_write+0x184/0x600 [ 319.445177] ? rcu_read_lock_sched_held+0x110/0x130 [ 319.450195] ? __kmalloc+0x5e4/0x750 [ 319.453923] vfs_iter_write+0x77/0xb0 [ 319.457733] iter_file_splice_write+0x667/0xbe0 [ 319.462428] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 319.467722] ? rcu_read_lock_sched_held+0x110/0x130 [ 319.472743] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 319.477506] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 319.483044] ? __sb_start_write+0x1ac/0x360 [ 319.487368] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 319.492648] do_splice+0x644/0x1260 [ 319.496294] ? opipe_prep.part.0+0x2d0/0x2d0 [ 319.500708] ? __fget_light+0x1a9/0x230 [ 319.504692] __x64_sys_splice+0x2c6/0x330 [ 319.508853] do_syscall_64+0x103/0x610 [ 319.512761] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 319.517954] RIP: 0033:0x458da9 [ 319.521150] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 319.540077] RSP: 002b:00007fec2baf2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 319.547789] RAX: ffffffffffffffda RBX: 00007fec2baf2c90 RCX: 0000000000458da9 [ 319.555061] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000005 [ 319.562332] RBP: 000000000073bfa0 R08: 000000004b000000 R09: 0000000000000000 [ 319.569608] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fec2baf36d4 [ 319.576888] R13: 00000000004c7e86 R14: 00000000004dd4c0 R15: 0000000000000007 21:25:13 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0xa0103, 0x0) flock(r0, 0x0) 21:25:13 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000e00236", 0x1b) 21:25:13 executing program 0 (fault-call:12 fault-nth:2): mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x0) 21:25:13 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x482b, 0x0, 0x0, 0x0, 0x0) 21:25:13 executing program 2: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r1 = fcntl$getown(r0, 0x9) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000015c0)=r1) sendmsg$kcm(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000140)="c4bceb4595bae4a03b881e22bf3dc754aaf9f3234a7eab2c33292b33c168930e8dee545ca1920f57358c8ef8060bd14f1df8f938bb7cac1c9a6f9bda6bbea39962daab01e81631f216ae36b52f1512e3c0d3ea2d427d96179e228570ca027adcb2a61d5b7861affbc51a4a7736decd01c3fa439cd1a88bded1c230b8dd4b563b6116838f45f7a33b387efc5da01d64ff0989e39c16ffd19dbe21f445bbed4fbf489df16dfc0ada73b893a30c7bfd72a96ba6187c62b9f760fac8ce9255c8ecd57989fcfa7e22fe2895ab2f482fb0a4a1914da185f81d92d833943afab9adcbed0bf3c80af449c960615874de2aafc103a8fca1699008afeba2ec008c4f6556c871fb95f095d3bb2b77a6edac8b63172f83f4a13fbf77804f2dd5998e439bafd55e3ac695bd0987167a82d72812467f6f8b86884dc670f98989ba8682de06f2c7d70c5b9563cc5b28873f6794403d4df1cb917ec048d56e188fbe10800b8e5b184905aed2e8953a13081a805b62ce2e35616f345e6e8369e8e311de2c9b0735d451b02c836307fa0adcdb6d23b6e7100465f3e84123da499f0ece7161347ccab98137c83a0b7e74d982419c225502f9ca363dec9dc073905984ad4a9aa21e11f35431b0276e4c2d226013c9efb4414c6eda53787e41e7c62e54aa6bd969cb110df757df7baade651725c499b93251e3a9b4000770dc9ab9ac2ec98c50ee2d46992d2aa34c48cb994652443bdeb21270dac5c065e3ebe88cee1d296a0051aa67643a50cc1ab5c27f92fbb2818d4a01bfb3183c0a878357a8299e555be8150ea4d7933176220b29552ee90b1f0077303a0a42fa229f7c25d6df8441d161b8cc3112aeb6d7147a2c76aaa0aee1d0bdd3e306123c29f95193c16e3c344e41c4f6ddbc24b5ccd5f07dda9f74710ae4386d5752cc4ae8e7000f23947a78b6d8e25a8172de10f5d05755cd604e4583a07747608b8d6c640bb7a29612fb08b26725d0dfac70549964ff6f6e5673cf2580786f1fd5ee98ce82cffa2afee590cca73b0a7dae855ee2bd76e523ffad50070cf7ceca1b96dbf4f57b7b7b2439190a54a682102c46a66d037ab70e723fd1d5074d60d7b14046a606053f2b940f20d691a69fe7e963c2bbe306e910229a4c7299b0f54bf9b1dbd5c538479bb22736ad3a3b16eecaa6e146fed14cb80a8113338598d7124cd3349a072abb14f71bea976f66cdf9ac05d8eab77337514d8571ed5cc5cffcb4064ff6968bfa7ba37f3a3c246b6da94241d8d1e602d8a93bf0145c608743656843ad039345ea07645afaf4e9eb2a352e5f27df4cb35b38abd4e10cf6162f4b4d035dd13da6c66d5d1f5fc58f2fd35fa9913b3e4da0f2b59e2d7b6414355405401ca5b207e86957526752fcc187ad4470851a1b3289ca0407da52b4828f4b0fe3a16e9f0598bf8431ce1eb23c88c2874c535e15ff74ef54fe66d63c5f57a04c466a32442d770b109220896b77255f542ce3f06d155232628ba7d9108ad3f30ec23cdc40fccbcc1764cc0526dc65c2034351915780a49e5fc077c0efe08c1fbfa3caad5123998af8e6d40d6322b3de7040777781e3d2c402673b57c84a81d6a7be6c6bbbd69fff266e77f0713f072d333605d36aab590a8d765600c787252b20c17e4b60543eab0148914bfc716f2c1bf999bacf0fbc9a19f06f7afb6b192535772881c75b718a3abceca543c4c34742f903da714b691c700e0b002f826312d971e5ba358fe06160f2d27bbd280a13102af6e87aa385c208ccc37236342ede0011bb6e021b42ad5f7e7f902b96dc10beedf4963ff75b661fd37652bf2a84e94d14b8b869cda10a025007183d622f374dbd9b0397439de66183624509e4e7453443c4b1723c0f7c31471c73804c9550a193201e99b6e1eeccc5b5d4111eaa30de991e4586d3fb20c399da811596629c4b064938b1cbdaa7fc38b7a914b0838b90b0861e7d8723fe58128812e86eea69bf0b81284ec1bfb022c0bbe98a22355227e512da99a2f3f5bdb4ad033b039d14f5c7a2c54a31a1f6b6835bc5d195498279ee2e34c1facbd19234da07e9613813d13b5013393a93c3d7c02eda020893bffc4949f971fd46e4bfef4847259bef0c541a4ab7a03868899d51062fdc446c707b54d7f97cc08e8c2663c7b85b215e640c5f399abab6767a5933608b8741c6275ec24bc5d4e5bdc8c33f323ce1eefde392de50f6050abf57a92fcc6b2d73b735776a624d0b7facf438c9d65e0691922cb5ba5ee0e3fc0714830c99d1f50f97a4334301bf24327666209be367109ae0317c31f83445fbc2501f296f17e06d37aee3b6398e6629d6ea3a1cc223213a10d8b873a1f333cfba858900eb999cbb62f82bfbe8c124198ed714eec6e2c5efe538967976695a3e4153b634759ce3c7225db7c075f3e8e3bc99dc8a91bfe78573b9c2f065af1894bece39ce8ca2516a37e0d23ea60ce9d83ab9324eb0a0190936c7f5021cb3a5cb07d45b16f010ce4bc610cdd366ab0cdfe46ad22e9d03a14c71876a150ea709395ba77d96ddc223754794dc35e100f62b40b13745d9a3504a890821619cbd113d012ed6ce3f62be4400d75578988686e56b204a7caa89943786c7606d53ddf19142b5c0fc3b0c92356f923d712861fb25aa6693039cc468d220569227d941b67f98963997eda29294832e4634e96201e705c5a02642ac7a10a4846c7ebad1d2040f376e9c62cc07097f451b7c251330434cebcca6746ce5310c038c4b19827806075b9cc9c2d7016f1fc3d1b5bffd3d565e04ec90b58a3246646e6300f927bfc38bb9d29434a5706b11046a480fe3373b9217e0c1e074113bd4f7ec5366f4cda9885c7aed373ac24e5c5dac07dcb65698c0c58808192b136b5fbcd86f99b0ddadd59bed2ef36e98eaceea76984acfa1d40aeddc579dc6245b8918cf2c481b3b8aee1871651fdbace30985516a5b0eba5722c11e1f1565fdae5155f1a02f39beef6f087150ab87ce01a8011c3867cf9d7f1d691888b4962ef1997cf2760ce21872a0039af38e24062efa7e18ddedad2674475bd56cd3cf908f78160c972bee6cc13eaef56d926f1f31461beececcc5507ff8470044fb685d9a3535ff7a5c090f3857d0f766786a7c7dd640478e0b3db4ee6c27f68031d372e2a19cf4cae904f8ffa67d2e5ba896f76af447249c8f605095adc6d594b856e08043c9780b3c42b3f1c01c18cc5a7d307334fff2d4158b0d5c809d4a40d0fd2aa786f2d6227137f497eb76fafda5fdf236c8167d4d6382949947b2267eeddbf40ca390dbdc48626360a344bc68faee315c3c5b57753831f375442067220539e4e2aaff876e1e01d9c22c7ed80e2fe4b1c4bf1e29574b3c18a35941360e544cd33f8812172adf7108f9269afff54ad70c758575b1d477020e5823d7487397de6e8f371be0b49afeeb28a21e2915cf91149166ce8ea51eb2d3d7e1882aa0f626a7a6f9a68941acbd569334b9443b518d9ecc2d73a628dc582fba9eead3942be03c9dd3686820cfc2bd4c84a6bee323c367f610e7d1de2ceaebfdc547a3700822a79bee61c6de6d61645fcd1b623760c06060c65f469d1f6d86ffdc8dc28c3840ae3c77c14b0c568d9115b71d670d18d16c4a6a58a7951fae8e539cd707af88d84356a42c17777422451f5219475a245e4605110ed8eabf7f9df67883059cdd0b2a055328afbd6906da7cd1be0e9f5dc88841405707642575999a87b486f13943501080978ec30829eaee3e47702a7dec36a129feab61fa814613e702f29cbc6f33958e54a2f9efb28dfd71953d684e43c2781589863cc354560deac03d3f7bcd4065e7586ebedfdca242e052d9d627c5284fa815def110493d74fc4d41f8d27f7e374920e9b30bf4cacfbd38de62b8310e361beb4555cef63605a85a1392b2b453e00c1d7ffdcc98ab2aacbab435e02854edb7dd3093a4bee05da7cd5f5da0bd5a9696c5daa2a62ea5ddd0d4f33af6b5bd847dbe4f574a0a7cfe3dae9e99e08bb30de65f22909a17ae35d0ca33b0467f42389ec8c9a6d7c5b8f2e528aeffb105de8ace8919152d72715d12904f60190d7f5f0546fdc54977635b1a1cffde9c87700f331779799c190c851181b22cef2c791927fde5f2459cc231a164c65d0571f9da3205daf4c35de2e957a36bec8beecc70f1e5c9da2ae327d11ed8b743a233266d779df7a43d9d17828bc2ce6d242c91ff8311b0bafaf880fc8417612d22fa04b062bf3fbe631942640efb428cd0dff503adfaf560b5194ceea706ab754126c14552fca0e053ba1ed923d26fe223c646baae9bc29dafa0708db3d65aab5c87ce4d93411edc51fb511417eb09b1eb3f8a870a3deeb6fad5e843c8a3691e1b325290ede5df1f19075701a5fc92c15d4881c4f5b83d4f7b8615747c743b3bd3ed1a319965a736073c24850e48600ebf1265a4e914263882b3724eebd51c88a0c84af72050535352da8c1b79812917b008d1db67dbad99272a6ca95d19313a0432821d453f745a148bbb154be9bfebbb4c770ae80aef9a7461545a6d5c3f48f8b6f41f98a1a333e10560f9902d77140b2a7567c47f011d1ad7379e3612b408b0743d119712d4b8e3e4e7be44f441de1a599c2eaf0d213940a92c29670198fffc047583584ff3e4124217be83e46efab9039fd6ced9396435a9c709996112eaaf642c2e121c59a27a52e350df8cad827184d6766372322f258e6f4d6159e4dc306977d3a8f3f0f9aac5a5a67ca705215029696d7c323aae15500cff5bb98e4575b0288ee174b50ae827b0c12e31aa1b6327dad20ec9f84bf5e89acc536da601cc1aa9fb6ac3b7cd6728914222de10133d5d4dc8b570a89d5ecfd9c9c9171b09a36416b83a8a6c47b0d65f3d7390c978b9476a21e60ee64c1fcd7da13dfae871f09ad6469302201c0ce5bf66ebbcbd59567715fa669566ecaa44617a158f0c139c7b39a97f3ef89e36265c4920e93fa334298d650f7d041a55a61688220a5247501334ce338902e497229283ccd2ed24eec8746669212a1ec83a1435963b28112ee0711773c67e76014c2b53cb68cf36164164af3fc2d7539afa4e676741bacf7c76353936a330954868f27e49a4e6b5bc256d24ce9d54a513f7b34cac271d4648116fbc6a1c138d68342930d2ca9bb20bbb6ad729a41265aa58b4639889dd07a232756e132da6494647fcb2b85d1f914057a2b3385979b2a3506c5ae68bfd2b468fee3aad958fc1a5b5d07fc55bd8785125280b7078d9e8cdc64adcb1aecb9c65d47804868d45ed8944538be99e09a883563fc05bba3ba3cf7e33aa3c07455d22a16e364ab9e9b9c7375fdafc3ea7bc1c6d57a1842cd720c8a3d0b962522344d6b747d3a484d719a510bb6272e2f60e93c71e1dd923237646ec7dffe00c1ae5dbe3e80d070c550b242833a4620e50343ba348359675e3984d39eb626680717faa5453fcc2147bba3881b9925ba91fd42919a5e44657dd703f75925a7fe2a4e2b931a9c574c18267e82ab537311b22d74ae7e73e95a3804837303dc392e4b54b1638e97df483468db78da994f0450b4e8b79a8d9e0465ccbd8b6955e0b9d3a4ffbb72b4aa72852247748f6e801ecad4e55affd6a6de743a412b1b52b3854a04e297ab309802582c20f7e88790d5bca2fc440a786ce7fd93bd52411a6f98f9fd6c32d52a9831288a2cb61c156884c1a82bb6f6924a6f3574788a00128f117484a203226912cf17488f628e043492bcadd8b41d92de28ad1f7e623b2f95c5b53e7a8690db120f93f30", 0x1000}, {&(0x7f0000001140)="68bc9d66715df0dd4fa36ef9004f85a348346e22ecb0754dc7748f131abfa9820b4ba523a5a938b96279c62fd0604f0adc9daef06fe85de7d96e493c7493d2f85f2c6d0793ab2e9812e79ee04aa1fd604c73", 0x52}, {&(0x7f00000011c0)="b8bbff5b05131a82946283082c611acc8d7be72940cbd6e08705f511d5aa1588c4c1b2de7c11dca534cb34de03f252f67569dcf9e7fcce661b2b95a3101f32f55fc46c68878075acd83ce288f6d406ac09", 0x51}, {&(0x7f0000001240)="ae928b2d1ac4e12003eb626c613aaebab374c91f82d2d6c9041821e02d65e08b03fdc52bf337bba7e286786112aaaa16b935b4fcfd5820c784ca909a70493e960a06d9414e410492f215c830b204455fbb27785a3c3aaf9b976603d73ee72a686c5b9d0faf8faf8e6f02fa8812cc2728088c27c037ae5f9f87db2b3f5a0716d1f34bafdcbe8f63e45d6fe9f95df00b5de651e0d4e11cb27cbe94bc8337067bc0fc92bf826010d2d86c4753e276943ba01f3ca90472d5a1c35ac38d67f500f196d0e9ab67bb7fc4ea889de1c520e077aa3dbb850f62419851baf47f3ea2", 0xdd}, {&(0x7f0000001340)="3659811b1bc625b3c1a7d50b281e2e50bb6963b790d063c6be32f67ddd4703010b08c8acdc16ff746cab1f1de4f3114560f41f42bbc358d2660e39eee60a138f001040a1d51731e2663e681d9759af87b455213c74ea1fbd9390d4cd10101418fefddac6aeb384581b2518b9142353bebc8dc8e9c0d6ba12edbd448d71598a14de94634e7e4de1a92b373cc6049091ad7bf4fe687070e638db8a85b6f87cf0cd1b5fd4af6138d751b6d0264c71819842c367d3a6049fd3ac10284d753a361eede8b748c7f893150ed7117b65ed45b89bba3bc21b87b3788e75d2b8b0d353e3de0e183cf989161ed5327cb03ddd42c76625e4036a113d8b108f", 0xf9}, {&(0x7f0000001440)="fdd942f0716c8ce65f6c1d35ffaa64679c8942144272ce15ed13265221c83a8039c03116ef9bb405b5f11cd61fea84ae39dda30815258a5d0f601e2cd58678ac98cc1c511037d5a748b0d42d7c7b97feb099e98fa0dcb6746d0af634d4b835dd867453978383bb3d68098d30dcc68634927d789c9874a9b302903b7a2c22d1224d6501015147bae2ada2", 0x8a}], 0x6}, 0x8000) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x12000, 0x0) flock(r2, 0x0) bind$ax25(r2, &(0x7f0000000000)={{0x3, @null, 0x6}, [@default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @null, @bcast]}, 0x48) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f00000000c0)={0x1, 0x6, 0x874, 0x9}) 21:25:13 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000336", 0x1b) 21:25:13 executing program 5 (fault-call:8 fault-nth:5): mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:25:13 executing program 4: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = dup2(r1, r1) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno'}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) [ 319.909778] hfsplus: unable to find HFS+ superblock [ 319.924688] FAULT_INJECTION: forcing a failure. [ 319.924688] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 319.969172] 9pnet: Insufficient options for proto=fd [ 319.971486] hfsplus: unable to find HFS+ superblock [ 319.977035] CPU: 1 PID: 13790 Comm: syz-executor.5 Not tainted 4.19.38 #6 [ 319.986309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 319.995664] Call Trace: [ 319.995692] dump_stack+0x172/0x1f0 [ 319.995716] should_fail.cold+0xa/0x1b [ 319.995737] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 319.995752] ? ___might_sleep+0x163/0x280 [ 319.995767] ? __might_sleep+0x95/0x190 [ 319.995789] __alloc_pages_nodemask+0x1ee/0x760 [ 320.001993] ? __alloc_pages_slowpath+0x2870/0x2870 [ 320.002011] ? ___might_sleep+0x163/0x280 [ 320.002031] ? copyin+0xb5/0x100 [ 320.002052] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 320.041780] alloc_pages_current+0x107/0x210 [ 320.046202] pipe_write+0xa65/0xfb0 [ 320.049854] __vfs_write+0x58e/0x820 [ 320.053573] ? kernel_read+0x120/0x120 [ 320.057467] ? __inode_security_revalidate+0xda/0x120 [ 320.062664] ? selinux_file_permission+0x92/0x550 [ 320.067517] ? security_file_permission+0x8f/0x230 [ 320.072450] ? rw_verify_area+0x118/0x360 [ 320.076618] vfs_write+0x20c/0x560 [ 320.080170] ksys_write+0xea/0x1f0 [ 320.083720] ? __ia32_sys_read+0xb0/0xb0 [ 320.087789] ? do_syscall_64+0x26/0x610 [ 320.091766] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 320.097132] ? do_syscall_64+0x26/0x610 [ 320.101118] __x64_sys_write+0x73/0xb0 [ 320.105012] do_syscall_64+0x103/0x610 [ 320.108914] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 320.114108] RIP: 0033:0x458da9 [ 320.117306] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 320.136211] RSP: 002b:00007fcc0a7a9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 320.143928] RAX: ffffffffffffffda RBX: 00007fcc0a7a9c90 RCX: 0000000000458da9 [ 320.151199] RDX: 0000000020000020 RSI: 0000000020000000 RDI: 0000000000000004 [ 320.158467] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 21:25:14 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000003536", 0x1b) 21:25:14 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x10080, 0x0) getsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0), &(0x7f0000000100)=0x175) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) flock(r1, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000000)=@bpq0='bpq0\x00', 0x10) [ 320.165742] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc0a7aa6d4 [ 320.173016] R13: 00000000004c80fe R14: 00000000004de4f8 R15: 0000000000000006 21:25:14 executing program 5 (fault-call:8 fault-nth:6): mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:25:14 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x4858, 0x0, 0x0, 0x0, 0x0) 21:25:14 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000336", 0x1b) 21:25:14 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0xa0103, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) flock(r0, 0x0) [ 320.342815] FAULT_INJECTION: forcing a failure. [ 320.342815] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 320.362699] hfsplus: unable to find HFS+ superblock [ 320.374173] CPU: 1 PID: 13810 Comm: syz-executor.5 Not tainted 4.19.38 #6 [ 320.381147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 320.390508] Call Trace: [ 320.393107] dump_stack+0x172/0x1f0 [ 320.396752] should_fail.cold+0xa/0x1b [ 320.400653] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 320.405765] ? ___might_sleep+0x163/0x280 [ 320.409931] ? __might_sleep+0x95/0x190 [ 320.413920] __alloc_pages_nodemask+0x1ee/0x760 [ 320.418704] ? __alloc_pages_slowpath+0x2870/0x2870 [ 320.423726] ? ___might_sleep+0x163/0x280 [ 320.427881] ? copyin+0xb5/0x100 [ 320.431257] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 320.437258] alloc_pages_current+0x107/0x210 [ 320.441678] pipe_write+0xa65/0xfb0 [ 320.445330] __vfs_write+0x58e/0x820 [ 320.449056] ? kernel_read+0x120/0x120 [ 320.452950] ? __inode_security_revalidate+0xda/0x120 [ 320.458148] ? selinux_file_permission+0x92/0x550 [ 320.463003] ? security_file_permission+0x8f/0x230 [ 320.467941] ? rw_verify_area+0x118/0x360 [ 320.472093] vfs_write+0x20c/0x560 [ 320.475645] ksys_write+0xea/0x1f0 [ 320.479193] ? __ia32_sys_read+0xb0/0xb0 [ 320.483258] ? do_syscall_64+0x26/0x610 [ 320.487236] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 320.492690] ? do_syscall_64+0x26/0x610 [ 320.496671] __x64_sys_write+0x73/0xb0 [ 320.500568] do_syscall_64+0x103/0x610 [ 320.504467] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 320.509659] RIP: 0033:0x458da9 [ 320.512859] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 320.531769] RSP: 002b:00007fcc0a7a9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 320.539497] RAX: ffffffffffffffda RBX: 00007fcc0a7a9c90 RCX: 0000000000458da9 [ 320.546768] RDX: 0000000020000020 RSI: 0000000020000000 RDI: 0000000000000004 [ 320.554044] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 320.561322] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc0a7aa6d4 [ 320.568596] R13: 00000000004c80fe R14: 00000000004de4f8 R15: 0000000000000006 [ 320.614848] hfsplus: unable to find HFS+ superblock 21:25:14 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x0) 21:25:14 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000003536", 0x1b) 21:25:14 executing program 2: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x200) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) flock(r1, 0x0) 21:25:14 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x4c00, 0x0, 0x0, 0x0, 0x0) 21:25:14 executing program 4: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = dup2(r1, r1) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno'}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:25:14 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x800, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000080)=""/219) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) flock(r1, 0x0) [ 320.843552] hfsplus: unable to find HFS+ superblock 21:25:14 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0xf) 21:25:14 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x10) [ 320.936203] 9pnet: Insufficient options for proto=fd [ 320.948766] hfsplus: unable to find HFS+ superblock 21:25:15 executing program 5 (fault-call:8 fault-nth:7): mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:25:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000080)='\x00', 0x0) clone(0x12102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0x0) execveat(r0, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) unshare(0xffffffd) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20\x00', 0x14100, 0x0) flock(r1, 0x0) 21:25:15 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x4d50, 0x0, 0x0, 0x0, 0x0) 21:25:15 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1c) [ 321.200123] hfsplus: unable to find HFS+ superblock [ 321.265953] FAULT_INJECTION: forcing a failure. [ 321.265953] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 321.281194] hfsplus: unable to find HFS+ superblock [ 321.337122] CPU: 1 PID: 13852 Comm: syz-executor.5 Not tainted 4.19.38 #6 [ 321.344105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 321.353477] Call Trace: [ 321.356092] dump_stack+0x172/0x1f0 [ 321.359764] should_fail.cold+0xa/0x1b [ 321.363686] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 321.368810] ? ___might_sleep+0x163/0x280 [ 321.372983] ? __might_sleep+0x95/0x190 [ 321.376985] __alloc_pages_nodemask+0x1ee/0x760 [ 321.381676] ? __alloc_pages_slowpath+0x2870/0x2870 [ 321.386719] ? ___might_sleep+0x163/0x280 [ 321.390900] ? copyin+0xb5/0x100 [ 321.394296] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 321.399869] alloc_pages_current+0x107/0x210 [ 321.404305] pipe_write+0xa65/0xfb0 [ 321.407961] __vfs_write+0x58e/0x820 [ 321.411693] ? kernel_read+0x120/0x120 [ 321.415606] ? __inode_security_revalidate+0xda/0x120 [ 321.420818] ? selinux_file_permission+0x92/0x550 [ 321.425682] ? security_file_permission+0x8f/0x230 [ 321.430629] ? rw_verify_area+0x118/0x360 [ 321.434798] vfs_write+0x20c/0x560 [ 321.438356] ksys_write+0xea/0x1f0 [ 321.441923] ? __ia32_sys_read+0xb0/0xb0 [ 321.446000] ? do_syscall_64+0x26/0x610 [ 321.449992] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 321.455370] ? do_syscall_64+0x26/0x610 [ 321.459364] __x64_sys_write+0x73/0xb0 [ 321.463370] do_syscall_64+0x103/0x610 [ 321.467288] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 321.472492] RIP: 0033:0x458da9 [ 321.475698] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 321.494614] RSP: 002b:00007fcc0a7a9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 321.502349] RAX: ffffffffffffffda RBX: 00007fcc0a7a9c90 RCX: 0000000000458da9 [ 321.509632] RDX: 0000000020000020 RSI: 0000000020000000 RDI: 0000000000000004 [ 321.516916] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 321.524203] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc0a7aa6d4 [ 321.531489] R13: 00000000004c80fe R14: 00000000004de4f8 R15: 0000000000000006 21:25:15 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x504d, 0x0, 0x0, 0x0, 0x0) 21:25:15 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0xc0) 21:25:15 executing program 4: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = dup2(r1, r1) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno'}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:25:15 executing program 2: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000180)=@req={0xffffffff, 0x0, 0x1004000, 0x4}, 0x10) write$cgroup_int(r0, &(0x7f0000000400)=0x6, 0x12) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/capi/capi20\x00', 0x20000, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x100, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x9, 0x30}, &(0x7f0000000280)=0xc) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000300)={r3, @in={{0x2, 0x4e21, @broadcast}}, 0x36, 0x1000, 0x8, 0x200, 0x5d}, &(0x7f00000003c0)=0x98) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080)) flock(r1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) recvfrom$x25(r1, &(0x7f0000000200)=""/32, 0x20, 0x140, &(0x7f0000000240)={0x9, @null=' \x00'}, 0x12) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000000), &(0x7f00000000c0)=0x4) fcntl$setstatus(r2, 0x4, 0x2000) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f00000001c0)={0xfffffffffffffffe, 0x1000}) 21:25:15 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000002, 0x0) 21:25:15 executing program 5 (fault-call:8 fault-nth:8): mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:25:15 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0xec0) 21:25:15 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0xa0103, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000000c0)={0x40, 0x3, 0x0, {0x1, 0xffffffffffffff51, 0x0, 'em1mnet1-md5sumð1md5sumlo\x00\x00\x00'}}, 0x126) flock(r0, 0x0) [ 321.807819] hfsplus: unable to find HFS+ superblock [ 321.848594] hfsplus: unable to find HFS+ superblock 21:25:15 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x5354, 0x0, 0x0, 0x0, 0x0) [ 321.873654] FAULT_INJECTION: forcing a failure. [ 321.873654] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 321.932437] CPU: 1 PID: 13867 Comm: syz-executor.5 Not tainted 4.19.38 #6 [ 321.939416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 321.948778] Call Trace: [ 321.951383] dump_stack+0x172/0x1f0 [ 321.955026] should_fail.cold+0xa/0x1b [ 321.958923] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 321.964024] ? ___might_sleep+0x163/0x280 [ 321.968184] ? __might_sleep+0x95/0x190 [ 321.972166] __alloc_pages_nodemask+0x1ee/0x760 [ 321.976848] ? __alloc_pages_slowpath+0x2870/0x2870 [ 321.981874] ? ___might_sleep+0x163/0x280 [ 321.986040] ? copyin+0xb5/0x100 [ 321.989420] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 321.994976] alloc_pages_current+0x107/0x210 [ 321.999399] pipe_write+0xa65/0xfb0 [ 322.003048] __vfs_write+0x58e/0x820 [ 322.006777] ? kernel_read+0x120/0x120 [ 322.010676] ? __inode_security_revalidate+0xda/0x120 [ 322.015889] ? selinux_file_permission+0x92/0x550 [ 322.020761] ? security_file_permission+0x8f/0x230 [ 322.020780] ? rw_verify_area+0x118/0x360 [ 322.020796] vfs_write+0x20c/0x560 [ 322.033406] ksys_write+0xea/0x1f0 [ 322.036959] ? __ia32_sys_read+0xb0/0xb0 [ 322.041040] ? do_syscall_64+0x26/0x610 [ 322.045204] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 322.050587] ? do_syscall_64+0x26/0x610 [ 322.054588] __x64_sys_write+0x73/0xb0 [ 322.058497] do_syscall_64+0x103/0x610 [ 322.062413] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 322.067608] RIP: 0033:0x458da9 [ 322.070809] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 322.089721] RSP: 002b:00007fcc0a7a9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 322.097435] RAX: ffffffffffffffda RBX: 00007fcc0a7a9c90 RCX: 0000000000458da9 [ 322.104703] RDX: 0000000020000020 RSI: 0000000020000000 RDI: 0000000000000004 [ 322.111986] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 322.119271] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc0a7aa6d4 21:25:16 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0xfdef) [ 322.126556] R13: 00000000004c80fe R14: 00000000004de4f8 R15: 0000000000000006 21:25:16 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x33fe0) [ 322.174068] hfsplus: unable to find HFS+ superblock 21:25:16 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7ff, 0x0) flock(r0, 0x24) [ 322.236108] 9pnet: Insufficient options for proto=fd [ 322.247038] hfsplus: unable to find HFS+ superblock 21:25:16 executing program 5 (fault-call:8 fault-nth:9): mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:25:16 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x5453, 0x0, 0x0, 0x0, 0x0) [ 322.416457] hfsplus: unable to find HFS+ superblock [ 322.440970] FAULT_INJECTION: forcing a failure. [ 322.440970] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 322.470365] CPU: 1 PID: 13897 Comm: syz-executor.5 Not tainted 4.19.38 #6 [ 322.477329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 322.486698] Call Trace: [ 322.489302] dump_stack+0x172/0x1f0 [ 322.492968] should_fail.cold+0xa/0x1b [ 322.496875] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 322.501995] ? ___might_sleep+0x163/0x280 [ 322.506166] ? __might_sleep+0x95/0x190 [ 322.510162] __alloc_pages_nodemask+0x1ee/0x760 [ 322.514851] ? __alloc_pages_slowpath+0x2870/0x2870 [ 322.519884] ? ___might_sleep+0x163/0x280 [ 322.524048] ? copyin+0xb5/0x100 [ 322.527432] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 322.532983] alloc_pages_current+0x107/0x210 [ 322.537412] pipe_write+0xa65/0xfb0 [ 322.541068] __vfs_write+0x58e/0x820 [ 322.544801] ? kernel_read+0x120/0x120 [ 322.548712] ? __inode_security_revalidate+0xda/0x120 [ 322.553914] ? selinux_file_permission+0x92/0x550 [ 322.558787] ? security_file_permission+0x8f/0x230 [ 322.564512] ? rw_verify_area+0x118/0x360 [ 322.568682] vfs_write+0x20c/0x560 [ 322.572232] ksys_write+0xea/0x1f0 [ 322.575783] ? __ia32_sys_read+0xb0/0xb0 [ 322.579859] ? do_syscall_64+0x26/0x610 [ 322.583847] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 322.589221] ? do_syscall_64+0x26/0x610 [ 322.593216] __x64_sys_write+0x73/0xb0 [ 322.597118] do_syscall_64+0x103/0x610 [ 322.601038] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 322.606245] RIP: 0033:0x458da9 [ 322.609455] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 322.628362] RSP: 002b:00007fcc0a7a9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 322.636083] RAX: ffffffffffffffda RBX: 00007fcc0a7a9c90 RCX: 0000000000458da9 [ 322.643365] RDX: 0000000020000020 RSI: 0000000020000000 RDI: 0000000000000004 [ 322.650646] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 322.657928] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc0a7aa6d4 [ 322.665208] R13: 00000000004c80fe R14: 00000000004de4f8 R15: 0000000000000006 [ 322.691996] hfsplus: unable to find HFS+ superblock 21:25:16 executing program 4: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:25:16 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x2000001b) 21:25:16 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) flock(r0, 0x0) 21:25:16 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x5848, 0x0, 0x0, 0x0, 0x0) 21:25:16 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000003, 0x0) 21:25:17 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0xfffffdef) [ 323.050153] hfsplus: unable to find HFS+ superblock 21:25:17 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) flock(r0, 0xfffffffffffffffc) ioctl(r0, 0x3, &(0x7f0000000000)="8ff9917a3886e7fa8cbd52e00402b2280a55ed939d9e453db85272ead67a4952ac63b5fbb705a5e82474d88df318b16c") getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x6) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000100)) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000140), &(0x7f0000000180)=0x4) [ 323.127576] hfsplus: unable to find HFS+ superblock 21:25:17 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0xfffffffffffffdef) 21:25:17 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x6000, 0x0, 0x0, 0x0, 0x0) 21:25:17 executing program 5 (fault-call:8 fault-nth:10): mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:25:17 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x7fffc, 0x0) flock(r0, 0x0) 21:25:17 executing program 1: r0 = socket(0x10, 0x80803, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x6, 0x5, [0x2, 0x5, 0x7fffffff, 0x5, 0x3]}, &(0x7f0000000080)=0x12) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000000c0)={r1, 0x5c, "9e0e0cc3c0b42a36fdbfc147ea195414da221b5c7ccbeb9961618d6175e70875a1ce1d820a3a08003d404c28cc9b909ef03a42a0fba16016c3cf79a252c2a14e9a32500aa053802580686ce052c97aeb626261958e365330363e31c6"}, &(0x7f0000000140)=0x64) r2 = syz_open_dev$mouse(&(0x7f00000002c0)='/dev/input/mouse#\x00', 0x1, 0x2200) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000300)={0x1, 0x3, 0x800, 0x7, 0x1, 0x100}) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) r3 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x80000001, 0x20000) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r3, 0x8008ae9d, &(0x7f00000001c0)=""/222) [ 323.315791] hfsplus: unable to find HFS+ superblock [ 323.332890] FAULT_INJECTION: forcing a failure. [ 323.332890] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 323.367048] CPU: 0 PID: 13927 Comm: syz-executor.5 Not tainted 4.19.38 #6 [ 323.374015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 323.383369] Call Trace: [ 323.385969] dump_stack+0x172/0x1f0 [ 323.389613] should_fail.cold+0xa/0x1b [ 323.393535] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 323.398666] ? ___might_sleep+0x163/0x280 [ 323.402830] ? __might_sleep+0x95/0x190 [ 323.406816] __alloc_pages_nodemask+0x1ee/0x760 [ 323.411528] ? __alloc_pages_slowpath+0x2870/0x2870 [ 323.416570] ? ___might_sleep+0x163/0x280 [ 323.420722] ? copyin+0xb5/0x100 [ 323.424095] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 323.429651] alloc_pages_current+0x107/0x210 [ 323.434075] pipe_write+0xa65/0xfb0 [ 323.437728] __vfs_write+0x58e/0x820 [ 323.441458] ? kernel_read+0x120/0x120 [ 323.445356] ? __inode_security_revalidate+0xda/0x120 [ 323.450555] ? selinux_file_permission+0x92/0x550 [ 323.455417] ? security_file_permission+0x8f/0x230 [ 323.460350] ? rw_verify_area+0x118/0x360 [ 323.464499] vfs_write+0x20c/0x560 [ 323.468045] ksys_write+0xea/0x1f0 [ 323.471592] ? __ia32_sys_read+0xb0/0xb0 [ 323.475678] ? do_syscall_64+0x26/0x610 [ 323.479684] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 323.485056] ? do_syscall_64+0x26/0x610 [ 323.489042] __x64_sys_write+0x73/0xb0 [ 323.492945] do_syscall_64+0x103/0x610 [ 323.496852] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 323.502044] RIP: 0033:0x458da9 [ 323.505240] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 323.524148] RSP: 002b:00007fcc0a7a9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 323.531867] RAX: ffffffffffffffda RBX: 00007fcc0a7a9c90 RCX: 0000000000458da9 [ 323.539144] RDX: 0000000020000020 RSI: 0000000020000000 RDI: 0000000000000004 [ 323.546415] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 323.553690] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc0a7aa6d4 [ 323.560963] R13: 00000000004c80fe R14: 00000000004de4f8 R15: 0000000000000006 [ 323.571963] 9pnet: Insufficient options for proto=fd [ 323.578815] hfsplus: unable to find HFS+ superblock [ 323.899045] audit: type=1800 audit(1556832317.859:106): pid=13925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=17521 res=0 21:25:18 executing program 4: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:25:18 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) flock(r0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xfaeb, 0x80000) 21:25:18 executing program 1: r0 = socket(0x10, 0x80803, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000040), &(0x7f0000000080)=0xc) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:25:18 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x6800, 0x0, 0x0, 0x0, 0x0) 21:25:18 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000004, 0x0) 21:25:18 executing program 5 (fault-call:8 fault-nth:11): mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:25:18 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) r1 = semget$private(0x0, 0x7, 0x295) r2 = geteuid() r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x80, 0x0) ioctl$UI_SET_SNDBIT(r3, 0x4004556a, 0x7) r4 = getgid() ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r3, 0x40086424, &(0x7f0000000200)={r5, 0x1}) r6 = getuid() lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000100)={{0x5, r2, r4, r6, r7, 0x6, 0x4}, 0x1, 0x4, 0x4}) [ 324.134186] hfsplus: unable to find HFS+ superblock 21:25:18 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ubi_ctrl\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000080)={0x0, @reserved}) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0xa0103, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x2) flock(r2, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r1, 0x4, 0x1000070bd28, 0x25dfdbfb, {{}, 0x0, 0x4102, 0x0, {0xffffff78, 0x13, @udp='udp:syz0\x00'}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000c040) ioctl$IMGETVERSION(r2, 0x80044942, &(0x7f0000000040)) r4 = syz_open_dev$video4linux(&(0x7f0000000440)='/dev/v4l-subdev#\x00', 0x3f, 0x2080) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) ppoll(&(0x7f0000000480)=[{r4, 0x9458}, {r3, 0xa115}, {r4, 0x8}], 0x3, &(0x7f0000000500)={r5, r6+30000000}, &(0x7f0000000540)={0xfffffffffffffff9}, 0x8) [ 324.187872] FAULT_INJECTION: forcing a failure. [ 324.187872] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 324.219300] hfsplus: unable to find HFS+ superblock [ 324.228711] CPU: 1 PID: 13950 Comm: syz-executor.5 Not tainted 4.19.38 #6 [ 324.235677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 324.245037] Call Trace: [ 324.247648] dump_stack+0x172/0x1f0 [ 324.251294] should_fail.cold+0xa/0x1b [ 324.255193] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 324.260300] ? ___might_sleep+0x163/0x280 [ 324.264458] ? __might_sleep+0x95/0x190 [ 324.268444] __alloc_pages_nodemask+0x1ee/0x760 [ 324.273124] ? __alloc_pages_slowpath+0x2870/0x2870 [ 324.278147] ? ___might_sleep+0x163/0x280 [ 324.282300] ? copyin+0xb5/0x100 [ 324.285676] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 324.291221] alloc_pages_current+0x107/0x210 [ 324.295636] pipe_write+0xa65/0xfb0 [ 324.299292] __vfs_write+0x58e/0x820 [ 324.303009] ? kernel_read+0x120/0x120 [ 324.306914] ? __inode_security_revalidate+0xda/0x120 [ 324.312110] ? selinux_file_permission+0x92/0x550 [ 324.316964] ? security_file_permission+0x8f/0x230 [ 324.321902] ? rw_verify_area+0x118/0x360 [ 324.326053] vfs_write+0x20c/0x560 [ 324.329606] ksys_write+0xea/0x1f0 [ 324.333165] ? __ia32_sys_read+0xb0/0xb0 [ 324.337236] ? do_syscall_64+0x26/0x610 [ 324.341219] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 324.346589] ? do_syscall_64+0x26/0x610 [ 324.350577] __x64_sys_write+0x73/0xb0 [ 324.354468] do_syscall_64+0x103/0x610 [ 324.358361] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 324.363574] RIP: 0033:0x458da9 [ 324.366790] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 324.385688] RSP: 002b:00007fcc0a7a9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 324.393398] RAX: ffffffffffffffda RBX: 00007fcc0a7a9c90 RCX: 0000000000458da9 [ 324.400665] RDX: 0000000020000020 RSI: 0000000020000000 RDI: 0000000000000004 [ 324.407932] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 324.415198] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc0a7aa6d4 [ 324.422465] R13: 00000000004c80fe R14: 00000000004de4f8 R15: 0000000000000006 21:25:18 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e24, @empty}}, [0x3, 0x4, 0x3ff, 0x9, 0x8353, 0x8, 0xffffffff, 0x9, 0x196, 0x3f, 0x20, 0xcd, 0x8000, 0x2, 0x99]}, &(0x7f0000000140)=0x100) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000200)=ANY=[@ANYRES32=r1, @ANYBLOB="030001004200c21917c2530f3b477d1318dc0d923b98c5dbda63b9765a37ae8e04efdf5f5f9b188bbbcef4afa095f5071c9a00e46bbd57a312354a525f3a5a1fe844427f521ea0b280a86201fc00"], 0xa) 21:25:18 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x6c00, 0x0, 0x0, 0x0, 0x0) 21:25:18 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x10000, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f0000000080)={0x9, 0x0, [{0x6b5a8bc48b5496b0, 0x101, 0x9, 0x8, 0x401}, {0x80000019, 0x2, 0x1f, 0x2, 0x4}, {0xf, 0x9, 0x200, 0x1000, 0x3ff}, {0x40000000, 0x80000000, 0x100, 0x7, 0x4}, {0x1, 0x4, 0x8001, 0x7ff, 0x10000}, {0x80000000, 0xaa, 0x7, 0x80000000, 0x4}, {0x80000007, 0x7, 0x5, 0x0, 0x2}, {0x0, 0xffff, 0x1f, 0xa9, 0x101}, {0xc0000019, 0x1, 0x5, 0x1000, 0x4}]}) flock(r0, 0x0) [ 324.484403] 9pnet: Insufficient options for proto=fd [ 324.567929] hfsplus: unable to find HFS+ superblock 21:25:18 executing program 1: r0 = socket(0x10, 0x80803, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'syz1\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x6, 0x600) [ 324.628928] hfsplus: unable to find HFS+ superblock [ 324.707241] selinux_nlmsg_perm: 1 callbacks suppressed [ 324.707255] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pig=13970 comm=syz-executor.1 [ 324.753116] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pig=13971 comm=syz-executor.1 21:25:18 executing program 4: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:25:18 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) flock(r0, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x3) 21:25:18 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x7400, 0x0, 0x0, 0x0, 0x0) 21:25:18 executing program 1: r0 = socket(0x10, 0x80803, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x100, 0x0) ioctl$TIOCLINUX6(r1, 0x541c, &(0x7f0000000080)={0x6, 0x81}) getsockopt$ax25_int(r0, 0x101, 0xf, &(0x7f00000000c0), &(0x7f0000000100)=0x4) fcntl$setpipe(r1, 0x407, 0x2a7) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 325.063806] hfsplus: unable to find HFS+ superblock 21:25:19 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000005, 0x0) 21:25:19 executing program 5 (fault-call:8 fault-nth:12): mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:25:19 executing program 1: r0 = socket(0x10, 0x80803, 0x4) ioctl$int_out(r0, 0x5460, &(0x7f0000000040)) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 325.122465] hfsplus: unable to find HFS+ superblock [ 325.152371] FAULT_INJECTION: forcing a failure. [ 325.152371] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 325.173493] CPU: 1 PID: 13989 Comm: syz-executor.5 Not tainted 4.19.38 #6 [ 325.180456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 325.189810] Call Trace: [ 325.189836] dump_stack+0x172/0x1f0 [ 325.189859] should_fail.cold+0xa/0x1b [ 325.189880] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 325.205059] ? ___might_sleep+0x163/0x280 [ 325.209220] ? __might_sleep+0x95/0x190 [ 325.213212] __alloc_pages_nodemask+0x1ee/0x760 [ 325.213231] ? __alloc_pages_slowpath+0x2870/0x2870 [ 325.222911] ? ___might_sleep+0x163/0x280 [ 325.227070] ? copyin+0xb5/0x100 [ 325.227094] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 325.227117] alloc_pages_current+0x107/0x210 [ 325.227140] pipe_write+0xa65/0xfb0 [ 325.236044] __vfs_write+0x58e/0x820 [ 325.236062] ? kernel_read+0x120/0x120 [ 325.236082] ? __inode_security_revalidate+0xda/0x120 [ 325.236100] ? selinux_file_permission+0x92/0x550 [ 325.244125] ? security_file_permission+0x8f/0x230 [ 325.251694] ? rw_verify_area+0x118/0x360 [ 325.251712] vfs_write+0x20c/0x560 [ 325.251729] ksys_write+0xea/0x1f0 [ 325.278661] ? __ia32_sys_read+0xb0/0xb0 [ 325.282736] ? do_syscall_64+0x26/0x610 [ 325.286718] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 325.292094] ? do_syscall_64+0x26/0x610 [ 325.296082] __x64_sys_write+0x73/0xb0 [ 325.299977] do_syscall_64+0x103/0x610 [ 325.303878] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 325.309071] RIP: 0033:0x458da9 [ 325.312265] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 325.331176] RSP: 002b:00007fcc0a7a9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 325.338896] RAX: ffffffffffffffda RBX: 00007fcc0a7a9c90 RCX: 0000000000458da9 [ 325.346168] RDX: 0000000020000020 RSI: 0000000020000000 RDI: 0000000000000004 21:25:19 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x7a00, 0x0, 0x0, 0x0, 0x0) 21:25:19 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001880)={'vcan0\x00', 0x0}) r2 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000001c0)=@int=0x80000000, 0x4) sendmsg$xdp(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, 0x2, r1, 0x3b}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="ab48307bd6b7f268c901aa663223441fba", 0x11}], 0x1, 0x0, 0x0, 0x1}, 0x4000000) sendmsg$xdp(r0, &(0x7f0000002fc0)={&(0x7f00000018c0)={0x2c, 0x2, r1, 0x6}, 0x10, &(0x7f0000002f00)=[{&(0x7f0000001900)}, {&(0x7f0000001940)="e719a091d81d83ef8fceb0d4fac8502535d3ff6e25f6dad275b2cb7200988b896e88c61df9eb0fd9ff776d2ca50cc6a0316a1894dbec429a9eb5a27e6395f61dbfc742d7acbd7cbd8e2f9c01b21337f71d5b217443f20c11cdd427e6d16b7c38935471dc269597e2c06f767d702c39df44520eb04db4ef95fe23315883814cf330aeb46cf7d5d9c5a54381735af215ec9d5c4af1c096a28ba6823cc4436c1a2b5a75bad6c4eee7132cb28819c1f23507a4c79442e7360c42eb6b9556938070ec06764d84ddd2ba5b93409cc311a0d2ffffa356a4cbbc0ca6b64b434c85cbde012a30aa4101c05a584e8c63", 0xeb}, {&(0x7f0000001a40)="8eda9623e93dedfe454d90a5c37769850d12ce1526c25054dce034529295bd5207519196dcfcf246bceb838cdb8e6ef914fbde4f6306851e5a5aa8", 0x3b}, {&(0x7f0000001a80)="3ed8631957884a84b6e07d42c8bf285cae60587478345e59d0d70aa75d7c47fa4ee6879ed4da093b3d5bfda145c3e21f4c0754edc7037bcd81ac3bac482a40372d8564f8f73e3c2555b23c8cb2e764a343ca798fe9439177c6a5c33f315bc230af82aa642308578ee84a96431d6e4c339ebe60afa1ee03b77f6aacbf63d7fc04c271bf4691bbc33ef46c51bfe6972a9025e5b0f93c38f3dae6cd8aa85e5f2317f74cbd564c27a045f27e3ba0701bf86b8b43a8eb7d813a9486a0740e0f7675c24c8cda37356ccae70c8edfab904a0879a86bf37ef01d05e4a1484c5c94885a8e584036343637959a306eaf33d40fb6314562e278e44a8fa9", 0xf8}, {&(0x7f0000001b80)="378149b7644c03cf921734381ed21a48012ed922b93e3c35918db3f0f1b8a78451413217a89786a7437f9ced01e7855b3c78937f6adbbcd26fb7756ce259c14b8d6ff597dde89d2c89c0c771a1c45c7eb05f139d40d0b80ed280bd5c3611648c3b0320130ab0096babfa01d76c64093f", 0x70}, {&(0x7f0000001c00)="d926c5a59f6a2c65df034c65082573b96fff47d5b67d0bc26347a98b7b7a938bbece703ea9539a0398ead48c4e122e5d159bbc5ec5f44c4be9418ed56288cc8fb8a699443fed050193981bcc44e0e3f18f525da02f4548c873fa2b292b1b914b3bb92e66b735adef428fd6f4a10c5d1964c96bde7297458560ec1aad8b38c829dfee0fc92c3dab83bc736cebc9437371d3c7d11762e21b3aef5a660ec92783c5963d2f2b04f9c3c27539de2d73968e910362f5cd16cbb576f0ddeffdf415f604aa812da4987659a65f3d55c3658f8f0b283dbc", 0xd3}, {&(0x7f0000001d00)="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", 0x1000}, {&(0x7f0000002d00)="d5d6e4e8be69594fe8c104eab6bbe199109ac6a5f07417c0ca2d832870fd55955df03550f368d5ec6e627cf16d27ab2aaf5a2e5e3c6c41d136e544b2664bf54f62e51005806fd05bc32582110ef7cd532f175780c4f1246179436b05bbbd3662c2d4", 0x62}, {&(0x7f0000002d80)="b071fb24ede8a7750367290c01f2dc22839e541a7893784fdff670bd97bd22b520f07939cd39c5c018c8043978f2034c873ca37464b304a57517d89d7013c4ac3f1206402144db79c9cf49520868bbe012d561a7798340c6fcc1f78c23e4797deafb0d3833ccd344211e5786314cd2772a7121a91b81cfe27ef4668836eb701ff7b466ac3cc9e81c3f9d6b49e8ab118193f6359f440506", 0x97}, {&(0x7f0000002e40)="c4041fa769d88dead45c1cd7eaad57012d6b5392e21f530729592429f576db9d4a16bdaacddf7e3fa96fd08c26b275b3d772e140d6b86ffdec611f4aba4d254e1c2b452fd0cdaedd8008053a04bcc2851f91ba793be3b91fd91fed7c4d3dc487d3abd4234927d85301d578b5675e50fd3443293144fcee38420986ae287a5bac8d9f939dc0", 0x85}], 0xa, 0x0, 0x0, 0x40}, 0x10) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000000)=0x3f) flock(r0, 0x0) [ 325.346623] 9pnet: Insufficient options for proto=fd [ 325.353436] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 325.353445] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc0a7aa6d4 [ 325.353452] R13: 00000000004c80fe R14: 00000000004de4f8 R15: 0000000000000006 [ 325.368434] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=24 sclass=netlink_tcpdiag_socket pig=13995 comm=syz-executor.1 21:25:19 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) flock(r0, 0x2) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[0x4, 0x201, 0x8, 0x7]}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f00000000c0)) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000100)={0x11e8, 0xffffffffffffffe0, 0x1}) 21:25:19 executing program 1: r0 = socket(0x10, 0x100000000080803, 0x5) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 325.431606] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=24 sclass=netlink_tcpdiag_socket pig=14001 comm=syz-executor.1 [ 325.444482] hfsplus: unable to find HFS+ superblock 21:25:19 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) flock(r0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000140)={@rand_addr="6d727a14bd3f991d2e58a02565b3e55a", r1}, 0x14) [ 325.517533] hfsplus: unable to find HFS+ superblock 21:25:19 executing program 4: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = dup2(r0, r0) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:25:19 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0xedc0, 0x0, 0x0, 0x0, 0x0) 21:25:19 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000080)=""/76, &(0x7f0000000000)=0x4c) flock(r0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) 21:25:19 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pwritev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="349735e7dec699faf945bad4d215613a", 0x10}, {&(0x7f0000000080)="93d1774fd9bbb62b083a11439a66", 0xe}, {&(0x7f00000000c0)="5fa6bbbf14c2e10165ed00062ff19ca676e4c2b059e9580933bf46b6846ff31dab1e9c82187f46dfd1ab0e658c0146e703", 0x31}], 0x3, 0x0) r1 = socket(0x10, 0x80803, 0x0) write(r1, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 326.005359] hfsplus: unable to find HFS+ superblock [ 326.074050] hfsplus: unable to find HFS+ superblock 21:25:20 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000006, 0x0) 21:25:20 executing program 5 (fault-call:8 fault-nth:13): mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:25:20 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000080)={0xc1ea, 0x79cc, 0x1, 0x400040000000000, 0x3, [{0x3, 0x9, 0x401, 0x0, 0x0, 0x2800}, {0xfffffffffffffff9, 0x2, 0x9, 0x0, 0x0, 0x81}, {0x4555, 0x7fff, 0x5, 0x0, 0x0, 0x80}]}) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000000)) r1 = socket$kcm(0x2, 0x2, 0x73) bind(r1, &(0x7f0000000180)=@in={0x2, 0x0, @remote}, 0x80) bind$pptp(r0, &(0x7f0000000200)={0x18, 0x2, {0x3, @empty}}, 0x1e) r2 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000001240)={0x2, 0x0, @rand_addr=0x10000}, 0x10) r3 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f00000003c0)={0x2, 0x0, @multicast1}, 0x10) flock(r0, 0x2005) 21:25:20 executing program 1: r0 = socket(0xb, 0x8040080803, 0x8000) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a83600d0a8f209", 0x15) 21:25:20 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x20000, 0x0, 0x0, 0x0, 0x0) 21:25:20 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x8, 0x3, 0x1, 0x442, 0x7, 0x7f, 0xd1e4, 0x0, 0x6, 0x800}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) r2 = socket(0x10, 0x80803, 0x0) write$rfkill(r1, &(0x7f0000000000)={0xffffffffffffff01, 0x2, 0x3, 0x1}, 0x8) write(r2, &(0x7f0000000080)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 326.491474] hfsplus: unable to find HFS+ superblock [ 326.493162] FAULT_INJECTION: forcing a failure. [ 326.493162] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 326.551995] CPU: 1 PID: 14035 Comm: syz-executor.5 Not tainted 4.19.38 #6 [ 326.558972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 326.558978] Call Trace: [ 326.559002] dump_stack+0x172/0x1f0 [ 326.559026] should_fail.cold+0xa/0x1b [ 326.578462] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 326.583571] ? ___might_sleep+0x163/0x280 [ 326.587720] ? __might_sleep+0x95/0x190 [ 326.587740] __alloc_pages_nodemask+0x1ee/0x760 [ 326.587757] ? __alloc_pages_slowpath+0x2870/0x2870 [ 326.601387] ? ___might_sleep+0x163/0x280 [ 326.605559] ? copyin+0xb5/0x100 [ 326.608937] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 326.608958] alloc_pages_current+0x107/0x210 [ 326.618882] pipe_write+0xa65/0xfb0 [ 326.622529] __vfs_write+0x58e/0x820 [ 326.626245] ? kernel_read+0x120/0x120 [ 326.626267] ? __inode_security_revalidate+0xda/0x120 [ 326.626284] ? selinux_file_permission+0x92/0x550 [ 326.626306] ? security_file_permission+0x8f/0x230 [ 326.635357] ? rw_verify_area+0x118/0x360 [ 326.635374] vfs_write+0x20c/0x560 [ 326.635394] ksys_write+0xea/0x1f0 [ 326.635420] ? __ia32_sys_read+0xb0/0xb0 [ 326.660428] ? do_syscall_64+0x26/0x610 [ 326.664416] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 326.669783] ? do_syscall_64+0x26/0x610 [ 326.673804] __x64_sys_write+0x73/0xb0 [ 326.677700] do_syscall_64+0x103/0x610 [ 326.681602] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 326.686795] RIP: 0033:0x458da9 [ 326.689993] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 326.708894] RSP: 002b:00007fcc0a7a9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 326.716611] RAX: ffffffffffffffda RBX: 00007fcc0a7a9c90 RCX: 0000000000458da9 [ 326.723880] RDX: 0000000020000020 RSI: 0000000020000000 RDI: 0000000000000004 [ 326.731152] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 326.738426] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc0a7aa6d4 [ 326.745691] R13: 00000000004c80fe R14: 00000000004de4f8 R15: 0000000000000006 21:25:20 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) flock(r0, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x20000, 0x0) [ 326.774322] hfsplus: unable to find HFS+ superblock 21:25:20 executing program 1: write(0xffffffffffffffff, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:25:20 executing program 4: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = dup2(r0, r0) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) 21:25:20 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0xa0103, 0x0) inotify_init1(0x0) flock(r0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.syz\x00', &(0x7f0000000080)='userem1*md5sum\x00', 0xf, 0x1) 21:25:20 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x40000, 0x0, 0x0, 0x0, 0x0) 21:25:20 executing program 1: r0 = socket(0x10, 0x80803, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x80000, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 326.939056] hfsplus: unable to find HFS+ superblock [ 326.974421] hfsplus: unable to find HFS+ superblock 21:25:21 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000007, 0x0) 21:25:21 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) flock(r0, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0xcf) 21:25:21 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0xe0000, 0x0, 0x0, 0x0, 0x0) 21:25:21 executing program 1: r0 = socket(0x10, 0x80803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00\xacs\x00\x00\a\x00\x00\x00\x00\x00\x00\x00|@\x00', 0x102}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00004da000), 0xff9a) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f000007affc), 0x4) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x40, 0x0) close(r3) syz_extract_tcp_res$synack(&(0x7f0000000580), 0x1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000140)="0a67dcf0e401e294b1c7c0") r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0x104, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@local, 0x0, 0x32}, @in6=@remote}, 0x0, 0x8}, [@mark={0xc, 0x15, {0x0, 0xaf}}]}, 0x104}}, 0x800004084) socket(0x10, 0x3, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$DRM_IOCTL_AGP_INFO(r7, 0x80386433, &(0x7f0000000040)=""/48) ioctl(r8, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:25:21 executing program 5 (fault-call:8 fault-nth:14): mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) [ 327.592799] audit: type=1800 audit(1556832321.549:107): pid=14067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=17567 res=0 21:25:21 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x22000, 0x0) flock(r0, 0x0) [ 327.708978] hfsplus: unable to find HFS+ superblock [ 327.717644] FAULT_INJECTION: forcing a failure. [ 327.717644] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 327.758550] CPU: 0 PID: 14082 Comm: syz-executor.5 Not tainted 4.19.38 #6 [ 327.765520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 327.774874] Call Trace: [ 327.777474] dump_stack+0x172/0x1f0 [ 327.781120] should_fail.cold+0xa/0x1b [ 327.785019] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 327.790130] ? ___might_sleep+0x163/0x280 [ 327.794297] ? __might_sleep+0x95/0x190 [ 327.798296] __alloc_pages_nodemask+0x1ee/0x760 [ 327.802986] ? __alloc_pages_slowpath+0x2870/0x2870 [ 327.808010] ? ___might_sleep+0x163/0x280 [ 327.812167] ? copyin+0xb5/0x100 [ 327.815547] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 327.821102] alloc_pages_current+0x107/0x210 [ 327.825527] pipe_write+0xa65/0xfb0 [ 327.829177] __vfs_write+0x58e/0x820 [ 327.832906] ? kernel_read+0x120/0x120 [ 327.836805] ? __inode_security_revalidate+0xda/0x120 [ 327.842008] ? selinux_file_permission+0x92/0x550 [ 327.846871] ? security_file_permission+0x8f/0x230 [ 327.851809] ? rw_verify_area+0x118/0x360 [ 327.855967] vfs_write+0x20c/0x560 [ 327.859524] ksys_write+0xea/0x1f0 [ 327.863072] ? __ia32_sys_read+0xb0/0xb0 [ 327.867144] ? do_syscall_64+0x26/0x610 [ 327.871131] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 327.876507] ? do_syscall_64+0x26/0x610 [ 327.880497] __x64_sys_write+0x73/0xb0 [ 327.884399] do_syscall_64+0x103/0x610 [ 327.888299] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 327.893506] RIP: 0033:0x458da9 [ 327.896705] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 327.915609] RSP: 002b:00007fcc0a7a9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 327.923343] RAX: ffffffffffffffda RBX: 00007fcc0a7a9c90 RCX: 0000000000458da9 [ 327.930622] RDX: 0000000020000020 RSI: 0000000020000000 RDI: 0000000000000004 [ 327.937896] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 327.945172] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc0a7aa6d4 21:25:21 executing program 4: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = dup2(r0, r0) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) [ 327.952445] R13: 00000000004c80fe R14: 00000000004de4f8 R15: 0000000000000006 [ 327.959999] protocol 88fb is buggy, dev hsr_slave_0 [ 327.965147] protocol 88fb is buggy, dev hsr_slave_1 [ 327.970277] protocol 88fb is buggy, dev hsr_slave_0 [ 327.975393] protocol 88fb is buggy, dev hsr_slave_1 [ 327.980507] protocol 88fb is buggy, dev hsr_slave_0 [ 327.985589] protocol 88fb is buggy, dev hsr_slave_1 [ 327.990695] protocol 88fb is buggy, dev hsr_slave_0 [ 327.995780] protocol 88fb is buggy, dev hsr_slave_1 21:25:22 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x100, 0x0) flock(r0, 0x0) 21:25:22 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x1fffff, 0x0, 0x0, 0x0, 0x0) [ 328.126395] hfsplus: unable to find HFS+ superblock 21:25:22 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x800, 0x0) flock(r0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000000)={0x90000003}) [ 328.171622] hfsplus: unable to find HFS+ superblock 21:25:22 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x400000, 0x0, 0x0, 0x0, 0x0) 21:25:22 executing program 1: rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = socket(0x10, 0x80807, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 328.309871] hfsplus: unable to find HFS+ superblock [ 328.383166] hfsplus: unable to find HFS+ superblock 21:25:22 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000008, 0x0) 21:25:22 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) flock(r0, 0x0) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000000)={0x7, 0x9, 0x9}) 21:25:22 executing program 1: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000080)) r1 = socket(0x10, 0x80803, 0x1) write(r1, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:25:22 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x6b6b6b, 0x0, 0x0, 0x0, 0x0) 21:25:22 executing program 5 (fault-call:8 fault-nth:15): mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:25:22 executing program 4: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) [ 329.016964] FAULT_INJECTION: forcing a failure. [ 329.016964] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 329.031219] hfsplus: unable to find HFS+ superblock [ 329.048892] CPU: 0 PID: 14122 Comm: syz-executor.5 Not tainted 4.19.38 #6 [ 329.055858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 329.065221] Call Trace: [ 329.067955] dump_stack+0x172/0x1f0 [ 329.071599] should_fail.cold+0xa/0x1b [ 329.075503] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 329.080619] ? ___might_sleep+0x163/0x280 [ 329.084783] ? __might_sleep+0x95/0x190 [ 329.088768] __alloc_pages_nodemask+0x1ee/0x760 [ 329.093448] ? __alloc_pages_slowpath+0x2870/0x2870 [ 329.098476] ? ___might_sleep+0x163/0x280 [ 329.102638] ? copyin+0xb5/0x100 [ 329.106024] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 329.111573] alloc_pages_current+0x107/0x210 [ 329.115988] pipe_write+0xa65/0xfb0 [ 329.120174] __vfs_write+0x58e/0x820 [ 329.123899] ? kernel_read+0x120/0x120 [ 329.127798] ? __inode_security_revalidate+0xda/0x120 [ 329.132991] ? selinux_file_permission+0x92/0x550 [ 329.137848] ? security_file_permission+0x8f/0x230 [ 329.142787] ? rw_verify_area+0x118/0x360 [ 329.146938] vfs_write+0x20c/0x560 [ 329.150485] ksys_write+0xea/0x1f0 [ 329.154030] ? __ia32_sys_read+0xb0/0xb0 [ 329.158098] ? do_syscall_64+0x26/0x610 [ 329.162080] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 329.167452] ? do_syscall_64+0x26/0x610 [ 329.171437] __x64_sys_write+0x73/0xb0 [ 329.175330] do_syscall_64+0x103/0x610 [ 329.179231] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 329.184440] RIP: 0033:0x458da9 [ 329.187635] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 329.206540] RSP: 002b:00007fcc0a7a9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 21:25:23 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) flock(r0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r1, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffff3849ca0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc8}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffffffffff81}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) syz_open_dev$vivid(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x2) [ 329.214269] RAX: ffffffffffffffda RBX: 00007fcc0a7a9c90 RCX: 0000000000458da9 [ 329.221552] RDX: 0000000020000020 RSI: 0000000020000000 RDI: 0000000000000004 [ 329.228830] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 329.236100] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc0a7aa6d4 [ 329.243369] R13: 00000000004c80fe R14: 00000000004de4f8 R15: 0000000000000006 [ 329.275823] hfsplus: unable to find HFS+ superblock 21:25:23 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x1000000, 0x0, 0x0, 0x0, 0x0) 21:25:23 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x40000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000080)={0x7e000000, 0x5, 0x7, {0x0, 0x1c9c380}, 0x7fff, 0x8}) r1 = socket(0x10, 0x80803, 0x0) write(r1, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:25:23 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) flock(r0, 0x0) splice(r0, &(0x7f0000000000), r0, &(0x7f0000000080), 0x4, 0x1) 21:25:23 executing program 1: r0 = socket(0x10, 0x80807, 0xffffffffffffff7f) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f0000000200)=@nfc={0x27, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000001000000a275b8fb7479dc50"], 0x10}}], 0x1, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x100000020000, 0x51) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000080)=0x3, 0x8) ioctl$PPPIOCDISCONN(r2, 0x7439) 21:25:23 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x80000, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x20000, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) flock(r0, 0x1000000000000002) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self\x00', 0x40000, 0x0) [ 329.616296] hfsplus: unable to find HFS+ superblock [ 329.677455] hfsplus: unable to find HFS+ superblock 21:25:24 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, 0x0) 21:25:24 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) fcntl$setlease(r0, 0x400, 0x0) flock(r0, 0x0) 21:25:24 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xff, 0x2000) ioctl$VIDIOC_EXPBUF(0xffffffffffffff9c, 0xc0405610, &(0x7f0000000080)={0x0, 0x7ff, 0x7fff, 0x80000, 0xffffffffffffffff}) fcntl$dupfd(r0, 0x406, r1) r2 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) r3 = socket(0x10, 0x80803, 0x0) write(r3, &(0x7f0000000000)="1b0000004c000000c10aab80ff3e6be7ed7be79b104e0000000000", 0x1b) 21:25:24 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000009, 0x0) 21:25:24 executing program 5 (fault-call:8 fault-nth:16): mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:25:24 executing program 4: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:25:24 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000040)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0xffffffffffffff62) 21:25:24 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) flock(r0, 0xfffffffffffffffc) [ 330.262396] hfsplus: unable to find HFS+ superblock 21:25:24 executing program 1: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x3, {{0xa, 0x4e21, 0x7, @rand_addr="c49f61753737858fa73f93cd2d5640e1", 0x5}}}, 0x88) r1 = socket(0x11, 0x1, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000200)=""/126) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0x3, 0x8001, 0x3, 0x2d4a, r2}, &(0x7f0000000100)=0x10) write(r1, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) socket$rds(0x15, 0x5, 0x0) 21:25:24 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc0186419, &(0x7f0000000200)={0x1, &(0x7f0000000080)=""/153, &(0x7f00000001c0)=[{0x8, 0x67, 0x7f, &(0x7f0000000140)=""/103}]}) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) flock(r1, 0x0) [ 330.320978] hfsplus: unable to find HFS+ superblock [ 330.352729] FAULT_INJECTION: forcing a failure. [ 330.352729] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 330.415167] CPU: 1 PID: 14164 Comm: syz-executor.5 Not tainted 4.19.38 #6 [ 330.423117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 330.433446] Call Trace: [ 330.436066] dump_stack+0x172/0x1f0 [ 330.439718] should_fail.cold+0xa/0x1b [ 330.443625] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 330.448741] ? ___might_sleep+0x163/0x280 [ 330.452901] ? __might_sleep+0x95/0x190 [ 330.456891] __alloc_pages_nodemask+0x1ee/0x760 [ 330.461572] ? __alloc_pages_slowpath+0x2870/0x2870 [ 330.466595] ? ___might_sleep+0x163/0x280 [ 330.470756] ? copyin+0xb5/0x100 [ 330.474135] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 330.479696] alloc_pages_current+0x107/0x210 [ 330.484115] pipe_write+0xa65/0xfb0 [ 330.487773] __vfs_write+0x58e/0x820 [ 330.491501] ? kernel_read+0x120/0x120 [ 330.495405] ? __inode_security_revalidate+0xda/0x120 [ 330.500611] ? selinux_file_permission+0x92/0x550 [ 330.505473] ? security_file_permission+0x8f/0x230 [ 330.510417] ? rw_verify_area+0x118/0x360 [ 330.514575] vfs_write+0x20c/0x560 [ 330.518125] ksys_write+0xea/0x1f0 [ 330.521687] ? __ia32_sys_read+0xb0/0xb0 [ 330.525765] ? do_syscall_64+0x26/0x610 [ 330.529754] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 330.535153] ? do_syscall_64+0x26/0x610 [ 330.539154] __x64_sys_write+0x73/0xb0 [ 330.543053] do_syscall_64+0x103/0x610 [ 330.546955] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 330.552161] RIP: 0033:0x458da9 21:25:24 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) flock(r0, 0xb) 21:25:24 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x3000000, 0x0, 0x0, 0x0, 0x0) 21:25:24 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b0000e4e5571c28f3017142397b9000070000000002360000", 0x19) [ 330.555365] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 330.574268] RSP: 002b:00007fcc0a7a9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 330.574286] RAX: ffffffffffffffda RBX: 00007fcc0a7a9c90 RCX: 0000000000458da9 [ 330.574295] RDX: 0000000020000020 RSI: 0000000020000000 RDI: 0000000000000004 [ 330.574304] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 330.574313] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc0a7aa6d4 21:25:24 executing program 5 (fault-call:8 fault-nth:17): mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) [ 330.574320] R13: 00000000004c80fe R14: 00000000004de4f8 R15: 0000000000000006 [ 330.634166] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=22501 sclass=netlink_route_socket pig=14188 comm=syz-executor.1 [ 330.677113] hfsplus: unable to find HFS+ superblock 21:25:24 executing program 1: r0 = socket(0xc, 0x80803, 0x3) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000080)={0x1, 0x0, {0x33, 0x0, 0x14, 0x2, 0x2, 0x4, 0x2, 0x107, 0xffffffffffffffff}}) [ 330.754300] hfsplus: unable to find HFS+ superblock [ 330.822250] FAULT_INJECTION: forcing a failure. [ 330.822250] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 330.880468] CPU: 0 PID: 14198 Comm: syz-executor.5 Not tainted 4.19.38 #6 [ 330.887447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 330.896807] Call Trace: [ 330.899414] dump_stack+0x172/0x1f0 [ 330.903061] should_fail.cold+0xa/0x1b [ 330.906959] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 330.912073] ? ___might_sleep+0x163/0x280 [ 330.916237] ? __might_sleep+0x95/0x190 [ 330.920230] __alloc_pages_nodemask+0x1ee/0x760 [ 330.924909] ? __alloc_pages_slowpath+0x2870/0x2870 [ 330.924925] ? ___might_sleep+0x163/0x280 [ 330.924946] ? copyin+0xb5/0x100 [ 330.924968] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 330.924987] alloc_pages_current+0x107/0x210 [ 330.925005] pipe_write+0xa65/0xfb0 [ 330.937528] __vfs_write+0x58e/0x820 [ 330.937546] ? kernel_read+0x120/0x120 [ 330.937567] ? __inode_security_revalidate+0xda/0x120 [ 330.963854] ? selinux_file_permission+0x92/0x550 [ 330.968715] ? security_file_permission+0x8f/0x230 [ 330.973651] ? rw_verify_area+0x118/0x360 [ 330.977809] vfs_write+0x20c/0x560 [ 330.981362] ksys_write+0xea/0x1f0 [ 330.984912] ? __ia32_sys_read+0xb0/0xb0 [ 330.988987] ? do_syscall_64+0x26/0x610 [ 330.992971] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 330.998344] ? do_syscall_64+0x26/0x610 [ 331.002329] __x64_sys_write+0x73/0xb0 [ 331.006233] do_syscall_64+0x103/0x610 [ 331.010145] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 331.015336] RIP: 0033:0x458da9 [ 331.018537] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 331.037451] RSP: 002b:00007fcc0a7a9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 331.045172] RAX: ffffffffffffffda RBX: 00007fcc0a7a9c90 RCX: 0000000000458da9 [ 331.052451] RDX: 0000000020000020 RSI: 0000000020000000 RDI: 0000000000000004 [ 331.059725] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 331.066999] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc0a7aa6d4 [ 331.074279] R13: 00000000004c80fe R14: 00000000004de4f8 R15: 0000000000000006 21:25:25 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b00000a, 0x0) 21:25:25 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0xa0103, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) flock(r0, 0x0) ioctl$TIOCSBRK(r0, 0x5427) keyctl$set_reqkey_keyring(0xe, 0x6) 21:25:25 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x4000000, 0x0, 0x0, 0x0, 0x0) 21:25:25 executing program 1: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vfio/vfio\x00', 0x8280, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = socket(0x10, 0x80803, 0x0) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000200)={0x8, 0x600000000000000, 0x2, 0x2}) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0xb}}, 0x20) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000180)={0x30, 0x5, 0x0, {0x0, 0x3, 0x1000, 0x9}}, 0x30) write$binfmt_elf32(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="7f454c46ff020109b60700000000000003000000ff00000071010000380000002b030000ff7f00000600200001000010060000080000000007000000070000000004000008000000008000000200000001000100ff07000013a300"/1109], 0x45a) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000080)=0x80000000, r3, 0x0, 0x0, 0x1}}, 0x20) write(r1, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:25:25 executing program 4: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:25:25 executing program 5 (fault-call:8 fault-nth:18): mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) [ 331.504688] hfsplus: unable to find HFS+ superblock 21:25:25 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000d17000/0x1000)=nil, &(0x7f0000c35000/0x2000)=nil, &(0x7f0000000000)="0c8fb0aff76c0cd888b5b7b01fab0955ede2d7467bcc8ed86379be32c62dd06a8c81f523598791ab3ab70d35", 0x2c, r0}, 0x68) flock(r0, 0x0) socket$l2tp(0x18, 0x1, 0x1) 21:25:25 executing program 1: r0 = socket(0x10, 0x80804, 0xfffffffffffffffe) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000040)={{{@in=@multicast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f0000000140)=0xe8) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f00000002c0)=0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$bt_hci(r2, 0x0, 0xd, 0x0, &(0x7f0000000000)) r3 = dup3(r0, r0, 0x80000) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000340)={&(0x7f0000000300)=[0xb80e, 0x5, 0xbfff, 0x401], 0x4, 0x2, 0x6, 0x8a, 0xffffffff00000000, 0x8, {0x10000, 0x4, 0x3, 0x8, 0x77, 0x3d, 0xa30, 0x0, 0x3ff, 0x1, 0x5, 0x7ff, 0x1, 0xacd, "830ee9136680b87ad47dd2dbb1e8ffa1149af3478a72d6443691df57f49ddfbd"}}) write$FUSE_BMAP(r3, &(0x7f0000000280)={0x18, 0x0, 0x1, {0xfffffffffffffffc}}, 0x18) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000180)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r1}) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x7, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f00000001c0)) [ 331.576651] hfsplus: unable to find HFS+ superblock 21:25:25 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x5000000, 0x0, 0x0, 0x0, 0x0) 21:25:25 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xd80000000}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x72}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) accept4$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x10, 0x800) [ 331.635418] FAULT_INJECTION: forcing a failure. [ 331.635418] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 331.675132] CPU: 0 PID: 14216 Comm: syz-executor.5 Not tainted 4.19.38 #6 [ 331.682113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 331.691480] Call Trace: [ 331.694098] dump_stack+0x172/0x1f0 [ 331.697741] should_fail.cold+0xa/0x1b [ 331.701649] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 331.706763] ? ___might_sleep+0x163/0x280 [ 331.710923] ? __might_sleep+0x95/0x190 [ 331.714913] __alloc_pages_nodemask+0x1ee/0x760 [ 331.719600] ? __alloc_pages_slowpath+0x2870/0x2870 [ 331.724622] ? ___might_sleep+0x163/0x280 [ 331.728782] ? copyin+0xb5/0x100 21:25:25 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0xa0103, 0x0) flock(r0, 0x4) [ 331.732164] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 331.737717] alloc_pages_current+0x107/0x210 [ 331.742142] pipe_write+0xa65/0xfb0 [ 331.745791] __vfs_write+0x58e/0x820 [ 331.749512] ? kernel_read+0x120/0x120 [ 331.753417] ? __inode_security_revalidate+0xda/0x120 [ 331.753438] ? selinux_file_permission+0x92/0x550 [ 331.753460] ? security_file_permission+0x8f/0x230 [ 331.753475] ? rw_verify_area+0x118/0x360 [ 331.772548] vfs_write+0x20c/0x560 [ 331.776107] ksys_write+0xea/0x1f0 [ 331.779655] ? __ia32_sys_read+0xb0/0xb0 21:25:25 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) flock(r0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x2, 0x0) [ 331.783740] ? do_syscall_64+0x26/0x610 [ 331.787725] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 331.793102] ? do_syscall_64+0x26/0x610 [ 331.797100] __x64_sys_write+0x73/0xb0 [ 331.800996] do_syscall_64+0x103/0x610 [ 331.804892] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 331.810089] RIP: 0033:0x458da9 [ 331.813291] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 331.832197] RSP: 002b:00007fcc0a7a9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 331.839915] RAX: ffffffffffffffda RBX: 00007fcc0a7a9c90 RCX: 0000000000458da9 [ 331.847187] RDX: 0000000020000020 RSI: 0000000020000000 RDI: 0000000000000004 [ 331.854461] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 331.861739] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc0a7aa6d4 [ 331.869097] R13: 00000000004c80fe R14: 00000000004de4f8 R15: 0000000000000006 [ 331.892214] hfsplus: unable to find HFS+ superblock [ 331.944874] hfsplus: unable to find HFS+ superblock 21:25:26 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b00000b, 0x0) 21:25:26 executing program 1: r0 = socket(0x10, 0x80803, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x80000, 0x0) read(r1, &(0x7f0000000040)=""/22, 0x16) write(r0, &(0x7f0000000080)="1b00000018000700f677b8ed8641a1c10aab80efff000000000002", 0x1b) fsetxattr$security_smack_entry(r0, &(0x7f0000000180)='security.SMACK64\x00', &(0x7f00000001c0)='{+eth0\x00', 0x7, 0x2) fsetxattr$security_smack_entry(r1, &(0x7f0000000100)='security.SMACK64\x00', &(0x7f0000000140)='\x00', 0x1, 0x1) 21:25:26 executing program 5 (fault-call:8 fault-nth:19): mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:25:26 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) flock(r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) socket(0x10, 0x7, 0x8) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x31) sync_file_range(r1, 0x8, 0x1, 0x6) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000080)={{0x5e, @local, 0x4e22, 0x0, 'none\x00', 0x1, 0x4, 0x4c}, {@multicast2, 0x4e20, 0x6, 0xc9, 0x2000000000, 0x8}}, 0x44) 21:25:26 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x6000000, 0x0, 0x0, 0x0, 0x0) 21:25:26 executing program 4: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = dup2(r0, r0) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) [ 332.684431] audit: type=1800 audit(1556832326.639:108): pid=14246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=17616 res=0 [ 332.790634] hfsplus: unable to find HFS+ superblock [ 332.796632] audit: type=1400 audit(1556832326.749:109): avc: denied { create } for pid=14253 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_iscsi_socket permissive=1 21:25:26 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20\x00', 0x1fc, 0x0) flock(r0, 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000080)=""/95) [ 332.842141] hfsplus: unable to find HFS+ superblock 21:25:26 executing program 1: r0 = socket(0x10, 0x80803, 0x0) r1 = dup(r0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)=0x0) r3 = geteuid() r4 = getgid() setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={r2, r3, r4}, 0xc) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) 21:25:26 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x7000000, 0x0, 0x0, 0x0, 0x0) 21:25:26 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) flock(r0, 0x1000002) [ 332.955388] FAULT_INJECTION: forcing a failure. [ 332.955388] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 333.007665] CPU: 1 PID: 14259 Comm: syz-executor.5 Not tainted 4.19.38 #6 [ 333.014647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 333.024011] Call Trace: [ 333.026618] dump_stack+0x172/0x1f0 [ 333.030265] should_fail.cold+0xa/0x1b [ 333.034172] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 333.039287] ? ___might_sleep+0x163/0x280 [ 333.043453] ? __might_sleep+0x95/0x190 [ 333.047450] __alloc_pages_nodemask+0x1ee/0x760 [ 333.052137] ? __alloc_pages_slowpath+0x2870/0x2870 [ 333.057162] ? ___might_sleep+0x163/0x280 [ 333.061330] ? copyin+0xb5/0x100 [ 333.064710] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 333.070273] alloc_pages_current+0x107/0x210 [ 333.074698] pipe_write+0xa65/0xfb0 [ 333.078345] __vfs_write+0x58e/0x820 [ 333.082075] ? kernel_read+0x120/0x120 [ 333.085986] ? __inode_security_revalidate+0xda/0x120 [ 333.091189] ? selinux_file_permission+0x92/0x550 [ 333.096051] ? security_file_permission+0x8f/0x230 [ 333.100998] ? rw_verify_area+0x118/0x360 [ 333.105165] vfs_write+0x20c/0x560 [ 333.108714] ksys_write+0xea/0x1f0 [ 333.112260] ? __ia32_sys_read+0xb0/0xb0 [ 333.116350] ? do_syscall_64+0x26/0x610 [ 333.120338] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 333.125710] ? do_syscall_64+0x26/0x610 [ 333.129699] __x64_sys_write+0x73/0xb0 [ 333.133595] do_syscall_64+0x103/0x610 [ 333.137502] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 333.142697] RIP: 0033:0x458da9 [ 333.145896] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 333.164803] RSP: 002b:00007fcc0a7a9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 333.172522] RAX: ffffffffffffffda RBX: 00007fcc0a7a9c90 RCX: 0000000000458da9 [ 333.179799] RDX: 0000000020000020 RSI: 0000000020000000 RDI: 0000000000000004 [ 333.187076] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 333.197003] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc0a7aa6d4 21:25:27 executing program 1: r0 = socket(0x10, 0x80803, 0x91ee) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:25:27 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e23, 0x3ff, @local, 0x5d36}}, 0x100000000, 0xe397, 0x80000000, 0x3, 0xc2}, &(0x7f0000000000)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={r1, 0x200}, &(0x7f0000000180)=0xffffffffffffff26) flock(r0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={r1, 0x2, 0x20}, 0xc) [ 333.207056] R13: 00000000004c80fe R14: 00000000004de4f8 R15: 0000000000000006 [ 333.232333] hfsplus: unable to find HFS+ superblock [ 333.282620] hfsplus: unable to find HFS+ superblock 21:25:27 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b00000c, 0x0) 21:25:27 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) flock(r0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={@ipv4={[], [], @rand_addr=0x8}, @mcast1, @mcast1, 0x6e9, 0x9, 0x4, 0x100, 0x1000, 0x40000, r1}) 21:25:27 executing program 5 (fault-call:8 fault-nth:20): mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:25:27 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x9000000, 0x0, 0x0, 0x0, 0x0) 21:25:27 executing program 1: r0 = socket(0x10, 0x80803, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000100)=0x14) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x100000000006, 0x8001) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000080)={0x101, 0x3}) 21:25:27 executing program 4: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = dup2(r0, r0) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) [ 333.835690] audit: type=1800 audit(1556832327.799:110): pid=14286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=17637 res=0 [ 333.947693] hfsplus: unable to find HFS+ superblock 21:25:27 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x80000, 0x0) flock(r0, 0x0) 21:25:27 executing program 1: fstat(0xffffffffffffff9c, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}}}, &(0x7f0000000440)=0xe8) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f0000000040)='erofs\x00', &(0x7f0000000080)='./file0\x00', 0x9, 0x1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="eb8c27af53e8f8e9f257d875c858832ef1b83d3423cb1d2b74cb9d838735ee316bafca0943bfcd17ce03df1d62b853f505a7f105b0aaeca231458ad05160583b744e4b8534b27617051794a63d70902651e6fd92f7ae3c3c5ebe60070833bd93a04e41367055e5f903d2e91756d91a81a9e762438b48de34bf881075548451f9ed0eda6f05fb00b2ca97800d500e7eb2a8e830899ad69afe502b9dfaf1b9977aec0e01376998d73e372e7e2f74edf6cd2864cf2e1fea0f3c5761f370e08841a4d640b515cd66b8f77549f6de8039536dfba436c02aed6cd19fc524ca42260b9b8b315487b8bd7a0d5486f9ee77b0c194fb", 0xf1, 0x7}], 0x280080, &(0x7f0000000540)={[{@acl='acl'}, {@acl='acl'}], [{@euid_lt={'euid<', r0}}, {@euid_gt={'euid>', r1}}, {@dont_appraise='dont_appraise'}, {@fowner_eq={'fowner', 0x3d, r2}}, {@permit_directio='permit_directio'}, {@obj_type={'obj_type'}}, {@hash='hash'}, {@subj_user={'subj_user', 0x3d, 'wlan0'}}, {@obj_type={'obj_type', 0x3d, 'vmnet1selinux'}}, {@fowner_gt={'fowner>', r3}}]}) r4 = socket(0x10, 0x80803, 0x0) write(r4, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 334.017800] hfsplus: unable to find HFS+ superblock 21:25:28 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0xa000000, 0x0, 0x0, 0x0, 0x0) 21:25:28 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) flock(r0, 0x9) accept$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000080)=0x10) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f00000000c0)={'veth1_to_hsr\x00', 0x7}) [ 334.072995] FAULT_INJECTION: forcing a failure. [ 334.072995] name fail_page_alloc, interval 1, probability 0, space 0, times 0 21:25:28 executing program 1: r0 = socket(0x80025, 0x6, 0x47) socket(0x2, 0x10000000001, 0x8) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif\x00'}, 0x58) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) [ 334.113848] CPU: 0 PID: 14293 Comm: syz-executor.5 Not tainted 4.19.38 #6 [ 334.120838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 334.130197] Call Trace: [ 334.132800] dump_stack+0x172/0x1f0 [ 334.136450] should_fail.cold+0xa/0x1b [ 334.140355] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 334.145464] ? ___might_sleep+0x163/0x280 [ 334.145484] ? __might_sleep+0x95/0x190 [ 334.145504] __alloc_pages_nodemask+0x1ee/0x760 [ 334.145522] ? __alloc_pages_slowpath+0x2870/0x2870 [ 334.158286] ? ___might_sleep+0x163/0x280 [ 334.158307] ? copyin+0xb5/0x100 [ 334.158330] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 334.176416] alloc_pages_current+0x107/0x210 [ 334.180831] pipe_write+0xa65/0xfb0 [ 334.184478] __vfs_write+0x58e/0x820 [ 334.188199] ? kernel_read+0x120/0x120 [ 334.192099] ? __inode_security_revalidate+0xda/0x120 [ 334.197302] ? selinux_file_permission+0x92/0x550 [ 334.202162] ? security_file_permission+0x8f/0x230 [ 334.207101] ? rw_verify_area+0x118/0x360 [ 334.211259] vfs_write+0x20c/0x560 [ 334.214817] ksys_write+0xea/0x1f0 [ 334.218363] ? __ia32_sys_read+0xb0/0xb0 [ 334.222434] ? do_syscall_64+0x26/0x610 [ 334.226416] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 334.231787] ? do_syscall_64+0x26/0x610 [ 334.235773] __x64_sys_write+0x73/0xb0 [ 334.239673] do_syscall_64+0x103/0x610 [ 334.243574] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 334.248767] RIP: 0033:0x458da9 [ 334.251971] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 334.270879] RSP: 002b:00007fcc0a7a9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 334.278610] RAX: ffffffffffffffda RBX: 00007fcc0a7a9c90 RCX: 0000000000458da9 [ 334.285885] RDX: 0000000020000020 RSI: 0000000020000000 RDI: 0000000000000004 [ 334.293173] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 334.300447] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc0a7aa6d4 [ 334.307719] R13: 00000000004c80fe R14: 00000000004de4f8 R15: 0000000000000006 [ 334.342191] hfsplus: unable to find HFS+ superblock 21:25:28 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x100, 0x3, [0x0, 0x8, 0x0]}, &(0x7f0000000140)=0xe) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000180)={r1, 0xd2, "b6cbcf17ef7519659e17e4e2abb3ba7fdb49f5762edf1309301bb4af84cadfb7d65ffc814cafee82aab0cc23ec805b35419c44e3365ae8a2bde77a2dcf8deeff6ab7f2eab699d4eb9f30f02db1e1bfed26473a11f15e4efa9e669710243672aebf6cdd0f8b70c152f011c6dd75391c2ce4e4de5061c4615fb0b9c422fd6baa9ac0ec2fcd46222daf90abef809dd8bb95a73e7dbb58aa724dfbddf8dd094c6c83b2acd3edbffdf93f4e965d35a889afb627052ce05dc0f7630f6c288e51edb32005938bf69dee6ad836b0ae8b1cc1da85d206"}, &(0x7f0000000280)=0xda) flock(r0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000080)=""/138) [ 334.437189] hfsplus: unable to find HFS+ superblock 21:25:29 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b00000d, 0x0) 21:25:29 executing program 1: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000140)=[{{r1, r2/1000+10000}, 0x1f, 0x3, 0x9}, {{}, 0x17, 0x3ff, 0xfa4}, {{0x0, 0x2710}, 0x17, 0xf9, 0x1}, {{}, 0x13, 0x3f, 0x9}, {{}, 0x16, 0x5, 0x1000}, {{0x0, 0x2710}, 0x2, 0xd510, 0x400}, {{}, 0x1f, 0x2, 0x5}, {{r3, r4/1000+30000}, 0x1f, 0xfffffffffffffee5, 0xfffffffffffff800}, {{r5, r6/1000+10000}, 0x2, 0x7, 0x8000}, {{0x77359400}, 0x17, 0xfffffffffffffffb, 0x400}], 0xf0) r7 = socket(0x10, 0x80803, 0x0) write(r7, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:25:29 executing program 5 (fault-call:8 fault-nth:21): mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:25:29 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0xc0e0000, 0x0, 0x0, 0x0, 0x0) 21:25:29 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x10800, 0x0) flock(r0, 0x0) 21:25:29 executing program 4: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = dup2(r0, r0) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000000, 0x1) [ 335.069018] audit: type=1800 audit(1556832329.029:111): pid=14327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=17641 res=0 21:25:29 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/capi/capi20\x00', 0xa00fe, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={0x0}) r2 = mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x10, r0, 0x0) r3 = mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x8010, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x98, 0x0, &(0x7f00000001c0)=[@register_looper, @clear_death={0x400c630f, 0x4, 0x3}, @increfs_done={0x40106308, r1, 0x4}, @reply={0x40406301, {0x4, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x68, 0x38, &(0x7f0000000100)=[@fda={0x66646185, 0x4, 0x3, 0x21}, @fda={0x66646185, 0x7, 0x0, 0x25}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0), 0x1, 0x0, 0x5}], &(0x7f0000000180)=[0x0, 0x78, 0x78, 0x20, 0x20, 0x78, 0x0]}}, @enter_looper, @increfs_done={0x40106308, r2, 0x3}, @acquire_done={0x40106309, r3, 0x2}], 0x41, 0x0, &(0x7f0000000280)="ddce2f316856eaa5516e4e955cbababa8cb2fe13654335adab11e8063ebea5f85d09ce62cdf97a26a7aaaeaa68d52a5aed98defbb96376b3faecf4a027ddc26a56"}) flock(r0, 0x0) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x6c9, 0x20040) 21:25:29 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x7000, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000140)={@l2={0x1f, 0x40, {0x800, 0x80000000, 0x5, 0x9, 0x6, 0x80000000}, 0x2, 0x8001}, {&(0x7f00000000c0)=""/6, 0x6}, &(0x7f0000000100)}, 0xa0) socket(0x110, 0x4, 0x200100000006) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x181800, 0x0) openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) [ 335.173898] hfsplus: unable to find HFS+ superblock [ 335.247334] hfsplus: unable to find HFS+ superblock [ 335.252600] FAULT_INJECTION: forcing a failure. [ 335.252600] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 335.305329] CPU: 1 PID: 14335 Comm: syz-executor.5 Not tainted 4.19.38 #6 [ 335.312312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 335.321672] Call Trace: [ 335.321696] dump_stack+0x172/0x1f0 [ 335.321720] should_fail.cold+0xa/0x1b [ 335.331807] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 335.336926] ? ___might_sleep+0x163/0x280 [ 335.341081] ? __might_sleep+0x95/0x190 [ 335.341101] __alloc_pages_nodemask+0x1ee/0x760 [ 335.341118] ? __alloc_pages_slowpath+0x2870/0x2870 [ 335.354850] ? ___might_sleep+0x163/0x280 [ 335.359014] ? copyin+0xb5/0x100 [ 335.362401] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 335.367954] alloc_pages_current+0x107/0x210 [ 335.372376] pipe_write+0xa65/0xfb0 [ 335.376029] __vfs_write+0x58e/0x820 [ 335.379753] ? kernel_read+0x120/0x120 [ 335.383655] ? __inode_security_revalidate+0xda/0x120 [ 335.388869] ? selinux_file_permission+0x92/0x550 [ 335.393731] ? security_file_permission+0x8f/0x230 [ 335.398673] ? rw_verify_area+0x118/0x360 [ 335.402837] vfs_write+0x20c/0x560 [ 335.406389] ksys_write+0xea/0x1f0 [ 335.409941] ? __ia32_sys_read+0xb0/0xb0 [ 335.414014] ? do_syscall_64+0x26/0x610 [ 335.417997] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 335.423371] ? do_syscall_64+0x26/0x610 [ 335.427362] __x64_sys_write+0x73/0xb0 [ 335.431751] do_syscall_64+0x103/0x610 [ 335.435657] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 335.440856] RIP: 0033:0x458da9 [ 335.444055] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 335.462958] RSP: 002b:00007fcc0a7a9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 335.470678] RAX: ffffffffffffffda RBX: 00007fcc0a7a9c90 RCX: 0000000000458da9 [ 335.477953] RDX: 0000000020000020 RSI: 0000000020000000 RDI: 0000000000000004 [ 335.485226] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 335.492503] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc0a7aa6d4 21:25:29 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x40000, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x2d) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0xc2) r1 = socket(0xe, 0x3, 0xffff7dfffffffffe) write(r1, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000180)=&(0x7f0000000140)) 21:25:29 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0xd000000, 0x0, 0x0, 0x0, 0x0) 21:25:29 executing program 2: r0 = shmat(0x0, &(0x7f0000ff3000/0xb000)=nil, 0x4000) shmdt(r0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) flock(r1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000180)={0x5, 0xfffffffffffffffa, 0x100000000, 0xff47, 0x101, 0x89b, 0x6136}, 0xc) getsockopt$inet6_udp_int(r1, 0x11, 0x6f, &(0x7f0000000100), &(0x7f0000000140)=0x4) fsetxattr$security_evm(r1, &(0x7f0000000080)='security.evm\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="05022d24bef6cf573e5b017b03ff00000000000000abe0d651757dadd824211e0e84b42a13f431830400766a669b438e03c5c239bf0f394740621a191ee71b9cb41b03bd92116b48d400020000353c0d7e6c8aef91fbadca8d49621ab709041f000000000000004818c2b004280ef2c7971c5f2ad2df6a4d2ace87aff68283d38d061c459918839f86d8e60a5ab9818b6af6979cba489f01826b4dc9b411f5925581000000da9369121758e188256e48"], 0x3c, 0x2) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000)={0xd15, 0x3, 0x4, 0x3f}, 0x14) connect$rxrpc(r1, &(0x7f00000000c0)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0xffffffff00000000, @remote, 0x4}}, 0x24) [ 335.499781] R13: 00000000004c80fe R14: 00000000004de4f8 R15: 0000000000000006 [ 335.562790] hfsplus: unable to find HFS+ superblock 21:25:29 executing program 1: r0 = socket(0x1b, 0x80803, 0xa9f) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}}, 0x8000) [ 335.609201] hfsplus: unable to find HFS+ superblock 21:25:30 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b00000e, 0x0) 21:25:30 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x10000000, 0x0, 0x0, 0x0, 0x0) 21:25:30 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x80, 0x0) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6, 0x20010, r0, 0x180000000) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0xa0103, 0x0) flock(r1, 0x0) 21:25:30 executing program 5 (fault-call:8 fault-nth:22): mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:25:30 executing program 1: r0 = socket(0x10, 0x80803, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x7, 0x80}, &(0x7f0000000100)=0x90) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000180)={r1, 0x200000001}, 0xfffffffffffffff7) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:25:30 executing program 4: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) [ 336.340254] audit: type=1800 audit(1556832330.299:112): pid=14370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=17655 res=0 21:25:30 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vga_arbiter\x00', 0x440201, 0x0) name_to_handle_at(r0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000440)={0xb4, 0x9, "2fdfec5d3576f66c3b1bc9825f1571690ce0159fa179ab638df14a5e21792fb4f6cf4533717b97cc17c7075aba05f42b82402478cc4bebf6c22d6b565e0385e74200326aa02077b753fc1a0c9cb79df1d28445f6ce84f14a761a8968ac1f8d93c436090a05c5aeb470d7225133780ff6d55504fc13e6033d3f11b60cde6f2a7ab8ff74add6e99bd9bd6e74771647426dd1dbfd98d166227bd74216b4b12e2eb196efed8ab4b11c946ffc5b84"}, &(0x7f0000000500), 0x1000) syz_mount_image$nfs(&(0x7f00000003c0)='nfs\x00', &(0x7f00000000c0)='./file0\x00', 0x2, 0x4, &(0x7f00000002c0)=[{&(0x7f0000000100)="529da20f56d0b40c9afa46ecba57399aaccf0e82e7fd2018430b5f27", 0x1c, 0x3}, {&(0x7f0000000140)="35b8e2", 0x3, 0x80000001}, {&(0x7f0000000180)="7f2a68cfd0144bfd1d7e8236168a9921cb7b86eb1516c6a73b6a03a643a1dc76c22eeb39d125be1ccab88baef0bc8e279fc800c91699f7ac0cbb8ba3", 0x3c, 0xffff}, {&(0x7f00000001c0)="2a7508c2ce0b5fe67d3ae8f724d78fa5b453e00bdc774f31beb3d1849fda60475618af386b9ccab8550dea7ee56513d4013413d516bca8fcbcb0d763de73dc662ed011f2619bb62bf67978940f8444db0716c3a2481ab3e696ce3bd8ac623aa2d46aa50d4fe4bfda77e1cc65c9e697444bf7dbee161af4409ebc32cc99fb2a82d601c06b15b6850d47b665573b3012e863dadb5762fb63ff029378869ef7ef91f1d773b53ed05ee980206f08a548c07830c7aee1b0ecebe9232f2fb12d441578f2a23ce762ce38f0019bb0", 0xcb, 0x6}], 0x10, &(0x7f0000000340)=',)vboxnet1em1GPL)\x00') r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) flock(r0, 0xfffffffffffffffd) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x420000) syz_init_net_socket$ax25(0x3, 0x7, 0xcf) fanotify_mark(r1, 0x0, 0x0, r1, &(0x7f0000000380)='./file0\x00') 21:25:30 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e21, 0xe71, @mcast2, 0x9a7b}}}, &(0x7f00000001c0)=0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000200)={0x0, 0x1798, 0x9, [0x0, 0x1ff, 0x9, 0x1000, 0x9, 0x40, 0x8, 0xc5, 0x401]}, &(0x7f0000000240)=0x1a) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x1ff, 0x4, 0x1ff}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000009c0)={0x0}, &(0x7f0000000a00)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000a40)={0x0, 0x39, 0x30, 0x2, 0x20}, &(0x7f0000000a80)=0x18) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000ac0)={0x0, 0x800}, &(0x7f0000000b00)=0x8) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000007600)='/selinux/enforce\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000007680)={&(0x7f0000007640)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000e00)={0x0}, &(0x7f0000000e40)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000004480)={0x918, 0x8, 0x20c, 0x1, 0x400000, 0x0, 0x80, 0x0, 0x0}, &(0x7f00000044c0)=0x20) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000004700)={0x0, 0x7}, &(0x7f0000004740)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000006dc0)={0x0, 0x9, 0xc6, 0x7ff, 0x4c81, 0x7, 0x4, 0xffffffffffffc6be, {0x0, @in={{0x2, 0x4e22, @rand_addr=0x9}}, 0x4, 0x6, 0x4, 0x4, 0xfffffffffffffc01}}, &(0x7f0000006e80)=0xb0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000006ec0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000006f00)=0x18) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000071c0)={0x0, @in6={{0xa, 0x4e20, 0x4, @mcast1, 0x1}}, [0x7, 0x6, 0x3, 0xffffffffffffffff, 0x7, 0x8, 0x7, 0x433, 0x3, 0x0, 0xc382, 0x9, 0x130, 0x2, 0xb64]}, &(0x7f00000072c0)=0x100) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000007300)={0x0, 0xffffffffffff8001}, &(0x7f0000007340)=0x8) sendmmsg$inet_sctp(r0, &(0x7f0000007440)=[{&(0x7f0000000040)=@in6={0xa, 0x4e21, 0x81, @dev={0xfe, 0x80, [], 0x19}, 0xe1}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000080)="ee8f38daec5147cbb33de0eb305b97e1b24e610ebb3dee19e31ca4e4b29dd13d400d8fa9f9f8587db6331c9186fb5fa3193f", 0x32}], 0x1, &(0x7f0000000300)=[@sndrcv={0x30, 0x84, 0x1, {0x1ff, 0x9, 0x0, 0xffffffffffff0001, 0x34, 0x100, 0x4c, 0x0, r1}}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={[], [], @local}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x9}}, @sndinfo={0x20, 0x84, 0x2, {0xc00000000000, 0x200, 0x7fff, 0x7f, r2}}, @sndinfo={0x20, 0x84, 0x2, {0x3, 0x4, 0xf512, 0x8, r3}}, @dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, [], 0x1f}}], 0xc8, 0x4000}, {&(0x7f0000000400)=@in={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000440)="81b0821f7bcbbcc69c23d53cb386bf51994a82d7969de1", 0x17}, {&(0x7f0000000480)="62bfe2677228d455ed2b6c56145f3161b1b734d17a8956b7a42edf1b08dd9fe82fb1ccc964dad3c0e3571c995eee0831bebcb695827c853016805b2bfa0eaff2a6b54aa3be6044d4c66e75093d63437ad8aa27ee76515cd3f27c546954209f2939471a8336d7f6c71ef1546d90ac6316b8b4bfaaa54dfc0006163fa5dac5927b84cc6c52aad55e47e3eef3575f801daa14361200759bd3f504ef", 0x9a}], 0x2, &(0x7f0000000580)=[@init={0x18, 0x84, 0x0, {0x4f6, 0x6, 0x0, 0x3f}}, @authinfo={0x18, 0x84, 0x6, {0xd256}}], 0x30, 0x4000000}, {&(0x7f00000005c0)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000600)="1c7eea55c1ef13a888d619f9c3a82ae38762978636818f48038c3a908d9e23e718eca413cadce9af3454f2c799c7a90b83007ec309852d19ba06eba98a95a5521404b1850d1fa5766ded9fa0d017ed1e6d0854766b2029978699e0882f82fd806b5abb42fb35d928720d", 0x6a}, {&(0x7f0000000680)="e024839b1dd6b74d732dd63ad6b9d8af3e90d4db67cfafac60fae248b21d5125ec613983733bad79520f76e8e5abea24f9e6e4f41e75017ce5d61a32b6aa7d6d0fec20", 0x43}, {&(0x7f0000000700)="0de357e394e70ef8c1c6263b8addd9fcea5d17922b0d209cb0387fa02b5d1798f037f72218e676ff877b8c784c35a3e23fd010423514f0b2644ae425049b00d09fd2ba0efc581eab0209a1d6ca420f5947cac4080383cc2888979cf5cd54ca4dec7557e6f70b4f9b65171852a22ae64eece4e7b962fa62d89684e8759532fd78da0eab7c30e1d7fb8c67c73b926d9a4950e7b812d64cff0895768f83ae05d980b7e9bbb981cefbd21a19426df28ad607af04658daa3d63a78217559a7e30ee7a370eb7", 0xc3}, {&(0x7f0000000800)="474a64150331bdce1df46d552e5348709d959b402267652ac9933c05c1c02c44fa6952239f75b7f028a11bc9812faf5e189678b488d4baa4d775919bdbd4de4bf0726013ef8c725144d31e39", 0x4c}, {&(0x7f0000000880)="868ec3436585867f5fa44871f39b7bd6a6e5cac39eafd1fdfe4f93ec598c18c24120be1a0bb2636f13539537ad60bda54ccca5720eef322204a1170f45ad80a178ddea1754b377351226fe4d9e2a4425ad98033b880d38c9c259ba47e61dbd322fb14913319fd37432cbeb26f2f6b57b96c4056cbfcb82b4086712dad92b89eb5d42f477a91aad03e432f531256887e337e1", 0x92}], 0x5, &(0x7f0000000b40)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x6}}, @sndrcv={0x30, 0x84, 0x1, {0x7, 0x1000, 0x200, 0x7, 0x0, 0xe2, 0x4, 0x20, r4}}, @sndinfo={0x20, 0x84, 0x2, {0x1000, 0x4, 0x7e, 0x7fff, r5}}, @sndrcv={0x30, 0x84, 0x1, {0xfffffffffffffff7, 0x3, 0x8000, 0x400, 0x80, 0x1, 0x3, 0x1, r6}}, @prinfo={0x18}], 0xb0, 0x40000}, {&(0x7f0000000c00)=@in={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000c40)="a3a82f39c59faaec0917140bbb37342bc96c49284f51e5d01db5d806e595e828e2090844fe197fe5f0133d7abff52d6c0bb0606a43", 0x35}, {&(0x7f0000000c80)="4e6a7bdba49a8df46f91f34e0cad15e551dba20e4024ebf6a7f30f0d791d95d06fafe3af10ef90274909c6cb76ab67517b4f079dc8b60558940c57f1bdaeb4947955ea93375b142b0629ebfeb47dd70349b8c7f5a371c89d561af0c2b81b942f392e8e972829c4eb508d366094b973f5414584955050e5af243dfedba695e95b852b7a6a59b6921ac2bef216599025b8d87d1255c68e6e1961193e65be6b", 0x9e}, {&(0x7f0000000d40)="2f031af0edf262c7e0ce585d020e6d61a349e5e8d9cdbbc8f672b40336c4109df9568103f7e007fc37100ee7ea8c2637e57347a37e57cb76c3664944", 0x3c}, {&(0x7f0000000d80)="005cac4cb81cf5da789611bc363f8307d4bfcce84b921589a1", 0x19}], 0x4, &(0x7f0000000e80)=[@init={0x18, 0x84, 0x0, {0x0, 0xffff, 0x4, 0x4}}, @sndinfo={0x20, 0x84, 0x2, {0x7fffffff, 0x204, 0x0, 0x45d65f47, r8}}], 0x38, 0x40000}, {&(0x7f0000000ec0)=@in6={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0xb}, 0x5}, 0x1c, &(0x7f00000043c0)=[{&(0x7f0000000f00)="5683ee1e81c1f7a4cc586b150526371f5ad4ce0e25e3f359479a0f30d3ab1f90f5b58f9c1a8c53c828b38e268288d299f2fe80841e0c8b0a64c561791bc503edc134a5592c806a4e07781e1c1e91b9a72562a1ba045f6f7427c19c4974e265f1384ec3608599957536fd899f6b774f8d6d24085ce636f99126f7cb4c4b53f176a390c06d01bee7d2e29771e280860d80587264ce495d370f5aa689b2be6a3c97e4366fe0243e314fe37d9c6fc74f74d47e39135ea55d2af0e5c307266def", 0xbe}, {&(0x7f0000000fc0)="9a65ecef561c89096dbcf11502cbf7fa685259a0a52a978aa12d2882013562a3d3d79348ccb315be00b1dda75371645b848ed1fc56f475497e7328042ef19e4999f0e0fd2f822cf6be3c4429c7c7282de7763d2a2fd7ddf5a7fb795629122ec74de3dc874379c3c8f77dbe40c23c47dafe7b5a13c5f4a54477ba2bef398d2b2eff557242cdc12084b9b0f4", 0x8b}, {&(0x7f0000001080)="2ff4eb20a30daa576e97c04013bf905956fd3f53637220f49fae555034719ea65042c68524f43f0d8bb77c811eefbb5cffb2aa22e4027b1f5416517236a501e60c386282d6c791e39fab5fa9c7a90ff526e272b0c98cb544e44b8aaaa4a2ac5c9e5ec505c73e264d9eb187c68258a01c2f9c74acc762dc213a8dde1a882a65d0513cc2aa74d3d9e343c1efe10395935a976ebecf9c9e18a84397e74e79e19ef610da39e593ca8750bbe97ecd99293a69fb051a79ae6aaee7a96d608ffe41ee6844b9ec4d8bd34ea20f8d9ee2ff06eb1f874b4ec27dbdd6b161f6", 0xda}, {&(0x7f0000001180)="7a8d0379bb32465eaacce4c49d9fb93b477b3bb7cd66fdb9d0a31f5fdaf2bbf3ee217777bba5b84b31d07515e2ed3edd2fe53530b3e309a265054e24c703d5453af6afb42acc4d784765793b3abd8523e0912f9b06d1639fb14807353e45a304a7c2554ffd332f40f18e85841a77ca8dfca9efa840debbaf5632dfeb18c97bc85862b61a89832cb528fc2a6ca5e8d31f86089e95ed22258a60d39c839b3a2632f9a82d8953a5d192fe5c6d4732592b65db1cdb74e1fd30ab32bbacc5da32d2628aa214b20a", 0xc5}, {&(0x7f0000001280)="f9d52703ea21990de31d36db47491a09d2fcd6333885ed94e9", 0x19}, {&(0x7f00000012c0)="3518791e0b959fcd6d7486fdee8b2ff4de1ed83ce1efd8ac7d4990f802d2e31af09ea76323e76e3c02233bf0c6b0efa74c92c68e2b5de1a2c44e7c618eb9e0973c5b38f910c41968de4e1bc022dfc0c110ac85b57ab4fc6bd41f3167a5f70d6318292034d13ce344ccc27d2b6f4c2476020da9d5bcc0294232b77cc6e51dd9099a812c7665a6ed4bacf971923e34ee834e53a5710db2af0a3dca6c7b04d6d9e4936182c859aea177ab59dd3b58b2b8b459dce79fd51d9cd9c2f51d45bd2c58e05b72461aca6d5e54ff1d5915ed56a7e0347689d40d1eb18398a48fd067c22814d664d3f83d165b", 0xe7}, {&(0x7f00000013c0)="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", 0x1000}, {&(0x7f00000023c0)="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", 0x1000}, {&(0x7f00000033c0)="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", 0x1000}], 0x9, &(0x7f0000004500)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x6}}, @dstaddrv6={0x20, 0x84, 0x8, @remote}, @sndrcv={0x30, 0x84, 0x1, {0x9, 0x3ff, 0x200, 0x7ff000, 0x8, 0x7, 0x9, 0x3, r9}}, @authinfo={0x18, 0x84, 0x6, {0x4}}, @authinfo={0x18, 0x84, 0x6, {0x5}}, @dstaddrv6={0x20, 0x84, 0x8, @loopback}], 0xb8, 0x800}, {&(0x7f00000045c0)=@in6={0xa, 0x4e22, 0xffffffff, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x401}, 0x1c, &(0x7f00000046c0)=[{&(0x7f0000004600)="905d587517be7054d4b3ccd84f0b720650d92ae47c93c22629f6ed0c3405bcc46aff2efcb33cf4058544def9faa973647f801a338061114e6aff5b2f37474d6e513cfdf0b68e48210b94da6b325c56182878bd37d35162bf760a19f1083951ba811a7c3b2c792ebb065cd035e9f3020ff7dd323c0f7ed962646a4ef7094cca9a949cb7d31cc8fc90c9e3b59571968a2b0c2a78a9115c1970576e8fb0663cbbf8451b0c1530cf5e4cda187625a7e7c93ab4a909c2df91", 0xb6}], 0x1, &(0x7f0000004780)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x1000}}, @sndrcv={0x30, 0x84, 0x1, {0xfff, 0x9, 0x8000, 0x4cb, 0x0, 0x5, 0x0, 0x304000000, r10}}], 0x48, 0x4}, {&(0x7f0000004800)=@in6={0xa, 0x4e23, 0x80000001, @remote}, 0x1c, &(0x7f0000006d00)=[{&(0x7f0000004840)="a0803f74e6476ae79b22a3963f2ae76531bb9b5c10f33b29690cb82954e8e67841d1e1a506c8833a8f9d5a156933bbe2ca8d058479b5783ced5896eecc96a6eb35d7a3b61ff58ad2090c9b115e5bf4510add092157f0f6571a4cae9295ef3b", 0x5f}, {&(0x7f00000048c0)="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", 0x1000}, {&(0x7f00000058c0)="7bdc93a4fa370924ee0a0c512f05d210544984719d265e2a6e02cbc21d6a927bd30fa47158a1c8d45a17771cac1118ab316c555897daf7805e003f5add0b5ec27a5cf470978d48338609a56c51adf148c0e6580d81623fde44fcbbffcb7eb3d1af0ae8c2f1ae35801ae25d0cd21de26e36fad3d3b234503cac80f496c268c6", 0x7f}, {&(0x7f0000005940)="eeb8f3fecb7be2c970a3a31b1a59ce924db2a1524b963eaa54770172e9993b7b56f9bdb7708ddddd481fab96f4d173e97fb38ee8b23595c64aadd7fedc33a8dc59dd9d07d971468400b02d834b93c077f14e9a1dc80f816e00db5ee496d7a8ac323dd3db8f7defa54274ead940266c", 0x6f}, {&(0x7f00000059c0)="7fe828d0b9192652cbfe2e31f429a471e5f04725765af0fddb5926cb4f04df81d77d7b2b37b8c175b64731905d4d3b26c520742b3659165b1453f2c1bad2c11fa4450a56adf02810334df0e444b64ab88052d7ad39dd1edc8a879e946664a4d5f8fbce487134637f324b9930c709b1669c6436f11e77e25b2b97bda8fa8f8f82605e6d1427e6411a2ca9c82ada0c235be510347c8701b6eb30ad555a396a3a296b1a6e2bedb6bae1609f970b79ea6a06e2c5dee7980bcf50459435ed67f8ba7db4a86898", 0xc4}, {&(0x7f0000005ac0)="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", 0x1000}, {&(0x7f0000006ac0)="5f47edbf28f0d427656a84d5d47b06c5f4f309bdb5a7db989a3cbf94149489dc40ee974c43ec63cc4b01bafc1814b006b06fc72a55c56feda075a316ee0a954e3f09c6f36e22c451fac06d70559e4e31c105a077ffa36568b6", 0x59}, {&(0x7f0000006b40)="83dadbfdce19af64271c8aea538f71ff9f49ce174b6669e9f197d197b813d17993be3f547ab3ca1011ab06f4241e3d41d20262defe3b8e1a31d687c31f5f80a0a49371619a42a31f422ed4495c657188451e52a32bac8887fccdf9dbf3d551513b5fac596398358f25a7c6239d799582fc680ecfcdab8e84c55b3bbae05dc903fc7fc84c12dde54c781542bfd21e03660ae8b3b2004454b62db50c6699bd3f1fe29c4cc620336474061a5e03a82f9241d2ca58e49b84254c25a421716d41bbffa7782262661ea386df", 0xc9}, {&(0x7f0000006c40)="4511c9a07e01e8666381106a82149b3b59727496f01fc4309c7c441aaa6685c53974da255b6977b4d17ceed1d2d1313a4e75abc46b7fe3e4071f8e27b467", 0x3e}, {&(0x7f0000006c80)="f196bab022242fad0893cf52961bfa8890442e7e5d16f28a4c92dc35cabec677d48656f9b773b1b2348d10f559d3f21e21af889f75fa28aefb1dabae95f825d81ac897b6880803a5973f087cb839da65af08a4b2d5653765ab3be30903de7915c9e37fb6a6", 0x65}], 0xa, &(0x7f0000006f40)=[@dstaddrv4={0x18, 0x84, 0x7, @loopback}, @init={0x18, 0x84, 0x0, {0x3, 0x100000000, 0x8, 0x101}}, @sndrcv={0x30, 0x84, 0x1, {0x100000001, 0x20, 0x820f, 0x5, 0x8, 0x81, 0x1, 0x10000, r11}}, @sndinfo={0x20, 0x84, 0x2, {0xffffffffffffff7f, 0x8000, 0x1, 0x1, r12}}, @prinfo={0x18, 0x84, 0x5, {0x30}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x6}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x5}}], 0xc8, 0x20004040}, {&(0x7f0000007040)=@in={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000007180)=[{&(0x7f0000007080)="942d7adb9b978de743763ef5fa6b02028d82fe62c36e89076e61df05c565358d81bdaa0bf587431055c65900c19e90a3a4130a36d85602204060819a504d1b27928089888382c89c2cf1ae2f6006dcc9786a9456c3682a8934301e79d797a801639187710969396bf62a862bf154c340bf42fc9705fbd7a5f42f06ceddb0091db68db48704d034c1c009bca71f6e1a3647d1ee6b99cf17ad25bd2c2fb05e5b210b61bbe31967d860d2f1f863d4abf67b97bc1e15cf456bdcc504ac36a161e52eb0d8eb58f0bcd970d97d7c0760ff43", 0xcf}], 0x1, &(0x7f0000007380)=[@authinfo={0x18, 0x84, 0x6, {0xbb2}}, @sndrcv={0x30, 0x84, 0x1, {0x20, 0xbba7, 0x200, 0x6, 0x180c, 0x4, 0x10000, 0x1, r13}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast2}, @sndinfo={0x20, 0x84, 0x2, {0x80, 0x0, 0x3, 0x3, r14}}, @dstaddrv6={0x20, 0x84, 0x8, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @dstaddrv6={0x20, 0x84, 0x8, @local}], 0xc0, 0x804}], 0x8, 0x20000000) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000076c0), &(0x7f0000007700)=0x4) [ 336.464011] audit: type=1804 audit(1556832330.419:113): pid=14381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir015708984/syzkaller.GbgsAS/343/file0" dev="sda1" ino=17674 res=1 [ 336.497316] hfsplus: unable to find HFS+ superblock [ 336.552855] hfsplus: unable to find HFS+ superblock 21:25:30 executing program 1: r0 = socket(0x10, 0x80803, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x0, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x1, 0x4) ioctl$VT_RELDISP(r1, 0x5605) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:25:30 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x1f000000, 0x0, 0x0, 0x0, 0x0) [ 336.601035] FAULT_INJECTION: forcing a failure. [ 336.601035] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 336.653114] CPU: 1 PID: 14378 Comm: syz-executor.5 Not tainted 4.19.38 #6 [ 336.660106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 336.669477] Call Trace: [ 336.672088] dump_stack+0x172/0x1f0 [ 336.675776] should_fail.cold+0xa/0x1b [ 336.679694] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 336.684836] ? ___might_sleep+0x163/0x280 [ 336.689012] ? __might_sleep+0x95/0x190 [ 336.693015] __alloc_pages_nodemask+0x1ee/0x760 [ 336.697718] ? __alloc_pages_slowpath+0x2870/0x2870 [ 336.702800] ? ___might_sleep+0x163/0x280 [ 336.707150] ? copyin+0xb5/0x100 [ 336.710822] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 336.716384] alloc_pages_current+0x107/0x210 [ 336.720834] pipe_write+0xa65/0xfb0 [ 336.724494] __vfs_write+0x58e/0x820 [ 336.728227] ? kernel_read+0x120/0x120 [ 336.732142] ? __inode_security_revalidate+0xda/0x120 [ 336.737357] ? selinux_file_permission+0x92/0x550 [ 336.742227] ? security_file_permission+0x8f/0x230 [ 336.747183] ? rw_verify_area+0x118/0x360 [ 336.751347] vfs_write+0x20c/0x560 [ 336.754910] ksys_write+0xea/0x1f0 [ 336.758472] ? __ia32_sys_read+0xb0/0xb0 [ 336.762550] ? do_syscall_64+0x26/0x610 [ 336.766542] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 336.771923] ? do_syscall_64+0x26/0x610 [ 336.775918] __x64_sys_write+0x73/0xb0 [ 336.779824] do_syscall_64+0x103/0x610 [ 336.783769] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 336.788977] RIP: 0033:0x458da9 21:25:30 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x3f, 0x0) flock(r0, 0x1) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0xa5bd, 0x1, 0x0, 0x90, 0xd, 0xa92, 0x70, 0x2, 0x1, 0x2, 0xf6, 0xfffffffffffffff7}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) tgkill(r1, r2, 0x36) sync() [ 336.792190] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 336.811110] RSP: 002b:00007fcc0a7a9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 336.818845] RAX: ffffffffffffffda RBX: 00007fcc0a7a9c90 RCX: 0000000000458da9 [ 336.826132] RDX: 0000000020000020 RSI: 0000000020000000 RDI: 0000000000000004 [ 336.833418] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 336.840700] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc0a7aa6d4 [ 336.840709] R13: 00000000004c80fe R14: 00000000004de4f8 R15: 0000000000000006 21:25:30 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000001100)='/proc/capi/capi20\x00', 0x60340, 0x0) flock(r0, 0x0) syz_open_dev$sndmidi(&(0x7f0000001140)='/dev/snd/midiC#D#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet6_dccp_buf(r0, 0x21, 0x2, &(0x7f00000000c0)=""/4096, &(0x7f0000000040)=0x1000) r1 = getegid() getgroups(0x3, &(0x7f0000000080)=[0xee01, 0x0, 0xee01]) setfsgid(r3) setgroups(0x2, &(0x7f00000010c0)=[r1, r2]) getsockopt$inet_dccp_buf(r0, 0x21, 0x2, &(0x7f0000001180)=""/5, &(0x7f00000011c0)=0x5) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400000, 0x0) [ 336.902333] hfsplus: unable to find HFS+ superblock [ 337.001234] hfsplus: unable to find HFS+ superblock [ 337.212203] audit: type=1804 audit(1556832331.169:114): pid=14384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir015708984/syzkaller.GbgsAS/343/file0" dev="sda1" ino=17674 res=1 21:25:31 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b00000f, 0x0) 21:25:31 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3f, &(0x7f0000000040)=""/10, &(0x7f0000000080)=0xa) r1 = request_key(&(0x7f00000000c0)='syzkaller\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='\x00', 0xfffffffffffffffe) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/checkreqprot\x00', 0x8100, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000340)={0x1, 0x0, &(0x7f00000001c0)=""/121, &(0x7f0000000240)=""/179, &(0x7f0000000300)=""/35, 0xd001}) keyctl$setperm(0x5, r1, 0x100) r3 = socket(0x10, 0x80803, 0x0) write(r3, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:25:31 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x200000, 0x0) flock(r0, 0xa) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x16, 0x8}, {{r1, r2/1000+10000}, 0x17, 0x2, 0x7}, {{0x0, 0x7530}, 0x4, 0x8000, 0x5}, {{0x77359400}, 0x4, 0x3, 0x3bc32bdf}], 0x60) syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x850000010000000, 0x8000) 21:25:31 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x20000000, 0x0, 0x0, 0x0, 0x0) 21:25:31 executing program 5 (fault-call:8 fault-nth:23): mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:25:31 executing program 4: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:25:31 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) flock(r0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x130a000, 0x4) 21:25:31 executing program 1: r0 = request_key(&(0x7f0000000040)='cifs.spnego\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='*cgroup\\vmnet1nodev)posix_acl_access[vboxnet1\x00', 0xfffffffffffffffb) keyctl$revoke(0x3, r0) r1 = socket(0x10, 0x80803, 0x0) write(r1, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 337.737980] hfsplus: unable to find HFS+ superblock [ 337.745317] audit: type=1804 audit(1556832331.709:115): pid=14418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir015708984/syzkaller.GbgsAS/344/file0" dev="sda1" ino=17678 res=1 [ 337.822429] FAULT_INJECTION: forcing a failure. [ 337.822429] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 337.861792] hfsplus: unable to find HFS+ superblock [ 337.871055] CPU: 0 PID: 14415 Comm: syz-executor.5 Not tainted 4.19.38 #6 [ 337.878021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 337.878029] Call Trace: [ 337.878053] dump_stack+0x172/0x1f0 [ 337.878076] should_fail.cold+0xa/0x1b [ 337.878097] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 337.878118] ? ___might_sleep+0x163/0x280 [ 337.897617] ? __might_sleep+0x95/0x190 [ 337.897638] __alloc_pages_nodemask+0x1ee/0x760 [ 337.897682] ? __alloc_pages_slowpath+0x2870/0x2870 [ 337.920580] ? ___might_sleep+0x163/0x280 [ 337.924751] ? copyin+0xb5/0x100 [ 337.928246] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 337.933804] alloc_pages_current+0x107/0x210 [ 337.938229] pipe_write+0xa65/0xfb0 [ 337.941881] __vfs_write+0x58e/0x820 [ 337.945613] ? kernel_read+0x120/0x120 [ 337.949520] ? __inode_security_revalidate+0xda/0x120 [ 337.954729] ? selinux_file_permission+0x92/0x550 [ 337.959592] ? security_file_permission+0x8f/0x230 [ 337.964536] ? rw_verify_area+0x118/0x360 [ 337.968717] vfs_write+0x20c/0x560 [ 337.972295] ksys_write+0xea/0x1f0 [ 337.975860] ? __ia32_sys_read+0xb0/0xb0 [ 337.979939] ? do_syscall_64+0x26/0x610 [ 337.983925] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 337.989299] ? do_syscall_64+0x26/0x610 [ 337.993288] __x64_sys_write+0x73/0xb0 [ 337.997217] do_syscall_64+0x103/0x610 [ 338.001126] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 338.006325] RIP: 0033:0x458da9 [ 338.009531] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 338.028709] RSP: 002b:00007fcc0a7a9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 338.036435] RAX: ffffffffffffffda RBX: 00007fcc0a7a9c90 RCX: 0000000000458da9 [ 338.043717] RDX: 0000000020000020 RSI: 0000000020000000 RDI: 0000000000000004 [ 338.050995] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 338.058273] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc0a7aa6d4 [ 338.065551] R13: 00000000004c80fe R14: 00000000004de4f8 R15: 0000000000000006 21:25:32 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x22000000, 0x0, 0x0, 0x0, 0x0) 21:25:32 executing program 1: r0 = socket(0x3, 0x4, 0x1000) write(r0, &(0x7f0000000040)="1b00000018000700f677b8ed63cdb8c543ebd8dbbe727165c77e8641a1c10aab80ff00000000000236", 0x29) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080)=0x1, 0x4) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x5, 0x0) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f00000000c0)=""/178) setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000180)=0x1, 0x4) 21:25:32 executing program 5 (fault-call:8 fault-nth:24): mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:25:32 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x200000, 0x0) fcntl$setstatus(r1, 0x4, 0x40000) flock(r0, 0x0) socket$packet(0x11, 0x3, 0x300) [ 338.246400] hfsplus: unable to find HFS+ superblock [ 338.322537] hfsplus: unable to find HFS+ superblock [ 338.414465] FAULT_INJECTION: forcing a failure. [ 338.414465] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 338.442893] CPU: 0 PID: 14446 Comm: syz-executor.5 Not tainted 4.19.38 #6 [ 338.449878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 338.459247] Call Trace: [ 338.461860] dump_stack+0x172/0x1f0 [ 338.465521] should_fail.cold+0xa/0x1b [ 338.469523] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 338.474682] ? ___might_sleep+0x163/0x280 [ 338.478854] ? __might_sleep+0x95/0x190 [ 338.482859] __alloc_pages_nodemask+0x1ee/0x760 [ 338.487555] ? __alloc_pages_slowpath+0x2870/0x2870 [ 338.492589] ? ___might_sleep+0x163/0x280 [ 338.496817] ? copyin+0xb5/0x100 [ 338.500232] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 338.505819] alloc_pages_current+0x107/0x210 [ 338.510248] pipe_write+0xa65/0xfb0 [ 338.513910] __vfs_write+0x58e/0x820 [ 338.517735] ? kernel_read+0x120/0x120 [ 338.521676] ? __inode_security_revalidate+0xda/0x120 [ 338.526888] ? selinux_file_permission+0x92/0x550 [ 338.531760] ? security_file_permission+0x8f/0x230 [ 338.536714] ? rw_verify_area+0x118/0x360 [ 338.540886] vfs_write+0x20c/0x560 [ 338.544449] ksys_write+0xea/0x1f0 [ 338.548012] ? __ia32_sys_read+0xb0/0xb0 [ 338.552094] ? do_syscall_64+0x26/0x610 [ 338.556088] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 338.561473] ? do_syscall_64+0x26/0x610 [ 338.565473] __x64_sys_write+0x73/0xb0 [ 338.569380] do_syscall_64+0x103/0x610 [ 338.573291] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 338.578496] RIP: 0033:0x458da9 [ 338.581707] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 338.600658] RSP: 002b:00007fcc0a7a9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 338.608392] RAX: ffffffffffffffda RBX: 00007fcc0a7a9c90 RCX: 0000000000458da9 [ 338.615682] RDX: 0000000020000020 RSI: 0000000020000000 RDI: 0000000000000004 [ 338.622965] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 338.630247] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc0a7aa6d4 [ 338.637535] R13: 00000000004c80fe R14: 00000000004de4f8 R15: 0000000000000006 [ 338.665547] audit: type=1804 audit(1556832332.609:116): pid=14425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir015708984/syzkaller.GbgsAS/344/file0" dev="sda1" ino=17678 res=1 21:25:32 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000010, 0x0) 21:25:32 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @loopback, @empty}, &(0x7f0000000080)=0xc) r2 = creat(&(0x7f0000000100)='./file0\x00', 0xa) ioctl$KVM_GET_CLOCK(r2, 0x8030ae7c, &(0x7f0000000140)) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={r1, @multicast2, @remote}, 0xc) 21:25:32 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x23000000, 0x0, 0x0, 0x0, 0x0) 21:25:32 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) flock(r0, 0x0) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) write$ppp(r0, &(0x7f0000000100)="7f4c2415b41387b2e07ee15e24c101a2de31f3984ea73fb4ca2a1ffea8931291d98b1e0fbc298087da455f43b622c0bb853b68cdb5ed34", 0x37) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={r1, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) 21:25:32 executing program 4: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:25:32 executing program 5 (fault-call:8 fault-nth:25): mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:25:33 executing program 2: flock(0xffffffffffffffff, 0x0) 21:25:33 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000040)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 339.059661] hfsplus: unable to find HFS+ superblock [ 339.071262] audit: type=1804 audit(1556832333.029:117): pid=14461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir015708984/syzkaller.GbgsAS/345/file0" dev="sda1" ino=17689 res=1 [ 339.143276] hfsplus: unable to find HFS+ superblock 21:25:33 executing program 1: r0 = socket(0x5, 0x4, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000080)=0x5fd) getdents64(r1, &(0x7f0000000100)=""/167, 0xa7) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000000)) 21:25:33 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) flock(r0, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000100)={r1, 0x1, 0x6}, 0x10) connect$vsock_stream(r0, &(0x7f00000002c0)={0x28, 0x0, 0x2711, @hyper}, 0x10) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)={0x0, 0x8000, 0x800}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000400)=0xe9) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140)={r2, 0x404}, &(0x7f0000000180)=0x8) prctl$PR_SET_NAME(0xf, &(0x7f0000000300)='/proc/capi/capi20\x00') getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e23, @remote}}, 0x20, 0x3}, &(0x7f0000000280)=0x90) 21:25:33 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x2c000000, 0x0, 0x0, 0x0, 0x0) [ 339.207117] FAULT_INJECTION: forcing a failure. [ 339.207117] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 339.300861] CPU: 0 PID: 14464 Comm: syz-executor.5 Not tainted 4.19.38 #6 [ 339.307862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 339.317239] Call Trace: [ 339.319854] dump_stack+0x172/0x1f0 [ 339.323508] should_fail.cold+0xa/0x1b [ 339.323531] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 339.323549] ? ___might_sleep+0x163/0x280 [ 339.323601] ? __might_sleep+0x95/0x190 [ 339.336839] __alloc_pages_nodemask+0x1ee/0x760 [ 339.336860] ? __alloc_pages_slowpath+0x2870/0x2870 21:25:33 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) flock(r0, 0x0) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x1, 0x1, 0x3, 0x7fff, 0x7fffffff, "fb3cc7ac7db9bb238f45bc24caede2e503883c08c00f745785be8cab26cbd129d4db0e442a6c97a954af4926a060aa5969c5c2834433ba8f67ab3731bc9dd2", 0x3f}, 0x60) [ 339.336877] ? ___might_sleep+0x163/0x280 [ 339.336898] ? copyin+0xb5/0x100 [ 339.336920] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 339.336940] alloc_pages_current+0x107/0x210 [ 339.360324] hfsplus: unable to find HFS+ superblock [ 339.363777] pipe_write+0xa65/0xfb0 [ 339.363808] __vfs_write+0x58e/0x820 [ 339.363827] ? kernel_read+0x120/0x120 [ 339.363848] ? __inode_security_revalidate+0xda/0x120 [ 339.363867] ? selinux_file_permission+0x92/0x550 [ 339.394674] ? security_file_permission+0x8f/0x230 [ 339.399630] ? rw_verify_area+0x118/0x360 [ 339.403814] vfs_write+0x20c/0x560 [ 339.407377] ksys_write+0xea/0x1f0 [ 339.411052] ? __ia32_sys_read+0xb0/0xb0 [ 339.415137] ? do_syscall_64+0x26/0x610 [ 339.419123] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 339.424498] ? do_syscall_64+0x26/0x610 [ 339.428500] __x64_sys_write+0x73/0xb0 [ 339.432411] do_syscall_64+0x103/0x610 [ 339.436328] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 339.441536] RIP: 0033:0x458da9 [ 339.444793] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 339.463710] RSP: 002b:00007fcc0a7a9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 339.471444] RAX: ffffffffffffffda RBX: 00007fcc0a7a9c90 RCX: 0000000000458da9 [ 339.478727] RDX: 0000000020000020 RSI: 0000000020000000 RDI: 0000000000000004 [ 339.486444] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 339.493737] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc0a7aa6d4 [ 339.501023] R13: 00000000004c80fe R14: 00000000004de4f8 R15: 0000000000000006 [ 339.533843] hfsplus: unable to find HFS+ superblock [ 339.833520] audit: type=1804 audit(1556832333.789:118): pid=14466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir015708984/syzkaller.GbgsAS/345/file0" dev="sda1" ino=17689 res=1 21:25:34 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000011, 0x0) 21:25:34 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa2103, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x1) flock(r0, 0x0) 21:25:34 executing program 5 (fault-call:8 fault-nth:26): mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:25:34 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x3f000000, 0x0, 0x0, 0x0, 0x0) 21:25:34 executing program 1: r0 = socket(0x10, 0x80803, 0xfffffffffffffffe) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000080)) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f00000000c0)={0x8, 0x9, 0x2}) 21:25:34 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) [ 340.106171] audit: type=1800 audit(1556832334.069:119): pid=14488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=17675 res=0 [ 340.182661] hfsplus: unable to find HFS+ superblock 21:25:34 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) flock(r0, 0xc) accept$unix(r0, &(0x7f0000000080), &(0x7f0000000000)=0x6e) 21:25:34 executing program 1: r0 = socket(0x10, 0x80000, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x400000, 0x0) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f0000000080)={0x0, 0x1, @stop_pts=0x8}) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video2\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 340.249884] hfsplus: unable to find HFS+ superblock 21:25:34 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x40000000, 0x0, 0x0, 0x0, 0x0) [ 340.321366] FAULT_INJECTION: forcing a failure. [ 340.321366] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 340.360545] CPU: 0 PID: 14500 Comm: syz-executor.5 Not tainted 4.19.38 #6 [ 340.367556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 340.376935] Call Trace: [ 340.379566] dump_stack+0x172/0x1f0 [ 340.383233] should_fail.cold+0xa/0x1b [ 340.387156] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 340.392291] ? ___might_sleep+0x163/0x280 [ 340.396469] ? __might_sleep+0x95/0x190 [ 340.400532] __alloc_pages_nodemask+0x1ee/0x760 [ 340.405232] ? __alloc_pages_slowpath+0x2870/0x2870 [ 340.410271] ? ___might_sleep+0x163/0x280 [ 340.410293] ? copyin+0xb5/0x100 [ 340.410317] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 340.417937] alloc_pages_current+0x107/0x210 [ 340.417959] pipe_write+0xa65/0xfb0 [ 340.417985] __vfs_write+0x58e/0x820 [ 340.436003] ? kernel_read+0x120/0x120 [ 340.439914] ? __inode_security_revalidate+0xda/0x120 [ 340.440191] hfsplus: unable to find HFS+ superblock [ 340.445121] ? selinux_file_permission+0x92/0x550 [ 340.445147] ? security_file_permission+0x8f/0x230 [ 340.445163] ? rw_verify_area+0x118/0x360 [ 340.445178] vfs_write+0x20c/0x560 [ 340.445196] ksys_write+0xea/0x1f0 [ 340.459990] ? __ia32_sys_read+0xb0/0xb0 [ 340.460010] ? do_syscall_64+0x26/0x610 [ 340.460028] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 340.460041] ? do_syscall_64+0x26/0x610 [ 340.460059] __x64_sys_write+0x73/0xb0 [ 340.467745] do_syscall_64+0x103/0x610 [ 340.467764] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 340.467777] RIP: 0033:0x458da9 21:25:34 executing program 1: r0 = socket(0x10, 0x80803, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3, 0x812, r0, 0x0) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000180)={{&(0x7f0000000080)=""/227, 0xe3}, &(0x7f0000000000), 0x59}, 0x20) recvfrom$ax25(r0, &(0x7f00000001c0), 0x0, 0x10000, &(0x7f0000000200)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48) write(r0, &(0x7f0000000040)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0xffffffffffffff98) fcntl$dupfd(r0, 0x406, r0) 21:25:34 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0xd77e8e0d2058ed3c, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000080)={r1, 0x3}) bind$llc(r0, &(0x7f00000000c0)={0x1a, 0x31d, 0x9, 0x1, 0x9, 0x48a057b7, @random="ab44ebdcb8e7"}, 0x10) flock(r0, 0x0) 21:25:34 executing program 5 (fault-call:8 fault-nth:27): mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) [ 340.467793] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 340.467802] RSP: 002b:00007fcc0a7a9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 340.467818] RAX: ffffffffffffffda RBX: 00007fcc0a7a9c90 RCX: 0000000000458da9 [ 340.467827] RDX: 0000000020000020 RSI: 0000000020000000 RDI: 0000000000000004 [ 340.467834] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 340.467841] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc0a7aa6d4 [ 340.467847] R13: 00000000004c80fe R14: 00000000004de4f8 R15: 0000000000000006 [ 340.586850] hfsplus: unable to find HFS+ superblock [ 340.627750] audit: type=1400 audit(1556832334.569:120): avc: denied { map } for pid=14524 comm="syz-executor.1" path="socket:[45234]" dev="sockfs" ino=45234 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_route_socket permissive=1 [ 340.798742] FAULT_INJECTION: forcing a failure. [ 340.798742] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 340.834823] CPU: 1 PID: 14527 Comm: syz-executor.5 Not tainted 4.19.38 #6 [ 340.841818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 340.851196] Call Trace: [ 340.853838] dump_stack+0x172/0x1f0 [ 340.857521] should_fail.cold+0xa/0x1b [ 340.861440] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 340.866600] ? ___might_sleep+0x163/0x280 [ 340.870777] ? __might_sleep+0x95/0x190 [ 340.874780] __alloc_pages_nodemask+0x1ee/0x760 [ 340.879500] ? __alloc_pages_slowpath+0x2870/0x2870 [ 340.884543] ? ___might_sleep+0x163/0x280 [ 340.888716] ? copyin+0xb5/0x100 [ 340.892125] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 340.897691] alloc_pages_current+0x107/0x210 [ 340.902139] pipe_write+0xa65/0xfb0 [ 340.905804] __vfs_write+0x58e/0x820 [ 340.909543] ? kernel_read+0x120/0x120 [ 340.913487] ? __inode_security_revalidate+0xda/0x120 [ 340.918790] ? selinux_file_permission+0x92/0x550 [ 340.923698] ? security_file_permission+0x8f/0x230 [ 340.928655] ? rw_verify_area+0x118/0x360 [ 340.932831] vfs_write+0x20c/0x560 [ 340.936396] ksys_write+0xea/0x1f0 [ 340.939958] ? __ia32_sys_read+0xb0/0xb0 [ 340.944051] ? do_syscall_64+0x26/0x610 [ 340.948046] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 340.953433] ? do_syscall_64+0x26/0x610 [ 340.957481] __x64_sys_write+0x73/0xb0 [ 340.961394] do_syscall_64+0x103/0x610 [ 340.965310] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 340.970517] RIP: 0033:0x458da9 [ 340.973729] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 340.992650] RSP: 002b:00007fcc0a7a9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 341.000380] RAX: ffffffffffffffda RBX: 00007fcc0a7a9c90 RCX: 0000000000458da9 [ 341.007666] RDX: 0000000020000020 RSI: 0000000020000000 RDI: 0000000000000004 [ 341.014953] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 341.022389] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc0a7aa6d4 [ 341.029677] R13: 00000000004c80fe R14: 00000000004de4f8 R15: 0000000000000006 21:25:35 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x42440000, 0x0, 0x0, 0x0, 0x0) 21:25:35 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x40880, 0x0) flock(r0, 0x0) 21:25:35 executing program 1: prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffa000/0x3000)=nil) r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:25:35 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:25:35 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000012, 0x0) 21:25:35 executing program 5 (fault-call:8 fault-nth:28): mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) [ 341.242762] audit: type=1800 audit(1556832335.199:121): pid=14522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=17673 res=0 21:25:35 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x10000, 0x0) flock(r0, 0xd) 21:25:35 executing program 1: r0 = socket(0x10, 0x80803, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, [], [{0x8, 0x9, 0x7fff, 0x8, 0x3, 0x7}, {0xebd4, 0xe8, 0x7fff, 0x0, 0x7, 0xe79e}], [[], []]}) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 341.373564] hfsplus: unable to find HFS+ superblock [ 341.446518] hfsplus: unable to find HFS+ superblock [ 341.487923] FAULT_INJECTION: forcing a failure. [ 341.487923] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 341.525299] CPU: 0 PID: 14542 Comm: syz-executor.5 Not tainted 4.19.38 #6 [ 341.532315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 341.541689] Call Trace: [ 341.544304] dump_stack+0x172/0x1f0 [ 341.547963] should_fail.cold+0xa/0x1b [ 341.551885] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 341.557013] ? ___might_sleep+0x163/0x280 [ 341.561189] ? __might_sleep+0x95/0x190 [ 341.565190] __alloc_pages_nodemask+0x1ee/0x760 [ 341.569879] ? __alloc_pages_slowpath+0x2870/0x2870 [ 341.574920] ? ___might_sleep+0x163/0x280 [ 341.579184] ? copyin+0xb5/0x100 [ 341.582588] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 21:25:35 executing program 1: r0 = socket(0x19, 0x7, 0x80000001) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000080)) [ 341.588150] alloc_pages_current+0x107/0x210 [ 341.592583] pipe_write+0xa65/0xfb0 [ 341.596244] __vfs_write+0x58e/0x820 [ 341.600108] ? kernel_read+0x120/0x120 [ 341.604019] ? __inode_security_revalidate+0xda/0x120 [ 341.609236] ? selinux_file_permission+0x92/0x550 [ 341.614109] ? security_file_permission+0x8f/0x230 [ 341.619096] ? rw_verify_area+0x118/0x360 [ 341.623269] vfs_write+0x20c/0x560 [ 341.626839] ksys_write+0xea/0x1f0 [ 341.630445] ? __ia32_sys_read+0xb0/0xb0 [ 341.634532] ? do_syscall_64+0x26/0x610 [ 341.638545] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 341.643924] ? do_syscall_64+0x26/0x610 [ 341.643946] __x64_sys_write+0x73/0xb0 [ 341.643964] do_syscall_64+0x103/0x610 [ 341.643987] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 341.651842] RIP: 0033:0x458da9 [ 341.651858] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 21:25:35 executing program 5 (fault-call:8 fault-nth:29): mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:25:35 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) getresuid(&(0x7f0000000040)=0x0, &(0x7f0000000080), &(0x7f00000000c0)) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r1, r2) 21:25:35 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) flock(r0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x1ff) 21:25:35 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x48000000, 0x0, 0x0, 0x0, 0x0) [ 341.651867] RSP: 002b:00007fcc0a7a9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 341.651882] RAX: ffffffffffffffda RBX: 00007fcc0a7a9c90 RCX: 0000000000458da9 [ 341.651894] RDX: 0000000020000020 RSI: 0000000020000000 RDI: 0000000000000004 [ 341.660985] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 341.660994] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc0a7aa6d4 [ 341.661003] R13: 00000000004c80fe R14: 00000000004de4f8 R15: 0000000000000006 21:25:35 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0xa0001, 0x0) flock(r0, 0x1) r1 = dup(r0) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f00000001c0)="2434d50e40ab056595a909c034662d1fd5bcbf597e0f22bdcdd7f1ae3414af150ac14826f6a554c56fd6fdd415d88d1ebc23d5f4e10c3a3a") listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=""/248, 0xf8) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000040)) [ 341.770471] hfsplus: unable to find HFS+ superblock 21:25:35 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) r1 = semget$private(0x0, 0x0, 0x1) semctl$IPC_RMID(r1, 0x0, 0x0) [ 341.841642] hfsplus: unable to find HFS+ superblock [ 341.905558] FAULT_INJECTION: forcing a failure. [ 341.905558] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 341.921621] CPU: 0 PID: 14570 Comm: syz-executor.5 Not tainted 4.19.38 #6 [ 341.928588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 341.937956] Call Trace: [ 341.940569] dump_stack+0x172/0x1f0 [ 341.944226] should_fail.cold+0xa/0x1b [ 341.948147] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 341.953273] ? ___might_sleep+0x163/0x280 [ 341.957455] ? __might_sleep+0x95/0x190 [ 341.961461] __alloc_pages_nodemask+0x1ee/0x760 [ 341.966157] ? __alloc_pages_slowpath+0x2870/0x2870 [ 341.971209] ? ___might_sleep+0x163/0x280 [ 341.975413] ? copyin+0xb5/0x100 [ 341.978811] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 341.984723] alloc_pages_current+0x107/0x210 [ 341.989159] pipe_write+0xa65/0xfb0 [ 341.992824] __vfs_write+0x58e/0x820 [ 341.996562] ? kernel_read+0x120/0x120 [ 342.000481] ? __inode_security_revalidate+0xda/0x120 [ 342.005695] ? selinux_file_permission+0x92/0x550 [ 342.010570] ? security_file_permission+0x8f/0x230 [ 342.015541] ? rw_verify_area+0x118/0x360 [ 342.019714] vfs_write+0x20c/0x560 [ 342.023282] ksys_write+0xea/0x1f0 [ 342.026862] ? __ia32_sys_read+0xb0/0xb0 [ 342.030948] ? do_syscall_64+0x26/0x610 [ 342.034942] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 342.040323] ? do_syscall_64+0x26/0x610 [ 342.044322] __x64_sys_write+0x73/0xb0 [ 342.048232] do_syscall_64+0x103/0x610 [ 342.052163] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 342.057370] RIP: 0033:0x458da9 [ 342.060615] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 342.079626] RSP: 002b:00007fcc0a7a9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 342.087360] RAX: ffffffffffffffda RBX: 00007fcc0a7a9c90 RCX: 0000000000458da9 [ 342.094669] RDX: 0000000020000020 RSI: 0000000020000000 RDI: 0000000000000004 [ 342.101957] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 342.109244] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc0a7aa6d4 [ 342.116537] R13: 00000000004c80fe R14: 00000000004de4f8 R15: 0000000000000006 21:25:36 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:25:36 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000013, 0x0) 21:25:36 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) flock(r0, 0x0) accept4$rose(r0, 0x0, &(0x7f0000000080), 0x80800) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) 21:25:36 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f0000000080)={0x200}) 21:25:36 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x482b0000, 0x0, 0x0, 0x0, 0x0) 21:25:36 executing program 5 (fault-call:8 fault-nth:30): mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:25:36 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) readahead(r0, 0x1, 0x6) r1 = socket(0x10, 0x80803, 0x0) write(r1, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 342.533450] hfsplus: unable to find HFS+ superblock 21:25:36 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0xa0106, 0x0) flock(r0, 0x0) [ 342.609900] FAULT_INJECTION: forcing a failure. [ 342.609900] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 342.630824] hfsplus: unable to find HFS+ superblock [ 342.645052] CPU: 1 PID: 14588 Comm: syz-executor.5 Not tainted 4.19.38 #6 [ 342.652032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 342.661750] Call Trace: [ 342.664400] dump_stack+0x172/0x1f0 [ 342.668065] should_fail.cold+0xa/0x1b [ 342.671983] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 342.677109] ? ___might_sleep+0x163/0x280 [ 342.681285] ? __might_sleep+0x95/0x190 [ 342.685285] __alloc_pages_nodemask+0x1ee/0x760 [ 342.689990] ? __alloc_pages_slowpath+0x2870/0x2870 [ 342.695026] ? ___might_sleep+0x163/0x280 [ 342.699214] ? copyin+0xb5/0x100 [ 342.702641] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 342.708206] alloc_pages_current+0x107/0x210 [ 342.712654] pipe_write+0xa65/0xfb0 [ 342.716313] __vfs_write+0x58e/0x820 [ 342.720072] ? kernel_read+0x120/0x120 [ 342.723989] ? __inode_security_revalidate+0xda/0x120 [ 342.729197] ? selinux_file_permission+0x92/0x550 [ 342.734072] ? security_file_permission+0x8f/0x230 [ 342.739056] ? rw_verify_area+0x118/0x360 [ 342.743225] vfs_write+0x20c/0x560 [ 342.746975] ksys_write+0xea/0x1f0 [ 342.750531] ? __ia32_sys_read+0xb0/0xb0 [ 342.754613] ? do_syscall_64+0x26/0x610 [ 342.758605] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 342.764071] ? do_syscall_64+0x26/0x610 [ 342.768084] __x64_sys_write+0x73/0xb0 [ 342.771994] do_syscall_64+0x103/0x610 [ 342.775908] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 342.781114] RIP: 0033:0x458da9 [ 342.784327] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 21:25:36 executing program 1: r0 = socket(0x10, 0x80803, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='rdma.current\x00', 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @multicast2}, 0xfffffffffffffe01) ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f0000000080)={0x3, 0x800, 0x2}) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 342.803383] RSP: 002b:00007fcc0a7a9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 342.811119] RAX: ffffffffffffffda RBX: 00007fcc0a7a9c90 RCX: 0000000000458da9 [ 342.818410] RDX: 0000000020000020 RSI: 0000000020000000 RDI: 0000000000000004 [ 342.825696] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 342.832985] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc0a7aa6d4 [ 342.840267] R13: 00000000004c80fe R14: 00000000004de4f8 R15: 0000000000000006 21:25:36 executing program 5 (fault-call:8 fault-nth:31): mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:25:36 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x48580000, 0x0, 0x0, 0x0, 0x0) 21:25:36 executing program 2: socket$inet6(0xa, 0x0, 0x1) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x8000, 0x1, 0x1, 0xffffffffffffffff}) fdatasync(r0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000080)=0x5) flock(r1, 0x0) [ 342.974282] hfsplus: unable to find HFS+ superblock [ 343.038089] hfsplus: unable to find HFS+ superblock 21:25:37 executing program 4: mknod(0x0, 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) [ 343.061153] FAULT_INJECTION: forcing a failure. [ 343.061153] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 343.103303] CPU: 1 PID: 14613 Comm: syz-executor.5 Not tainted 4.19.38 #6 [ 343.110357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 343.119831] Call Trace: [ 343.122470] dump_stack+0x172/0x1f0 [ 343.126132] should_fail.cold+0xa/0x1b [ 343.130044] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 343.135188] ? ___might_sleep+0x163/0x280 [ 343.139383] ? __might_sleep+0x95/0x190 [ 343.143388] __alloc_pages_nodemask+0x1ee/0x760 [ 343.148082] ? __alloc_pages_slowpath+0x2870/0x2870 [ 343.153123] ? ___might_sleep+0x163/0x280 [ 343.157296] ? copyin+0xb5/0x100 [ 343.160719] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 343.166285] alloc_pages_current+0x107/0x210 [ 343.170745] pipe_write+0xa65/0xfb0 [ 343.174430] __vfs_write+0x58e/0x820 [ 343.178170] ? kernel_read+0x120/0x120 [ 343.182082] ? __inode_security_revalidate+0xda/0x120 [ 343.187302] ? selinux_file_permission+0x92/0x550 [ 343.192206] ? security_file_permission+0x8f/0x230 [ 343.200753] ? rw_verify_area+0x118/0x360 [ 343.204927] vfs_write+0x20c/0x560 [ 343.208498] ksys_write+0xea/0x1f0 [ 343.212069] ? __ia32_sys_read+0xb0/0xb0 [ 343.216159] ? do_syscall_64+0x26/0x610 [ 343.220155] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 343.225544] ? do_syscall_64+0x26/0x610 [ 343.229543] __x64_sys_write+0x73/0xb0 [ 343.233458] do_syscall_64+0x103/0x610 [ 343.237551] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 343.242759] RIP: 0033:0x458da9 [ 343.245971] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 343.265812] RSP: 002b:00007fcc0a7a9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 343.273550] RAX: ffffffffffffffda RBX: 00007fcc0a7a9c90 RCX: 0000000000458da9 [ 343.280843] RDX: 0000000020000020 RSI: 0000000020000000 RDI: 0000000000000004 [ 343.288133] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 343.295441] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc0a7aa6d4 [ 343.302737] R13: 00000000004c80fe R14: 00000000004de4f8 R15: 0000000000000006 21:25:37 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000014, 0x0) 21:25:37 executing program 1: r0 = socket(0x10, 0x80803, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000001080)='/dev/snd/pcmC#D#p\x00', 0x7ff, 0x1) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f00000010c0)) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) r2 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x3, 0x2) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000080)=""/4096) 21:25:37 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x40902, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) socket$pppoe(0x18, 0x1, 0x0) flock(r0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x4, 0x121400) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000100)={0xfff, 0x69, 0x8, 0x72a3, 0xff, 0xf009}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000080)={0x200, 0x0, 0x1, 0x8}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f00000000c0)={r2, 0x8e54}) 21:25:37 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x4c000000, 0x0, 0x0, 0x0, 0x0) 21:25:37 executing program 5 (fault-call:8 fault-nth:32): mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) [ 343.621250] audit: type=1800 audit(1556832337.579:122): pid=14614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16801 res=0 [ 343.674477] hfsplus: unable to find HFS+ superblock 21:25:37 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0xe}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f0000000200)={0x9, 0x108, 0xfa00, {r3, 0x54, "62f52a", "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"}}, 0x110) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x9) bind$ax25(r2, &(0x7f00000000c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r4 = dup3(r0, r0, 0x80000) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000040)={0x100, @time, 0xe0000000, {0x100000001, 0x4}, 0x42, 0x0, 0x81}) 21:25:37 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) flock(r0, 0x0) mq_notify(r0, &(0x7f0000000000)={0x0, 0x15, 0x3, @thr={&(0x7f0000000080)="49997033e770b9818f944c0e8ec2d8c40ce51644319cd67dc1fd84eb0b1d9ffb66d6aed206eabe4678bbf979d559aff991cff6294bbbbed2418d09a8a53d914ebfae1e9e775d6b5cc1", &(0x7f0000000100)="e74c63744657e85f01856ed2c5434cac85642c7f1533824dadb2ae0cbf49f80f9c5e597ef7fd54ec60987c1ec542d3d153bc1841c3987a36c06c0bf79cee0af7fd7a9d71337df4d6ed8a8f18827e39cb55232ee904acf79b59105bd4219cc6ebdb315bd5f23a7fd82c3abb74619e62f6ddc3ebff5fa208be7979a43499f8632d32f7b42b40b29a38cdbdc20f167947a44ce8398a1abbf0"}}) [ 343.760304] hfsplus: unable to find HFS+ superblock 21:25:37 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000180)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1040830}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x26, 0x300, 0x70bd2a, 0x25dfdbfd, {0x15}, [@typed={0x8, 0x96, @u32=0x6}, @typed={0x8, 0x75, @pid=r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 21:25:37 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x4d500000, 0x0, 0x0, 0x0, 0x0) [ 343.796404] FAULT_INJECTION: forcing a failure. [ 343.796404] name fail_page_alloc, interval 1, probability 0, space 0, times 0 21:25:37 executing program 1: write(0xffffffffffffffff, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 343.873737] CPU: 0 PID: 14635 Comm: syz-executor.5 Not tainted 4.19.38 #6 [ 343.880742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 343.890114] Call Trace: [ 343.892730] dump_stack+0x172/0x1f0 [ 343.896384] should_fail.cold+0xa/0x1b [ 343.900334] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 343.905463] ? ___might_sleep+0x163/0x280 [ 343.909646] ? __might_sleep+0x95/0x190 [ 343.913643] __alloc_pages_nodemask+0x1ee/0x760 [ 343.913668] ? __alloc_pages_slowpath+0x2870/0x2870 21:25:37 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x47ffe) r1 = socket(0x10, 0x80803, 0x0) write(r1, &(0x7f00000000c0)="1b00000018000700f677b8ed865ef600611586906602d12fd1650e5d3c330b", 0xfffffffffffffff9) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000500)={0x4f84, 0x4, 0xc000000000, 0x3, 0x3ff, 0x800}) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f00000004c0)={0x1}) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80040000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x2fc}}, 0x850) [ 343.923367] ? ___might_sleep+0x163/0x280 [ 343.927539] ? copyin+0xb5/0x100 [ 343.927562] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 343.936472] alloc_pages_current+0x107/0x210 [ 343.940901] pipe_write+0xa65/0xfb0 [ 343.944556] __vfs_write+0x58e/0x820 [ 343.948308] ? kernel_read+0x120/0x120 [ 343.952213] ? __inode_security_revalidate+0xda/0x120 [ 343.957441] ? selinux_file_permission+0x92/0x550 [ 343.962336] ? security_file_permission+0x8f/0x230 [ 343.967373] ? rw_verify_area+0x118/0x360 [ 343.971530] vfs_write+0x20c/0x560 [ 343.971548] ksys_write+0xea/0x1f0 [ 343.971563] ? __ia32_sys_read+0xb0/0xb0 [ 343.982714] ? do_syscall_64+0x26/0x610 [ 343.986707] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 343.992085] ? do_syscall_64+0x26/0x610 [ 343.996081] __x64_sys_write+0x73/0xb0 [ 343.999987] do_syscall_64+0x103/0x610 [ 344.003900] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 344.009102] RIP: 0033:0x458da9 [ 344.012334] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 344.031357] RSP: 002b:00007fcc0a7a9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 344.031374] RAX: ffffffffffffffda RBX: 00007fcc0a7a9c90 RCX: 0000000000458da9 [ 344.031380] RDX: 0000000020000020 RSI: 0000000020000000 RDI: 0000000000000004 [ 344.031388] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 344.031395] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc0a7aa6d4 21:25:38 executing program 4: mknod(0x0, 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) [ 344.031408] R13: 00000000004c80fe R14: 00000000004de4f8 R15: 0000000000000006 [ 344.128435] hfsplus: unable to find HFS+ superblock [ 344.184512] hfsplus: unable to find HFS+ superblock 21:25:38 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000015, 0x0) 21:25:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)=0x1, 0x4) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x40000, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r1, 0x0, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r2) socket$packet(0x11, 0x3, 0x300) ioctl$KVM_SET_BOOT_CPU_ID(r0, 0xae78, &(0x7f0000000000)=0x2) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000600000000ff0f0000000000000180000000000000ff010000000000000400000000000000"]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140), 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000180)={0x83c49fe, 0x0, 0x8000}, 0x4) socket(0x10, 0x80803, 0x0) 21:25:38 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x400000, 0x0) ioctl$SIOCX25GFACILITIES(r0, 0x89e2, &(0x7f0000000000)) flock(r0, 0x0) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000140)="86fb43a272edcfce2e3d3bd6f19ced98fb5901e3aabeb88aaba2b31224f80e13528b1d5bbfaa86b086e44c658f111a2e0d32d49d71ce6bde1c9ce14b21f4a249bffd66f959db17f933e1661014357f47a3255fa4121bd46ba68a5e95fb3399f4b345df55642b", 0x66, 0xfffffffffffffffa) r2 = add_key$keyring(&(0x7f0000001340)='keyring\x00', &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)="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", 0x1000, r2) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000000c0)={r1, 0xfffffffffffffffb, 0x400}, &(0x7f00000001c0)={'enc=', 'raw', ' hash=', {'wp384-generic\x00'}}, &(0x7f0000000240)="57267be50ae13cccb07f060bde5185df280663", &(0x7f0000000280)=""/17) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f00000013c0)={0x800, 0xc66}) 21:25:38 executing program 5 (fault-call:8 fault-nth:33): mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:25:38 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x53540000, 0x0, 0x0, 0x0, 0x0) [ 344.644189] audit: type=1800 audit(1556832338.599:123): pid=14663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16817 res=0 [ 344.725194] hfsplus: unable to find HFS+ superblock 21:25:38 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) flock(r0, 0x0) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000080)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e24, @local}, 0x8, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x7, 0xfe}) [ 344.810121] hfsplus: unable to find HFS+ superblock [ 344.820356] FAULT_INJECTION: forcing a failure. [ 344.820356] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 344.851840] CPU: 0 PID: 14674 Comm: syz-executor.5 Not tainted 4.19.38 #6 [ 344.858839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 344.868242] Call Trace: [ 344.870864] dump_stack+0x172/0x1f0 [ 344.874520] should_fail.cold+0xa/0x1b [ 344.878444] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 344.883575] ? ___might_sleep+0x163/0x280 [ 344.887752] ? __might_sleep+0x95/0x190 [ 344.891750] __alloc_pages_nodemask+0x1ee/0x760 [ 344.896443] ? __alloc_pages_slowpath+0x2870/0x2870 [ 344.901474] ? ___might_sleep+0x163/0x280 [ 344.905645] ? copyin+0xb5/0x100 [ 344.909039] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 344.914600] alloc_pages_current+0x107/0x210 [ 344.919030] pipe_write+0xa65/0xfb0 [ 344.922687] __vfs_write+0x58e/0x820 [ 344.926418] ? kernel_read+0x120/0x120 [ 344.930415] ? __inode_security_revalidate+0xda/0x120 [ 344.935631] ? selinux_file_permission+0x92/0x550 [ 344.940500] ? security_file_permission+0x8f/0x230 [ 344.945447] ? rw_verify_area+0x118/0x360 [ 344.949614] vfs_write+0x20c/0x560 [ 344.953213] ksys_write+0xea/0x1f0 [ 344.956770] ? __ia32_sys_read+0xb0/0xb0 [ 344.960970] ? do_syscall_64+0x26/0x610 [ 344.964992] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 344.970371] ? do_syscall_64+0x26/0x610 [ 344.974364] __x64_sys_write+0x73/0xb0 [ 344.978275] do_syscall_64+0x103/0x610 [ 344.982178] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 344.987409] RIP: 0033:0x458da9 [ 344.990620] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 345.009535] RSP: 002b:00007fcc0a7a9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 345.017265] RAX: ffffffffffffffda RBX: 00007fcc0a7a9c90 RCX: 0000000000458da9 [ 345.024545] RDX: 0000000020000020 RSI: 0000000020000000 RDI: 0000000000000004 [ 345.031827] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 345.039124] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc0a7aa6d4 21:25:39 executing program 2: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) [ 345.046414] R13: 00000000004c80fe R14: 00000000004de4f8 R15: 0000000000000006 21:25:39 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x60000000, 0x0, 0x0, 0x0, 0x0) 21:25:39 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0xa0103, 0x0) flock(r0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r0, 0xc0385650, &(0x7f0000000080)={{0x1, @addr=0x7}, 0x124, 0x7fffffff, 0xfff}) 21:25:39 executing program 4: mknod(0x0, 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:25:39 executing program 5 (fault-call:8 fault-nth:34): mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:25:39 executing program 1: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r0, 0x0, 0x70bd27, 0x25dfdbfc, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x7, 0x3, 0x1, 0x9}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x11}, 0x4040) prctl$PR_GET_KEEPCAPS(0x7) write(0xffffffffffffffff, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = creat(&(0x7f0000000200)='./file0\x00', 0x5) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f00000006c0)={{0x40, 0x9}, 0x1, 0x8000, 0x80000000, {0x1ff, 0x8}, 0x8, 0x7}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000380)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x30000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000026bd7000fddbdf2501000000140004000500000003f10000ff7f0000fcffefff08000800ff0300000c0004003f00000000000000080002000700000008000300b91b0000080006000000000008000500040000000800020006000000"], 0x64}, 0x1, 0x0, 0x0, 0x4804}, 0x4004) getsockopt$inet_dccp_int(r3, 0x21, 0xa, &(0x7f0000000240), &(0x7f0000000740)=0x4) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="100825bd7000fbdbdf25140000002c000200080001000800000008000100c2000000082747ec6033192900189e6647ff7f040004000400040008000100018000002800020008000100ffffffff04000400080001000101000004000400040004000800020002000000"], 0x68}, 0x1, 0x0, 0x0, 0x88c0}, 0x4000) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x84, r1, 0x20, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffffffffe01}]}, @TIPC_NLA_BEARER={0x40, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4048080}, 0x0) [ 345.210572] hfsplus: unable to find HFS+ superblock [ 345.287469] hfsplus: unable to find HFS+ superblock [ 345.351307] FAULT_INJECTION: forcing a failure. [ 345.351307] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 345.391650] CPU: 0 PID: 14700 Comm: syz-executor.5 Not tainted 4.19.38 #6 [ 345.398654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 345.408027] Call Trace: [ 345.410643] dump_stack+0x172/0x1f0 [ 345.414301] should_fail.cold+0xa/0x1b [ 345.418248] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 345.423376] ? ___might_sleep+0x163/0x280 [ 345.427639] ? __might_sleep+0x95/0x190 [ 345.431643] __alloc_pages_nodemask+0x1ee/0x760 [ 345.436338] ? __alloc_pages_slowpath+0x2870/0x2870 [ 345.441470] ? ___might_sleep+0x163/0x280 [ 345.445646] ? copyin+0xb5/0x100 [ 345.449040] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 345.454605] alloc_pages_current+0x107/0x210 [ 345.459043] pipe_write+0xa65/0xfb0 [ 345.462702] __vfs_write+0x58e/0x820 [ 345.466444] ? kernel_read+0x120/0x120 [ 345.470358] ? __inode_security_revalidate+0xda/0x120 [ 345.475571] ? selinux_file_permission+0x92/0x550 [ 345.480439] ? security_file_permission+0x8f/0x230 [ 345.485390] ? rw_verify_area+0x118/0x360 [ 345.489557] vfs_write+0x20c/0x560 [ 345.493127] ksys_write+0xea/0x1f0 [ 345.496708] ? __ia32_sys_read+0xb0/0xb0 [ 345.500788] ? do_syscall_64+0x26/0x610 [ 345.504780] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 345.510185] ? do_syscall_64+0x26/0x610 [ 345.514216] __x64_sys_write+0x73/0xb0 [ 345.518124] do_syscall_64+0x103/0x610 [ 345.522059] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 345.527265] RIP: 0033:0x458da9 [ 345.530473] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 345.549565] RSP: 002b:00007fcc0a7a9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 345.557301] RAX: ffffffffffffffda RBX: 00007fcc0a7a9c90 RCX: 0000000000458da9 [ 345.564585] RDX: 0000000020000020 RSI: 0000000020000000 RDI: 0000000000000004 [ 345.571868] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 345.579175] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc0a7aa6d4 [ 345.586474] R13: 00000000004c80fe R14: 00000000004de4f8 R15: 0000000000000006 21:25:39 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000016, 0x0) 21:25:39 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) flock(r0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000280)={0x0, 0x51, "9a91750fbd89c79d51db0b141b2ef99f5424326391c427f7f3f75b462b9548d13f23fb1d7551f120bef8bc836f7ac75c5cfb613274144f77e9f7f1b5bd30a4e8441a73ae091620a7b871cc69b2711139bc"}, &(0x7f0000000300)=0x59) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000340)={r2, 0x3f}, &(0x7f0000000380)=0x8) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1100008}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x110, r1, 0x100, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffffffffff9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_BEARER={0x38, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'syz_tun\x00'}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_to_team\x00'}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'sit0\x00'}}]}, @TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x454d}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800000000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe0fb}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x15}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x200000c0}, 0x20000800) socket$pptp(0x18, 0x1, 0x2) 21:25:39 executing program 1: r0 = socket(0xf, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:25:39 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x68000000, 0x0, 0x0, 0x0, 0x0) 21:25:39 executing program 5 (fault-call:8 fault-nth:35): mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) [ 345.864809] audit: type=1800 audit(1556832339.819:124): pid=14688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=17041 res=0 21:25:39 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x100, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x800) flock(r0, 0x0) [ 345.939491] hfsplus: unable to find HFS+ superblock 21:25:39 executing program 1: r0 = accept(0xffffffffffffff9c, &(0x7f0000000040)=@rc, &(0x7f00000000c0)=0x27) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x400, 0x70bd25, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r2 = socket(0x10, 0x80803, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/mls\x00', 0x0, 0x0) write$UHID_DESTROY(r3, &(0x7f0000000280), 0x4) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, &(0x7f0000000140)) write(r2, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0xc83862d3) 21:25:40 executing program 4: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(0x0, 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) [ 346.030859] hfsplus: unable to find HFS+ superblock [ 346.040388] FAULT_INJECTION: forcing a failure. [ 346.040388] name fail_page_alloc, interval 1, probability 0, space 0, times 0 21:25:40 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x3f, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0x4020565a, &(0x7f00000000c0)={0x0, 0x0, "edb860ab89b89289f837aabf75788fd65689afd843667f6dd6220074445f6012"}) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) flock(r1, 0x0) 21:25:40 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000080)="1b00000018000700f67738ed8641a1c10aab80ff0000078b0002362ef511b78cc77deada48a94d01d7128b141562828c1a1424bb6943dc2fadd28ec0d707e7681c0640a43c33a6ac053ea1fdec248ebb78d2fd7f3c1baa34acb6c213479f5031a5d03b162e8cd335311c9d4a588662ee42e4d88ae808ae2286c69c7f8e2e0eeb5db8807417171037b683090ea1b4f1194d64814c718e4d799f", 0x1c8) 21:25:40 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x6b6b6b00, 0x0, 0x0, 0x0, 0x0) [ 346.125060] audit: type=1804 audit(1556832340.079:125): pid=14726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir015708984/syzkaller.GbgsAS/352/file0" dev="sda1" ino=16849 res=1 [ 346.185288] CPU: 1 PID: 14712 Comm: syz-executor.5 Not tainted 4.19.38 #6 [ 346.192270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 346.201635] Call Trace: [ 346.204239] dump_stack+0x172/0x1f0 [ 346.207895] should_fail.cold+0xa/0x1b [ 346.211801] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 346.216917] ? ___might_sleep+0x163/0x280 [ 346.221078] ? __might_sleep+0x95/0x190 [ 346.225070] __alloc_pages_nodemask+0x1ee/0x760 [ 346.229757] ? __alloc_pages_slowpath+0x2870/0x2870 [ 346.234784] ? ___might_sleep+0x163/0x280 [ 346.238946] ? copyin+0xb5/0x100 [ 346.242329] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 346.247897] alloc_pages_current+0x107/0x210 [ 346.252316] pipe_write+0xa65/0xfb0 [ 346.255969] __vfs_write+0x58e/0x820 [ 346.259695] ? kernel_read+0x120/0x120 [ 346.263595] ? __inode_security_revalidate+0xda/0x120 [ 346.268805] ? selinux_file_permission+0x92/0x550 [ 346.273661] ? security_file_permission+0x8f/0x230 [ 346.273678] ? rw_verify_area+0x118/0x360 [ 346.273693] vfs_write+0x20c/0x560 [ 346.286288] ksys_write+0xea/0x1f0 [ 346.289836] ? __ia32_sys_read+0xb0/0xb0 [ 346.293905] ? do_syscall_64+0x26/0x610 [ 346.297888] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 346.303263] ? do_syscall_64+0x26/0x610 [ 346.307247] __x64_sys_write+0x73/0xb0 [ 346.307265] do_syscall_64+0x103/0x610 [ 346.307285] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 346.320208] RIP: 0033:0x458da9 21:25:40 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000)=0x1, 0x4) flock(r0, 0x0) [ 346.323406] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 346.342311] RSP: 002b:00007fcc0a7a9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 346.350026] RAX: ffffffffffffffda RBX: 00007fcc0a7a9c90 RCX: 0000000000458da9 [ 346.357308] RDX: 0000000020000020 RSI: 0000000020000000 RDI: 0000000000000004 [ 346.364580] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 346.371984] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc0a7aa6d4 [ 346.379260] R13: 00000000004c80fe R14: 00000000004de4f8 R15: 0000000000000006 [ 346.419384] hfsplus: unable to find HFS+ superblock [ 346.482386] hfsplus: unable to find HFS+ superblock [ 346.765123] audit: type=1804 audit(1556832340.719:126): pid=14736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir015708984/syzkaller.GbgsAS/352/file0" dev="sda1" ino=16849 res=1 21:25:41 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000017, 0x0) 21:25:41 executing program 1: r0 = socket(0x10, 0x80803, 0x0) ioctl$SIOCNRDECOBS(r0, 0x89e2) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:25:41 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) getpgrp(0xffffffffffffffff) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) getpid() fcntl$getown(r0, 0x9) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)=0x0) gettid() r2 = getpgid(r1) r3 = getpgrp(r2) fcntl$setown(r0, 0x8, r3) flock(r0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 21:25:41 executing program 5 (fault-call:8 fault-nth:36): mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:25:41 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x6c000000, 0x0, 0x0, 0x0, 0x0) 21:25:41 executing program 4: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(0x0, 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) [ 347.069180] audit: type=1800 audit(1556832341.029:127): pid=14743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16993 res=0 [ 347.154298] audit: type=1804 audit(1556832341.109:128): pid=14752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir015708984/syzkaller.GbgsAS/353/file0" dev="sda1" ino=16994 res=1 21:25:41 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x101000, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000040)={0x10, 0x100000000, {0x57, 0x100, 0x401, {0x8fcf, 0x5}, {0xb5d, 0x2}, @rumble={0x3, 0x80}}, {0x57, 0x1f, 0x5, {0x6f149813, 0x1}, {0x80000000, 0x2b94}, @period={0x5b, 0x3, 0x800, 0x9, 0x3e, {0x4, 0x100000000, 0x6, 0x8}, 0x1, &(0x7f0000000000)=[0x200]}}}) flock(r0, 0x4) flock(r0, 0x0) [ 347.203538] hfsplus: unable to find HFS+ superblock 21:25:41 executing program 1: r0 = socket(0x10, 0x80803, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) r2 = getpid() r3 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x1, 0x410000) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f00000000c0)={r3, r0, 0x4}) write(r0, &(0x7f0000000040)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0xfffffffffffffdc9) socket$nl_xfrm(0x10, 0x3, 0x6) 21:25:41 executing program 2: openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x200000, 0x0) [ 347.291175] FAULT_INJECTION: forcing a failure. [ 347.291175] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 347.327765] hfsplus: unable to find HFS+ superblock [ 347.368320] CPU: 1 PID: 14750 Comm: syz-executor.5 Not tainted 4.19.38 #6 [ 347.375430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 347.384786] Call Trace: [ 347.387393] dump_stack+0x172/0x1f0 [ 347.391048] should_fail.cold+0xa/0x1b [ 347.394954] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 347.400067] ? ___might_sleep+0x163/0x280 [ 347.404227] ? __might_sleep+0x95/0x190 [ 347.408212] __alloc_pages_nodemask+0x1ee/0x760 [ 347.412900] ? __alloc_pages_slowpath+0x2870/0x2870 21:25:41 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$apparmor_current(r1, &(0x7f0000000080)=@hat={'permhat ', 0x2, 0x5e, ['nodevem0%(\x00', '/\x00', '\x00', '*\xaevboxnet1posix_acl_access\x00', 'user\x00', 'md5sum\x00', 'user\x00', 'GPLbdevFbdev\x00', 'ppp0]-ppp1\'cpuset%posix_acl_access\x00']}, 0x85) 21:25:41 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x74000000, 0x0, 0x0, 0x0, 0x0) 21:25:41 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) flock(r0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000080)={{0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, {0xa, 0x4e24, 0x10000, @dev={0xfe, 0x80, [], 0x19}, 0x3}, 0x28afed1d, [0x10001, 0xff, 0x1, 0x9, 0x9, 0xffffffffffffffb8, 0xdb0c, 0xffffffffffffff7e]}, 0x5c) [ 347.417924] ? ___might_sleep+0x163/0x280 [ 347.422083] ? copyin+0xb5/0x100 [ 347.425464] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 347.431017] alloc_pages_current+0x107/0x210 [ 347.435447] pipe_write+0xa65/0xfb0 [ 347.439093] __vfs_write+0x58e/0x820 [ 347.442910] ? kernel_read+0x120/0x120 [ 347.446814] ? __inode_security_revalidate+0xda/0x120 [ 347.452016] ? selinux_file_permission+0x92/0x550 [ 347.456884] ? security_file_permission+0x8f/0x230 [ 347.461830] ? rw_verify_area+0x118/0x360 [ 347.465988] vfs_write+0x20c/0x560 [ 347.469553] ksys_write+0xea/0x1f0 [ 347.473104] ? __ia32_sys_read+0xb0/0xb0 [ 347.477182] ? do_syscall_64+0x26/0x610 [ 347.481173] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 347.486551] ? do_syscall_64+0x26/0x610 [ 347.490545] __x64_sys_write+0x73/0xb0 [ 347.494446] do_syscall_64+0x103/0x610 [ 347.498351] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 347.503559] RIP: 0033:0x458da9 [ 347.506760] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 347.525667] RSP: 002b:00007fcc0a7a9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 347.533394] RAX: ffffffffffffffda RBX: 00007fcc0a7a9c90 RCX: 0000000000458da9 [ 347.540677] RDX: 0000000020000020 RSI: 0000000020000000 RDI: 0000000000000004 [ 347.547947] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 347.547957] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc0a7aa6d4 [ 347.547966] R13: 00000000004c80fe R14: 00000000004de4f8 R15: 0000000000000006 [ 347.592813] hfsplus: unable to find HFS+ superblock [ 347.661911] hfsplus: unable to find HFS+ superblock [ 347.965060] audit: type=1800 audit(1556832341.919:129): pid=14757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.4" name="file0" dev="sda1" ino=16994 res=0 [ 348.179577] audit: type=1800 audit(1556832342.139:130): pid=14779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=17361 res=0 21:25:42 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000018, 0x0) 21:25:42 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) accept4$unix(r0, 0x0, &(0x7f0000000000), 0x800) flock(r0, 0xfffffffffffffffd) 21:25:42 executing program 1: r0 = syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0xc2ef, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x6, @remote, 0x7f}, {0xa, 0x4e24, 0x7ff, @loopback, 0x1000}, r1, 0xffff}}, 0x48) r2 = socket(0x10, 0x80803, 0x0) write(r2, &(0x7f0000000040)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:25:42 executing program 5 (fault-call:8 fault-nth:37): mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:25:42 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x7a000000, 0x0, 0x0, 0x0, 0x0) 21:25:42 executing program 4: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(0x0, 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:25:42 executing program 1: r0 = socket(0x10, 0x80803, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000080)) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:25:42 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) accept$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000000)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xd, 0xff, 0x76, 0x80000001, 0x20, r0, 0xc6, [], r1, r0, 0x5, 0x4}, 0x3c) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x1, 0x5, 0xffff, 'queue1\x00'}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x30, r2, 0x602, 0x70bd2c, 0x25dfdbfb, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0xfffffffffffffff8, 0x401, 0x5, 0x5}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20004010}, 0x1) [ 348.338527] hfsplus: unable to find HFS+ superblock [ 348.382811] audit: type=1804 audit(1556832342.339:131): pid=14789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir015708984/syzkaller.GbgsAS/354/file0" dev="sda1" ino=17617 res=1 [ 348.421242] FAULT_INJECTION: forcing a failure. 21:25:42 executing program 1: r0 = socket(0x10, 0x80803, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000040)={'icmp6\x00'}, &(0x7f0000000080)=0x1e) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1c6) [ 348.421242] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 348.437578] hfsplus: unable to find HFS+ superblock [ 348.459588] CPU: 0 PID: 14784 Comm: syz-executor.5 Not tainted 4.19.38 #6 [ 348.466535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 348.475886] Call Trace: [ 348.475911] dump_stack+0x172/0x1f0 [ 348.475936] should_fail.cold+0xa/0x1b [ 348.475975] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 348.491133] ? ___might_sleep+0x163/0x280 [ 348.495297] ? __might_sleep+0x95/0x190 [ 348.499289] __alloc_pages_nodemask+0x1ee/0x760 [ 348.503987] ? __alloc_pages_slowpath+0x2870/0x2870 [ 348.509006] ? ___might_sleep+0x163/0x280 [ 348.513166] ? copyin+0xb5/0x100 [ 348.516546] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 348.522093] alloc_pages_current+0x107/0x210 [ 348.526531] pipe_write+0xa65/0xfb0 [ 348.530182] __vfs_write+0x58e/0x820 [ 348.533910] ? kernel_read+0x120/0x120 [ 348.537815] ? __inode_security_revalidate+0xda/0x120 [ 348.543014] ? selinux_file_permission+0x92/0x550 [ 348.547877] ? security_file_permission+0x8f/0x230 [ 348.552813] ? rw_verify_area+0x118/0x360 [ 348.556984] vfs_write+0x20c/0x560 [ 348.560531] ksys_write+0xea/0x1f0 [ 348.564083] ? __ia32_sys_read+0xb0/0xb0 [ 348.568158] ? do_syscall_64+0x26/0x610 [ 348.572142] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 348.577523] ? do_syscall_64+0x26/0x610 [ 348.581510] __x64_sys_write+0x73/0xb0 [ 348.585405] do_syscall_64+0x103/0x610 [ 348.589311] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 348.594506] RIP: 0033:0x458da9 [ 348.597710] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 348.616615] RSP: 002b:00007fcc0a7a9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 348.624330] RAX: ffffffffffffffda RBX: 00007fcc0a7a9c90 RCX: 0000000000458da9 21:25:42 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) flock(r0, 0x3) 21:25:42 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x2800, 0x0) flock(r0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x800, 0x0) 21:25:42 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x8cffffff, 0x0, 0x0, 0x0, 0x0) [ 348.631599] RDX: 0000000020000020 RSI: 0000000020000000 RDI: 0000000000000004 [ 348.638872] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 348.646144] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc0a7aa6d4 [ 348.653425] R13: 00000000004c80fe R14: 00000000004de4f8 R15: 0000000000000006 [ 348.762008] hfsplus: unable to find HFS+ superblock [ 348.813354] hfsplus: unable to find HFS+ superblock [ 349.109126] audit: type=1804 audit(1556832343.069:132): pid=14794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir015708984/syzkaller.GbgsAS/354/file0" dev="sda1" ino=17617 res=1 21:25:43 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b000019, 0x0) 21:25:43 executing program 1: r0 = socket(0x10, 0x80803, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x800) write$FUSE_LSEEK(r1, &(0x7f0000000100)={0x18, 0xffffffffffffffda, 0x5, {0x5}}, 0x18) sendfile(r0, r1, &(0x7f00000000c0), 0x2) getresuid(&(0x7f0000000080)=0x0, &(0x7f0000000140), &(0x7f0000000180)) syz_read_part_table(0x7, 0x7, &(0x7f0000001540)=[{&(0x7f00000001c0)="c66b50e83841273da87eca58c4c9331c804ecb8bbc20caee58e4d327b455ed405f5ad0c11d59dbc805783074191f22204fde335c1c2832b4bd3754ac42113256e119988b840e69efc29c98fd8c45fd60453791705808e6bc4020bc5745264802faa3e64cfa701636d6a10a4e7b079e8518fb88bb59002d5269cd047f0eadf3e9ebd215b4ea46f7eb81ca9dfb8a4602678076416f30de1cb7f114782ab40b9c46ff07442925376cbff79fde1b522f35760447641ab8076e5b43153c52f0f08c2575251180a3e1bce037ef1ba2e3959a93029ef59089912ed74c5fb48b0c1aeb0e3a902090a6be2f19dd1e16ec9c5b", 0xee, 0x496}, {&(0x7f00000002c0)="0d142cb1149c4e0e5624f198283f81a13db46e2f34c8c48981", 0x19, 0xfa}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="72b9d039c9b1d43ba5d8b12306e78ef230a1b93b749834cf8c254cca35001f54f0587a690bbdecf8ba21eecb1a578cdc050a4bd1ba698985a60cb3ffce944ab72ad625ec90c6357097de6ba5306030332b6cd6fa13ede5b1c32b02a7ef4b04704122da9dac567f6b8b817c7296a60effe0f417951ff7bd6285d9f33e7a2cb8a9c75f7e5fc297b9ba2194f747c44dfeaf3105", 0x92, 0x34}, {&(0x7f00000013c0)="da143b16f31ab25cd3ede82210e7ef7e0c0684fde4c75aecfcaff50d60d78580a1153d9a93f770bb74c1fd1bccc88929601f8223258b6fbc7ab32a0ec942564a61a6536e29219bff36af3734a09a042892bba1f014c646b2fe1aad7a47d4b3b863046af9be0d9dd0349436159f46d17601019d98b5cdcfc8cb041f069e52e36aca0543f8098dda7e3ae1e1b5a1b3d50116970bc004d6cf831db1ac04acc51f336184d22631f28a", 0xa7, 0x7fffffff}, {&(0x7f0000001480)="d1cb6483915cbc", 0x7, 0x3ff}, {&(0x7f00000014c0)="46876905c6f2e3e32cb56743671037e1c523238460c20b45b8444ba34ebe718a6f7a27bfe92ba281e1dd46663579b3201fa06b129bd884d9bbecec780689f460310a29ea1467608f50876fc3e59e86d92e03efb5bc", 0x55, 0xffffffffffff4a02}]) setuid(r2) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) pipe2(&(0x7f0000001600), 0x4000) 21:25:43 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) flock(r0, 0x0) getpeername$llc(r0, &(0x7f0000000000), &(0x7f0000000080)=0x10) 21:25:43 executing program 5 (fault-call:8 fault-nth:38): mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:25:43 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0xc0ed0000, 0x0, 0x0, 0x0, 0x0) 21:25:43 executing program 4: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) [ 349.315266] audit: type=1800 audit(1556832343.269:133): pid=14810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=17313 res=0 21:25:43 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) flock(r0, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x84830, r0, 0x0) [ 349.420315] hfsplus: unable to find HFS+ superblock 21:25:43 executing program 1: r0 = socket(0x10, 0x80803, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x401, 0x9, 0xe72, 0xd479, 0x0, 0x4, 0x3f, {0x0, @in6={{0xa, 0x4e23, 0x80000000, @mcast2, 0x2}}, 0xffffffffffffff54, 0xc3, 0x6, 0x5af, 0x5}}, &(0x7f0000000100)=0xb0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000140)={r1, 0xaa, "2bd9dc3909fad2271f2eb33002851f26181b25bc17c826e39e91ccf13cea960ce0b5f10ca01376f7f64b2df5a03c21c74f69365d5c2d165b3667ab1e58c4ea37cf8c5d0217c5437774b93d74517530445d70ac3da5c60704c5f476733b4b66cb0d422db2efb4eb233d71fe706982215c10e4f59a91923a5c16803d5ba23e6d218710a12dc979075ff7df9415cabdb91965216abeb03c5168e2750c55ed60d6bacb734992db5e880d7d59"}, &(0x7f0000000200)=0xb2) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) r2 = getpid() waitid(0x0, r2, &(0x7f0000000240), 0x40000001, &(0x7f00000002c0)) [ 349.452353] audit: type=1804 audit(1556832343.409:134): pid=14827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir015708984/syzkaller.GbgsAS/355/file0" dev="sda1" ino=17729 res=1 [ 349.494082] hfsplus: unable to find HFS+ superblock 21:25:43 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x80000000, 0x40000) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000080)=""/233) fsetxattr$security_capability(r0, &(0x7f0000001240)='security.capability\x00', &(0x7f0000001280)=@v1={0x1000000, [{0x200, 0x18000}]}, 0xc, 0x2) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000011c0)=0x1008) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000001200)={r1, 0x3, 0xfffffffffffffff8, 0x90, 0x4, 0x2}, 0x14) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) flock(r2, 0x0) 21:25:43 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0xf5ffffff, 0x0, 0x0, 0x0, 0x0) [ 349.562095] FAULT_INJECTION: forcing a failure. [ 349.562095] name fail_page_alloc, interval 1, probability 0, space 0, times 0 21:25:43 executing program 1: socket(0x10, 0x80803, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x10000, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0xfffffffffffffdd2) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x200, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000080)={0x1, 0xffffffff}) [ 349.640928] CPU: 0 PID: 14829 Comm: syz-executor.5 Not tainted 4.19.38 #6 [ 349.647919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 349.657276] Call Trace: [ 349.659893] dump_stack+0x172/0x1f0 [ 349.663543] should_fail.cold+0xa/0x1b [ 349.667452] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 349.672568] ? ___might_sleep+0x163/0x280 [ 349.676740] ? __might_sleep+0x95/0x190 [ 349.680734] __alloc_pages_nodemask+0x1ee/0x760 [ 349.685415] ? __alloc_pages_slowpath+0x2870/0x2870 [ 349.690437] ? ___might_sleep+0x163/0x280 [ 349.694608] ? copyin+0xb5/0x100 [ 349.697990] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 349.703543] alloc_pages_current+0x107/0x210 [ 349.707971] pipe_write+0xa65/0xfb0 [ 349.711624] __vfs_write+0x58e/0x820 [ 349.715347] ? kernel_read+0x120/0x120 [ 349.719253] ? __inode_security_revalidate+0xda/0x120 [ 349.724456] ? selinux_file_permission+0x92/0x550 [ 349.729312] ? security_file_permission+0x8f/0x230 [ 349.734252] ? rw_verify_area+0x118/0x360 [ 349.738415] vfs_write+0x20c/0x560 [ 349.741959] ksys_write+0xea/0x1f0 [ 349.745502] ? __ia32_sys_read+0xb0/0xb0 [ 349.749580] ? do_syscall_64+0x26/0x610 [ 349.753566] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 349.758934] ? do_syscall_64+0x26/0x610 [ 349.762919] __x64_sys_write+0x73/0xb0 [ 349.766817] do_syscall_64+0x103/0x610 [ 349.770716] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 349.775918] RIP: 0033:0x458da9 [ 349.779116] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 349.798029] RSP: 002b:00007fcc0a7a9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 349.805745] RAX: ffffffffffffffda RBX: 00007fcc0a7a9c90 RCX: 0000000000458da9 [ 349.813023] RDX: 0000000020000020 RSI: 0000000020000000 RDI: 0000000000000004 [ 349.820297] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 349.827571] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc0a7aa6d4 21:25:43 executing program 1: r0 = socket(0x10, 0x80803, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040)) [ 349.834844] R13: 00000000004c80fe R14: 00000000004de4f8 R15: 0000000000000006 [ 349.868366] hfsplus: unable to find HFS+ superblock [ 349.929103] hfsplus: unable to find HFS+ superblock [ 350.138260] audit: type=1804 audit(1556832344.099:135): pid=14836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir015708984/syzkaller.GbgsAS/355/file0" dev="sda1" ino=17729 res=1 21:25:44 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b00001a, 0x0) 21:25:44 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x100, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f00000000c0)) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000080)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) flock(r1, 0x0) 21:25:44 executing program 1: r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x1, 0x0) r1 = socket(0x10, 0x80803, 0x0) write(r1, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x55, 0x3, 0x0, {0x4, 0x34, 0x0, 'mime_type*em0{tprocwlan1)vmnet0md5sumwlan1wlan1self}'}}, 0x55) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 21:25:44 executing program 5 (fault-call:8 fault-nth:39): mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:25:44 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0xf6ffffff, 0x0, 0x0, 0x0, 0x0) 21:25:44 executing program 4: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) [ 350.484183] audit: type=1800 audit(1556832344.439:136): pid=14856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=17726 res=0 21:25:44 executing program 1: openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/user\x00', 0x2, 0x0) r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:25:44 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x80000, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) flock(r1, 0x4) [ 350.611688] hfsplus: unable to find HFS+ superblock [ 350.625705] audit: type=1804 audit(1556832344.579:137): pid=14867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir015708984/syzkaller.GbgsAS/356/file0" dev="sda1" ino=17745 res=1 [ 350.681793] hfsplus: unable to find HFS+ superblock [ 350.701483] FAULT_INJECTION: forcing a failure. [ 350.701483] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 350.731522] CPU: 1 PID: 14863 Comm: syz-executor.5 Not tainted 4.19.38 #6 [ 350.738488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 350.747843] Call Trace: [ 350.750448] dump_stack+0x172/0x1f0 [ 350.754090] should_fail.cold+0xa/0x1b [ 350.758004] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 350.763120] ? ___might_sleep+0x163/0x280 [ 350.767284] ? __might_sleep+0x95/0x190 [ 350.771270] __alloc_pages_nodemask+0x1ee/0x760 [ 350.775950] ? __alloc_pages_slowpath+0x2870/0x2870 [ 350.780970] ? ___might_sleep+0x163/0x280 [ 350.785133] ? copyin+0xb5/0x100 [ 350.788515] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 350.794063] alloc_pages_current+0x107/0x210 [ 350.798481] pipe_write+0xa65/0xfb0 [ 350.802128] __vfs_write+0x58e/0x820 [ 350.805849] ? kernel_read+0x120/0x120 [ 350.809743] ? __inode_security_revalidate+0xda/0x120 [ 350.814937] ? selinux_file_permission+0x92/0x550 [ 350.819791] ? security_file_permission+0x8f/0x230 [ 350.824735] ? rw_verify_area+0x118/0x360 [ 350.828897] vfs_write+0x20c/0x560 [ 350.832450] ksys_write+0xea/0x1f0 [ 350.835998] ? __ia32_sys_read+0xb0/0xb0 [ 350.840066] ? do_syscall_64+0x26/0x610 [ 350.844060] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 350.849455] ? do_syscall_64+0x26/0x610 [ 350.853535] __x64_sys_write+0x73/0xb0 [ 350.857428] do_syscall_64+0x103/0x610 [ 350.861331] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 350.866525] RIP: 0033:0x458da9 21:25:44 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0xfcfdffff, 0x0, 0x0, 0x0, 0x0) 21:25:44 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa0103, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000000)=@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}) flock(r0, 0x0) 21:25:44 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x400, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = socket(0x13, 0x80800, 0xfffffffffffffffe) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f0000000100)=ANY=[@ANYRES64=r2], 0x3e7) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000280)={0x4df, 0x2, 0x8, 0x0, 0x0, [{r2, 0x0, 0x6}, {r1, 0x0, 0x7fffffff00000}, {r2, 0x0, 0x2}, {r1, 0x0, 0xac8f}, {r1}, {r2}, {r2, 0x0, 0xfffffffffffffffc}, {r2}]}) ioctl$SG_GET_NUM_WAITING(r2, 0x227c, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000001c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x30401ff}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)={0x1c, r3, 0x700, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x14) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x800, 0x0) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000400)="65c7de986e6c4aa57602743fe0452491f82f3abbd6e75b8bcac441cf5f808cf71c18cbea12f44c2dc7aeefe8c4dfbe7c1d19a797693856ce68fa18bc2efb4151618fc1092b956472215f7776c28a59be77831451a140dcc12f0af832399affd44f6131831d1e6baf95e4739c56a7c38899b6ce4527ef1f9f66a9a1f3278b1c028184124e5a7fb064485a172311df69e6ad42a97826a28f38e90ecf91b6c122f82f9a604fdb") write(r1, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 350.869723] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 350.888623] RSP: 002b:00007fcc0a7a9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 350.896338] RAX: ffffffffffffffda RBX: 00007fcc0a7a9c90 RCX: 0000000000458da9 [ 350.903608] RDX: 0000000020000020 RSI: 0000000020000000 RDI: 0000000000000004 [ 350.910883] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 350.918153] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc0a7aa6d4 [ 350.925425] R13: 00000000004c80fe R14: 00000000004de4f8 R15: 0000000000000006 [ 350.986898] hfsplus: unable to find HFS+ superblock 21:25:45 executing program 2: flock(0xffffffffffffffff, 0x0) syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) [ 351.046811] hfsplus: unable to find HFS+ superblock [ 351.521664] audit: type=1804 audit(1556832345.479:138): pid=14876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir015708984/syzkaller.GbgsAS/356/file0" dev="sda1" ino=17745 res=1 21:25:45 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b00001b, 0x0) 21:25:45 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0xfdfdffff, 0x0, 0x0, 0x0, 0x0) 21:25:45 executing program 1: r0 = socket(0x10, 0x80803, 0x5) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:25:45 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @mcast1}}}, 0x84) 21:25:45 executing program 5 (fault-call:8 fault-nth:40): mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:25:45 executing program 4: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) [ 351.950751] audit: type=1800 audit(1556832345.909:139): pid=14900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=17735 res=0 21:25:46 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @mcast1}}}, 0x84) [ 352.069491] audit: type=1804 audit(1556832346.029:140): pid=14908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir015708984/syzkaller.GbgsAS/357/file0" dev="sda1" ino=17741 res=1 [ 352.113554] hfsplus: unable to find HFS+ superblock [ 352.164377] FAULT_INJECTION: forcing a failure. [ 352.164377] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 352.195122] CPU: 1 PID: 14907 Comm: syz-executor.5 Not tainted 4.19.38 #6 [ 352.202182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 352.211554] Call Trace: 21:25:46 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @mcast1}}}, 0x84) [ 352.214162] dump_stack+0x172/0x1f0 [ 352.217816] should_fail.cold+0xa/0x1b [ 352.221759] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 352.226899] ? ___might_sleep+0x163/0x280 [ 352.231070] ? __might_sleep+0x95/0x190 [ 352.235063] __alloc_pages_nodemask+0x1ee/0x760 [ 352.239761] ? __alloc_pages_slowpath+0x2870/0x2870 [ 352.244790] ? ___might_sleep+0x163/0x280 [ 352.248963] ? copyin+0xb5/0x100 [ 352.252355] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 352.257914] alloc_pages_current+0x107/0x210 21:25:46 executing program 1: r0 = socket(0x20000000000015, 0x20000000807fe, 0x1f) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f00000000c0)) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000080)=r1) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) [ 352.262346] pipe_write+0xa65/0xfb0 [ 352.266005] __vfs_write+0x58e/0x820 [ 352.269751] ? kernel_read+0x120/0x120 [ 352.273662] ? __inode_security_revalidate+0xda/0x120 [ 352.278870] ? selinux_file_permission+0x92/0x550 [ 352.283824] ? security_file_permission+0x8f/0x230 [ 352.288775] ? rw_verify_area+0x118/0x360 [ 352.292950] vfs_write+0x20c/0x560 [ 352.296502] ksys_write+0xea/0x1f0 [ 352.296519] ? __ia32_sys_read+0xb0/0xb0 [ 352.296537] ? do_syscall_64+0x26/0x610 [ 352.296557] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 352.313470] ? do_syscall_64+0x26/0x610 [ 352.313492] __x64_sys_write+0x73/0xb0 [ 352.321350] do_syscall_64+0x103/0x610 [ 352.325255] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 352.330454] RIP: 0033:0x458da9 [ 352.333661] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 352.352591] RSP: 002b:00007fcc0a7a9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 21:25:46 executing program 1: r0 = socket(0x10, 0x80803, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x80, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:25:46 executing program 5 (fault-call:8 fault-nth:41): mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) [ 352.360322] RAX: ffffffffffffffda RBX: 00007fcc0a7a9c90 RCX: 0000000000458da9 [ 352.367601] RDX: 0000000020000020 RSI: 0000000020000000 RDI: 0000000000000004 [ 352.367610] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 352.367619] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc0a7aa6d4 [ 352.367627] R13: 00000000004c80fe R14: 00000000004de4f8 R15: 0000000000000006 [ 352.397455] hfsplus: unable to find HFS+ superblock 21:25:46 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0xffff1f00, 0x0, 0x0, 0x0, 0x0) [ 352.539724] hfsplus: unable to find HFS+ superblock [ 352.590226] hfsplus: unable to find HFS+ superblock [ 352.643959] FAULT_INJECTION: forcing a failure. [ 352.643959] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 352.685272] CPU: 1 PID: 14932 Comm: syz-executor.5 Not tainted 4.19.38 #6 [ 352.692257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 352.701624] Call Trace: [ 352.704241] dump_stack+0x172/0x1f0 [ 352.707896] should_fail.cold+0xa/0x1b [ 352.711810] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 352.716934] ? ___might_sleep+0x163/0x280 [ 352.721101] ? __might_sleep+0x95/0x190 [ 352.725098] __alloc_pages_nodemask+0x1ee/0x760 [ 352.729787] ? __alloc_pages_slowpath+0x2870/0x2870 [ 352.734819] ? ___might_sleep+0x163/0x280 [ 352.738984] ? copyin+0xb5/0x100 [ 352.742372] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 352.747929] alloc_pages_current+0x107/0x210 [ 352.752358] pipe_write+0xa65/0xfb0 [ 352.756018] __vfs_write+0x58e/0x820 [ 352.759746] ? kernel_read+0x120/0x120 [ 352.763655] ? __inode_security_revalidate+0xda/0x120 [ 352.768878] ? selinux_file_permission+0x92/0x550 [ 352.773748] ? security_file_permission+0x8f/0x230 [ 352.778714] ? rw_verify_area+0x118/0x360 [ 352.782879] vfs_write+0x20c/0x560 [ 352.786442] ksys_write+0xea/0x1f0 [ 352.789995] ? __ia32_sys_read+0xb0/0xb0 [ 352.794077] ? do_syscall_64+0x26/0x610 [ 352.798068] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 352.803453] ? do_syscall_64+0x26/0x610 [ 352.807446] __x64_sys_write+0x73/0xb0 [ 352.811352] do_syscall_64+0x103/0x610 [ 352.815265] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 352.820469] RIP: 0033:0x458da9 [ 352.823760] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 352.842694] RSP: 002b:00007fcc0a7a9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 352.850479] RAX: ffffffffffffffda RBX: 00007fcc0a7a9c90 RCX: 0000000000458da9 [ 352.857764] RDX: 0000000020000020 RSI: 0000000020000000 RDI: 0000000000000004 [ 352.865048] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 352.872326] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc0a7aa6d4 [ 352.879608] R13: 00000000004c80fe R14: 00000000004de4f8 R15: 0000000000000006 [ 352.889740] audit: type=1804 audit(1556832346.839:141): pid=14917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir015708984/syzkaller.GbgsAS/357/file0" dev="sda1" ino=17741 res=1 21:25:47 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b00001c, 0x0) 21:25:47 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @mcast1}}}, 0x84) 21:25:47 executing program 1: r0 = socket(0x10, 0x80803, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0x5f9}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000480)={0x0, 0x4, 0x200}) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:25:47 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0xfffffdfc, 0x0, 0x0, 0x0, 0x0) 21:25:47 executing program 4: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:25:47 executing program 5 (fault-call:8 fault-nth:42): mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) [ 353.481446] hfsplus: unable to find HFS+ superblock 21:25:47 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)={0x4, [0x800, 0x200, 0x401, 0x0]}, &(0x7f0000000080)=0xc) 21:25:47 executing program 2: setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @mcast1}}}, 0x84) [ 353.571812] FAULT_INJECTION: forcing a failure. [ 353.571812] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 353.588958] hfsplus: unable to find HFS+ superblock [ 353.612920] CPU: 1 PID: 14950 Comm: syz-executor.5 Not tainted 4.19.38 #6 [ 353.619885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 353.629248] Call Trace: [ 353.631854] dump_stack+0x172/0x1f0 [ 353.635509] should_fail.cold+0xa/0x1b [ 353.639419] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 353.644543] ? ___might_sleep+0x163/0x280 [ 353.648711] ? __might_sleep+0x95/0x190 [ 353.652706] __alloc_pages_nodemask+0x1ee/0x760 [ 353.657397] ? __alloc_pages_slowpath+0x2870/0x2870 [ 353.662434] ? ___might_sleep+0x163/0x280 [ 353.666601] ? copyin+0xb5/0x100 [ 353.670009] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 353.675568] alloc_pages_current+0x107/0x210 [ 353.680165] pipe_write+0xa65/0xfb0 [ 353.683822] __vfs_write+0x58e/0x820 [ 353.687558] ? kernel_read+0x120/0x120 [ 353.691470] ? __inode_security_revalidate+0xda/0x120 [ 353.696690] ? selinux_file_permission+0x92/0x550 [ 353.701555] ? security_file_permission+0x8f/0x230 [ 353.706503] ? rw_verify_area+0x118/0x360 [ 353.710669] vfs_write+0x20c/0x560 [ 353.714227] ksys_write+0xea/0x1f0 [ 353.717781] ? __ia32_sys_read+0xb0/0xb0 [ 353.721863] ? do_syscall_64+0x26/0x610 [ 353.725858] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 353.731236] ? do_syscall_64+0x26/0x610 [ 353.735233] __x64_sys_write+0x73/0xb0 [ 353.739143] do_syscall_64+0x103/0x610 [ 353.743053] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 353.748251] RIP: 0033:0x458da9 [ 353.751460] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 353.770379] RSP: 002b:00007fcc0a7a9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 353.778119] RAX: ffffffffffffffda RBX: 00007fcc0a7a9c90 RCX: 0000000000458da9 [ 353.785400] RDX: 0000000020000020 RSI: 0000000020000000 RDI: 0000000000000004 [ 353.792680] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 353.799958] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc0a7aa6d4 [ 353.807237] R13: 00000000004c80fe R14: 00000000004de4f8 R15: 0000000000000006 21:25:47 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0xfffffdfd, 0x0, 0x0, 0x0, 0x0) 21:25:47 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r1, 0x308, 0x70bd27, 0x25dfdbff, {{}, 0x0, 0x4108, 0x0, {0x14, 0x18, {0x5, @bearer=@l2={'ib', 0x3a, 'ip6gre0\x00'}}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 21:25:47 executing program 2: setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @mcast1}}}, 0x84) 21:25:47 executing program 5 (fault-call:8 fault-nth:43): mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) [ 353.928056] hfsplus: unable to find HFS+ superblock [ 353.944570] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pig=14977 comm=syz-executor.1 [ 353.986995] hfsplus: unable to find HFS+ superblock [ 354.161948] FAULT_INJECTION: forcing a failure. [ 354.161948] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 354.180113] CPU: 0 PID: 14981 Comm: syz-executor.5 Not tainted 4.19.38 #6 [ 354.187082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 354.196448] Call Trace: [ 354.199055] dump_stack+0x172/0x1f0 [ 354.202703] should_fail.cold+0xa/0x1b [ 354.206628] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 354.211747] ? ___might_sleep+0x163/0x280 [ 354.215913] ? __might_sleep+0x95/0x190 [ 354.219909] __alloc_pages_nodemask+0x1ee/0x760 [ 354.224613] ? __alloc_pages_slowpath+0x2870/0x2870 [ 354.229640] ? ___might_sleep+0x163/0x280 [ 354.233806] ? copyin+0xb5/0x100 [ 354.237191] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 354.242747] alloc_pages_current+0x107/0x210 [ 354.247168] pipe_write+0xa65/0xfb0 [ 354.250827] __vfs_write+0x58e/0x820 [ 354.254564] ? kernel_read+0x120/0x120 [ 354.258493] ? __inode_security_revalidate+0xda/0x120 [ 354.263695] ? selinux_file_permission+0x92/0x550 [ 354.268555] ? security_file_permission+0x8f/0x230 [ 354.273519] ? rw_verify_area+0x118/0x360 [ 354.277679] vfs_write+0x20c/0x560 [ 354.281232] ksys_write+0xea/0x1f0 [ 354.284783] ? __ia32_sys_read+0xb0/0xb0 [ 354.288854] ? do_syscall_64+0x26/0x610 [ 354.292843] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 354.298218] ? do_syscall_64+0x26/0x610 [ 354.302211] __x64_sys_write+0x73/0xb0 [ 354.306112] do_syscall_64+0x103/0x610 [ 354.310013] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 354.315213] RIP: 0033:0x458da9 [ 354.318418] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 354.337329] RSP: 002b:00007fcc0a7a9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 354.345051] RAX: ffffffffffffffda RBX: 00007fcc0a7a9c90 RCX: 0000000000458da9 [ 354.352330] RDX: 0000000020000020 RSI: 0000000020000000 RDI: 0000000000000004 [ 354.359627] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 354.366902] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc0a7aa6d4 [ 354.374181] R13: 00000000004c80fe R14: 00000000004de4f8 R15: 0000000000000006 21:25:48 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b00001d, 0x0) 21:25:48 executing program 2: setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @mcast1}}}, 0x84) 21:25:48 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0xffffff7f, 0x0, 0x0, 0x0, 0x0) 21:25:48 executing program 1: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x800, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$security_capability(r0, &(0x7f0000000080)='security.capability\x00', &(0x7f0000000180)=@v3={0x3000000, [{0x7, 0x5}, {0x7, 0x10000000}], r1}, 0x18, 0x1) r2 = socket(0x10, 0x80803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) write(r2, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) 21:25:48 executing program 4: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) 21:25:48 executing program 5 (fault-call:8 fault-nth:44): mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) [ 354.772643] hfsplus: unable to find HFS+ superblock 21:25:48 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x400, 0x0) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000080)=0x8) r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x12000) epoll_wait(r2, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x4) 21:25:48 executing program 2: r0 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @mcast1}}}, 0x84) [ 354.835451] hfsplus: unable to find HFS+ superblock 21:25:48 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0xffffff8c, 0x0, 0x0, 0x0, 0x0) [ 354.884517] FAULT_INJECTION: forcing a failure. [ 354.884517] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 354.948436] CPU: 0 PID: 14992 Comm: syz-executor.5 Not tainted 4.19.38 #6 [ 354.955459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 354.964833] Call Trace: [ 354.967447] dump_stack+0x172/0x1f0 [ 354.971104] should_fail.cold+0xa/0x1b [ 354.975013] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 354.980138] ? ___might_sleep+0x163/0x280 [ 354.984305] ? __might_sleep+0x95/0x190 [ 354.988296] __alloc_pages_nodemask+0x1ee/0x760 [ 354.992983] ? __alloc_pages_slowpath+0x2870/0x2870 [ 354.998009] ? ___might_sleep+0x163/0x280 [ 355.002172] ? copyin+0xb5/0x100 [ 355.005574] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 355.011132] alloc_pages_current+0x107/0x210 [ 355.015579] pipe_write+0xa65/0xfb0 [ 355.019233] __vfs_write+0x58e/0x820 [ 355.022967] ? kernel_read+0x120/0x120 [ 355.026875] ? __inode_security_revalidate+0xda/0x120 [ 355.032081] ? selinux_file_permission+0x92/0x550 [ 355.036940] ? security_file_permission+0x8f/0x230 [ 355.041881] ? rw_verify_area+0x118/0x360 [ 355.046040] vfs_write+0x20c/0x560 [ 355.049593] ksys_write+0xea/0x1f0 [ 355.053154] ? __ia32_sys_read+0xb0/0xb0 [ 355.057229] ? do_syscall_64+0x26/0x610 [ 355.061214] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 355.066587] ? do_syscall_64+0x26/0x610 [ 355.070578] __x64_sys_write+0x73/0xb0 [ 355.074476] do_syscall_64+0x103/0x610 [ 355.078468] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 355.083667] RIP: 0033:0x458da9 [ 355.086874] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 355.105784] RSP: 002b:00007fcc0a7a9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 355.113503] RAX: ffffffffffffffda RBX: 00007fcc0a7a9c90 RCX: 0000000000458da9 [ 355.120813] RDX: 0000000020000020 RSI: 0000000020000000 RDI: 0000000000000004 [ 355.128089] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 355.135364] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc0a7aa6d4 21:25:49 executing program 2: r0 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @mcast1}}}, 0x84) [ 355.142639] R13: 00000000004c80fe R14: 00000000004de4f8 R15: 0000000000000006 21:25:49 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000080)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x9) [ 355.204549] hfsplus: unable to find HFS+ superblock [ 355.269478] hfsplus: unable to find HFS+ superblock 21:25:49 executing program 1: r0 = socket(0x10, 0x800080003, 0xfffffffffffffffd) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x9, 0x250400) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000080)=0xff) setsockopt$inet_tcp_buf(r1, 0x6, 0x0, &(0x7f00000000c0)="677e94aa2142acba40334459b4b43b9f70e1415edbd6cefa65d52e8337a9f8cc55ea41ff864b74891f9e76d3037d88431a345f4072cf4cd103a5e82fd173b6befe917e34f52144c1615ef01a36fb0e92a5e165880d0f5a540342eaf6fa5012e77a7540d96a564a50fb65bfd780790feeb7b3e989e135aa4d9560ac52cd74919e0916f5c405225428a6cbcd1b", 0x8c) 21:25:49 executing program 2: r0 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @mcast1}}}, 0x84) 21:25:49 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0xfffffff5, 0x0, 0x0, 0x0, 0x0) 21:25:49 executing program 1: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="1b00000018000700f677b8ed8641a1c10aab80ff00000000000236", 0x1b) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x401}, &(0x7f0000000080)=0x8) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {&(0x7f00000001c0)={0xffffffffffffffff}, 0x3, 0xffffffffffffffff, 0x10, 0x1, @in={0x2, 0x4e21, @rand_addr=0x81}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000002c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000180), r3}}, 0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x17, 0x400, 0xd, 0x80000001, 0x3, 0x87, 0x80000000, 0x7, r1}, &(0x7f0000000100)=0x20) 21:25:49 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0xff) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) r2 = dup2(r1, r1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20}, 0x20000020) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x4b00001e, 0x0) 21:25:49 executing program 4: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x32) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20000020) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r4, 0x0, r5, 0x0, 0x4b000000, 0x1) [ 355.901533] kauditd_printk_skb: 1 callbacks suppressed [ 355.901546] audit: type=1800 audit(1556832349.859:143): pid=15025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=17735 res=0 [ 355.999312] hfsplus: unable to find HFS+ superblock [ 356.064129] hfsplus: unable to find HFS+ superblock [ 356.938185] audit: type=1800 audit(1556832350.899:144): pid=15047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=17735 res=0 [ 508.085108] INFO: task syz-executor.5:15000 blocked for more than 140 seconds. [ 508.092533] Not tainted 4.19.38 #6 [ 508.102403] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 508.110505] syz-executor.5 D28504 15000 7713 0x00000004 [ 508.121792] Call Trace: [ 508.124398] __schedule+0x813/0x1d00 [ 508.128237] ? __lock_is_held+0xb6/0x140 [ 508.132317] ? pci_mmcfg_check_reserved+0x170/0x170 [ 508.143121] ? mark_held_locks+0x100/0x100 [ 508.147483] ? update_curr+0x296/0x8a0 [ 508.151383] ? __enqueue_entity+0x14f/0x230 [ 508.161458] schedule+0x92/0x1c0 [ 508.164830] schedule_timeout+0x8ca/0xfd0 [ 508.169133] ? wait_for_completion+0x294/0x440 [ 508.173720] ? find_held_lock+0x35/0x130 [ 508.184573] ? usleep_range+0x170/0x170 [ 508.189808] ? _raw_spin_unlock_irq+0x28/0x90 [ 508.194306] ? wait_for_completion+0x294/0x440 [ 508.204756] ? _raw_spin_unlock_irq+0x28/0x90 [ 508.209386] ? lockdep_hardirqs_on+0x415/0x5d0 [ 508.213976] ? trace_hardirqs_on+0x67/0x230 [ 508.224140] ? kasan_check_read+0x11/0x20 [ 508.228430] wait_for_completion+0x29c/0x440 [ 508.232854] ? wait_for_completion_interruptible+0x4b0/0x4b0 [ 508.244467] ? wake_up_q+0x100/0x100 [ 508.248301] ? lockdep_hardirqs_on+0x415/0x5d0 [ 508.252902] ? trace_hardirqs_on+0x67/0x230 [ 508.263066] ? kasan_check_read+0x11/0x20 [ 508.267346] __flush_work+0x49f/0x880 [ 508.271153] ? insert_work+0x3a0/0x3a0 [ 508.280961] ? trace_hardirqs_on+0x67/0x230 [ 508.285408] ? flush_workqueue_prep_pwqs+0x590/0x590 [ 508.290529] ? __cancel_work_timer+0xc4/0x520 [ 508.300743] ? __cancel_work_timer+0x1d3/0x520 [ 508.306239] ? cancel_work_sync+0x18/0x20 [ 508.310389] ? __cancel_work_timer+0x1d3/0x520 [ 508.320779] ? lockdep_hardirqs_on+0x415/0x5d0 [ 508.325497] ? trace_hardirqs_on+0x67/0x230 [ 508.329824] __cancel_work_timer+0x3bf/0x520 [ 508.334236] ? try_to_grab_pending+0x710/0x710 [ 508.344581] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 508.349834] ? p9_fd_close+0x29e/0x470 [ 508.353733] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 508.364582] ? lockdep_hardirqs_on+0x415/0x5d0 [ 508.369294] ? trace_hardirqs_on+0x67/0x230 [ 508.373622] ? kasan_check_read+0x11/0x20 [ 508.383572] cancel_work_sync+0x18/0x20 [ 508.387689] p9_fd_close+0x2b7/0x470 [ 508.391415] p9_client_create+0x9c5/0x12e0 [ 508.401498] ? check_preemption_disabled+0x48/0x290 [ 508.407289] ? p9_client_zc_rpc.constprop.0+0x12e0/0x12e0 [ 508.412853] ? __kmalloc_track_caller+0x5e0/0x750 [ 508.424073] ? __lockdep_init_map+0x10c/0x5b0 [ 508.428723] ? lockdep_init_map+0x9/0x10 [ 508.432788] ? kasan_check_write+0x14/0x20 [ 508.443726] v9fs_session_init+0x1e7/0x1960 [ 508.448184] ? find_held_lock+0x35/0x130 [ 508.452253] ? fs_reclaim_acquire+0x20/0x20 [ 508.462420] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 508.468102] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 508.473662] ? v9fs_show_options+0x7e0/0x7e0 [ 508.483917] ? v9fs_mount+0x5e/0x920 [ 508.492540] ? rcu_read_lock_sched_held+0x110/0x130 [ 508.503603] ? kmem_cache_alloc_trace+0x34b/0x760 [ 508.508558] ? free_pages+0x46/0x50 [ 508.512195] ? selinux_sb_copy_data+0x319/0x4a0 [ 508.522653] v9fs_mount+0x7d/0x920 [ 508.526327] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 508.531876] mount_fs+0xae/0x331 [ 508.541206] vfs_kern_mount.part.0+0x6f/0x410 [ 508.545878] do_mount+0x53e/0x2bc0 [ 508.549434] ? copy_mount_string+0x40/0x40 [ 508.553676] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 508.566781] ? copy_mount_options+0x280/0x3a0 [ 508.571296] ksys_mount+0xdb/0x150 [ 508.574848] __x64_sys_mount+0xbe/0x150 [ 508.583643] do_syscall_64+0x103/0x610 [ 508.588621] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 508.593811] RIP: 0033:0x458da9 [ 508.601818] Code: Bad RIP value. [ 508.606260] RSP: 002b:00007fcc0a788c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 508.614812] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000458da9 [ 508.639854] RDX: 0000000020000240 RSI: 00000000200000c0 RDI: 0000000000000000 [ 508.652024] RBP: 000000000073bfa0 R08: 0000000020000300 R09: 0000000000000000 [ 508.664145] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc0a7896d4 [ 508.672579] R13: 00000000004c4da7 R14: 00000000004d8a20 R15: 00000000ffffffff [ 508.684662] [ 508.684662] Showing all locks held in the system: [ 508.692346] 2 locks held by kworker/1:0/19: [ 508.702377] #0: 0000000098713ee3 ((wq_completion)"events"){+.+.}, at: process_one_work+0x87e/0x1760 [ 508.712728] #1: 0000000082eb256a ((work_completion)(&m->rq)){+.+.}, at: process_one_work+0x8b4/0x1760 [ 508.731112] 1 lock held by khungtaskd/1033: [ 508.737456] #0: 000000008c1fd6fe (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x27e [ 508.750034] 1 lock held by udevd/3597: [ 508.753921] 1 lock held by rsyslogd/7534: [ 508.760068] #0: 000000009d84a1de (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 [ 508.771839] 2 locks held by getty/7657: [ 508.777804] #0: 00000000b93d821a (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 508.789921] #1: 00000000acd0b55f (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 508.800795] 2 locks held by getty/7658: [ 508.804767] #0: 000000001114a24b (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 508.818831] #1: 000000001ef45a16 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 508.829558] 2 locks held by getty/7659: [ 508.833526] #0: 000000007725dcc1 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 508.847578] #1: 000000002d930dc1 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 508.859530] 2 locks held by getty/7660: [ 508.863502] #0: 0000000031f5e137 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 508.874715] #1: 000000009646e9ed (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 508.889425] 2 locks held by getty/7661: [ 508.893395] #0: 00000000fde59845 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 508.902728] #1: 0000000030e03d5b (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 508.917464] 2 locks held by getty/7662: [ 508.921440] #0: 000000001822d662 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 508.932632] #1: 0000000057553464 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 508.944514] 2 locks held by getty/7663: [ 508.951470] #0: 000000005876b354 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 508.963461] #1: 0000000087afeaea (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 508.978211] [ 508.979855] ============================================= [ 508.979855] [ 508.988891] NMI backtrace for cpu 1 [ 508.992529] CPU: 1 PID: 1033 Comm: khungtaskd Not tainted 4.19.38 #6 [ 508.999016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 509.008360] Call Trace: [ 509.010948] dump_stack+0x172/0x1f0 [ 509.014582] nmi_cpu_backtrace.cold+0x63/0xa4 [ 509.019082] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 509.024024] nmi_trigger_cpumask_backtrace+0x1b0/0x1f8 [ 509.029320] arch_trigger_cpumask_backtrace+0x14/0x20 [ 509.034507] watchdog+0x9df/0xee0 [ 509.037971] kthread+0x357/0x430 [ 509.041338] ? reset_hung_task_detector+0x30/0x30 [ 509.046180] ? kthread_delayed_work_timer_fn+0x290/0x290 [ 509.051630] ret_from_fork+0x3a/0x50 [ 509.055469] Sending NMI from CPU 1 to CPUs 0: [ 509.060559] NMI backtrace for cpu 0 [ 509.060564] CPU: 0 PID: 3597 Comm: udevd Not tainted 4.19.38 #6 [ 509.060570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 509.060574] RIP: 0010:__lock_acquire+0x78c/0x48f0 [ 509.060585] Code: ea 03 80 3c 02 00 0f 85 62 2f 00 00 4d 8b a6 70 08 00 00 45 31 ed 45 85 c9 41 0f 94 c5 48 b8 00 00 00 00 00 fc ff df 4c 89 d2 <48> c1 ea 03 80 3c 02 00 0f 85 2c 2c 00 00 48 8b 54 24 78 4d 89 22 [ 509.060589] RSP: 0018:ffff888097997800 EFLAGS: 00000046 [ 509.060597] RAX: dffffc0000000000 RBX: 0000000000000481 RCX: 1ffff11012f31124 [ 509.060602] RDX: ffff888097988900 RSI: ffff888097988900 RDI: ffffffff89ed9cf0 [ 509.060606] RBP: ffff8880979979d0 R08: 0000000000000001 R09: 0000000000000000 [ 509.060611] R10: ffff888097988900 R11: 0000000000000481 R12: 0000000000000000 [ 509.060616] R13: 0000000000000001 R14: ffff888097988080 R15: ffff888097988918 [ 509.060622] FS: 00007f82297e07a0(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 509.060626] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 509.060631] CR2: ffffffffff600400 CR3: 00000000967cd000 CR4: 00000000001406f0 [ 509.060636] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 509.060641] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 509.060644] Call Trace: [ 509.060648] ? mark_held_locks+0x100/0x100 [ 509.060651] ? finish_task_switch+0x146/0x790 [ 509.060654] ? find_held_lock+0x35/0x130 [ 509.060658] ? __lock_acquire+0x6eb/0x48f0 [ 509.060661] ? ep_scan_ready_list+0x8d0/0xb20 [ 509.060665] lock_acquire+0x16f/0x3f0 [ 509.060668] ? ep_scan_ready_list+0x8d0/0xb20 [ 509.060672] ? ep_scan_ready_list+0x8d0/0xb20 [ 509.060675] __mutex_lock+0xf7/0x1300 [ 509.060678] ? ep_scan_ready_list+0x8d0/0xb20 [ 509.060682] ? select_estimate_accuracy+0xd4/0x330 [ 509.060686] ? ep_scan_ready_list+0x8d0/0xb20 [ 509.060689] ? select_estimate_accuracy+0xd4/0x330 [ 509.060693] ? mutex_trylock+0x1e0/0x1e0 [ 509.060696] ? mark_held_locks+0x100/0x100 [ 509.060699] ? kvm_clock_read+0x18/0x30 [ 509.060702] ? ep_poll+0x37b/0xd10 [ 509.060706] ? do_epoll_wait+0x200/0x200 [ 509.060709] mutex_lock_nested+0x16/0x20 [ 509.060712] ? mutex_lock_nested+0x16/0x20 [ 509.060716] ep_scan_ready_list+0x8d0/0xb20 [ 509.060719] ? _raw_spin_unlock_irq+0x28/0x90 [ 509.060722] ? ep_poll+0x37b/0xd10 [ 509.060738] ? reverse_path_check_proc+0x3e0/0x3e0 [ 509.060742] ? lockdep_hardirqs_on+0x415/0x5d0 [ 509.060745] ? trace_hardirqs_on+0x67/0x230 [ 509.060748] ? kasan_check_read+0x11/0x20 [ 509.060751] ep_poll+0x3b4/0xd10 [ 509.060755] ? _raw_spin_unlock_irq+0x28/0x90 [ 509.060758] ? finish_task_switch+0x146/0x790 [ 509.060762] ? _raw_spin_unlock_irq+0x28/0x90 [ 509.060765] ? do_epoll_create+0x3a0/0x3a0 [ 509.060768] ? kasan_check_write+0x14/0x20 [ 509.060772] ? finish_task_switch+0x1f0/0x790 [ 509.060775] ? __switch_to_asm+0x34/0x70 [ 509.060778] ? __switch_to_asm+0x40/0x70 [ 509.060781] ? __schedule+0x81b/0x1d00 [ 509.060785] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 509.060788] ? __fget_light+0x1a9/0x230 [ 509.060792] do_epoll_wait+0x1b3/0x200 [ 509.060795] __x64_sys_epoll_wait+0x97/0xf0 [ 509.060799] do_syscall_64+0x103/0x610 [ 509.060802] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 509.060805] RIP: 0033:0x7f8228ef4943 [ 509.060815] Code: 00 31 d2 48 29 c2 64 89 11 48 83 c8 ff eb ea 90 90 90 90 90 90 90 90 83 3d b5 dc 2a 00 00 75 13 49 89 ca b8 e8 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 34 c3 48 83 ec 08 e8 3b c4 00 00 48 89 04 24 [ 509.060819] RSP: 002b:00007ffe7701c308 EFLAGS: 00000246 ORIG_RAX: 00000000000000e8 [ 509.060827] RAX: ffffffffffffffda RBX: 0000000000000bb8 RCX: 00007f8228ef4943 [ 509.060832] RDX: 0000000000000008 RSI: 00007ffe7701c400 RDI: 000000000000000a [ 509.060836] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 509.060841] R10: 0000000000000bb8 R11: 0000000000000246 R12: 0000000000000003 [ 509.060845] R13: 0000000000000000 R14: 00000000019c8380 R15: 0000000001978030 [ 509.066850] Kernel panic - not syncing: hung_task: blocked tasks [ 509.440929] CPU: 1 PID: 1033 Comm: khungtaskd Not tainted 4.19.38 #6 [ 509.447417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 509.456764] Call Trace: [ 509.459364] dump_stack+0x172/0x1f0 [ 509.462998] panic+0x263/0x51d [ 509.466284] ? __warn_printk+0xf3/0xf3 [ 509.470172] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 509.475109] ? ___preempt_schedule+0x16/0x18 [ 509.479615] ? nmi_trigger_cpumask_backtrace+0x165/0x1f8 [ 509.485063] ? nmi_trigger_cpumask_backtrace+0x1c1/0x1f8 [ 509.490516] ? nmi_trigger_cpumask_backtrace+0x1cb/0x1f8 [ 509.495966] ? nmi_trigger_cpumask_backtrace+0x165/0x1f8 [ 509.501421] watchdog+0x9f0/0xee0 [ 509.504881] kthread+0x357/0x430 [ 509.508244] ? reset_hung_task_detector+0x30/0x30 [ 509.513176] ? kthread_delayed_work_timer_fn+0x290/0x290 [ 509.518643] ret_from_fork+0x3a/0x50 [ 509.523926] Kernel Offset: disabled [ 509.527553] Rebooting in 86400 seconds..