0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x7ffff000}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) 10:44:08 executing program 4: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r2, 0x4, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0xffffff81}]) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r3, &(0x7f00000004c0)={{0x1b, 0x28, 0x7, 0x7, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) pipe(&(0x7f0000000040)={0xffffffffffffffff}) io_cancel(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x5, r3, &(0x7f0000000500)="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", 0x1000, 0xfffffffffffffffe, 0x0, 0x0, r4}, &(0x7f0000000100)) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) 10:44:08 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b280707000000420000001b3efccc9fddbb6d300000000000001b0000000000000000000000000038"], 0x40) 10:44:08 executing program 3: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0xe9deff7f, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) 10:44:08 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x210000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_mmap='cache=mmap'}, {@access_any='access=any'}]}}) 10:44:08 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b280707000000420000003e3efccc9fddbb6d300000000000001b0000000000000000000000000038"], 0x40) 10:44:08 executing program 3: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0xa6ffffff, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) 10:44:09 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080), 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:44:09 executing program 4: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x7fffdee9, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) 10:44:09 executing program 3: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x60000000, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) 10:44:09 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x210000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_mmap='cache=mmap'}, {@access_any='access=any'}]}}) 10:44:09 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b280707000000420000009b3efccc9fddbb6d300000000000001b0000000000000000000000000038"], 0x40) 10:44:09 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) 10:44:09 executing program 4: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x40000000, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) 10:44:09 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) 10:44:09 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000007ffccc9fddbb6d300000000000001b0000000000000000000000000038"], 0x40) 10:44:09 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a28070700000042000000003efccc9fddbb6d300000000000001b0000000000000000000000000038"], 0x40) 10:44:09 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_mmap='cache=mmap'}, {@access_any='access=any'}]}}) 10:44:09 executing program 4: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0xc000000, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) 10:44:10 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080), 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:44:10 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000040)=0x1) ioctl$DRM_IOCTL_AGP_INFO(r3, 0x80386433, &(0x7f0000000040)=""/28) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r6 = dup(r5) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000040)=0x1) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000040)=0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f0000000100)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@empty, @in=@local, 0x4e20, 0x80, 0x4e22, 0x1, 0x2, 0xe0, 0x80, 0x3a, 0x0, r7}, {0x33, 0xa1, 0x401, 0x7f, 0x3bd3e257, 0x9, 0x1f, 0x3}, {0x4, 0x6, 0x6, 0x5}, 0x4, 0x6e6bb6, 0x0, 0x1, 0x3, 0x2}, {{@in=@private=0xa010101, 0x4d2, 0x3c}, 0x2, @in=@private=0xa010101, 0x3503, 0x1, 0x0, 0x6, 0x7, 0x6, 0xfff}}, 0xe8) setsockopt$TIPC_MCAST_BROADCAST(r6, 0x10f, 0x85) 10:44:10 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0928070700000042000000003efccc9fddbb6d300000000000001b0000000000000000000000000038"], 0x40) 10:44:10 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000009bfccc9fddbb6d300000000000001b0000000000000000000000000038"], 0x40) 10:44:10 executing program 3: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x6000000, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) 10:44:10 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b2807070000004200000001fffccc9fddbb6d300000000000001b0000000000000000000000000038"], 0x40) 10:44:10 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000040)=0x1) sendmsg$key(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x2, 0x14, 0x90, 0x9, 0x3b, 0x0, 0x70bd29, 0x25dfdbfb, [@sadb_key={0x14, 0x9, 0x4a0, 0x0, "331bccc9257f5239053778a8496e113fb50e2f9a4fa1ac8d669a0c719de8d6ac19c17bdd645b767af865e22ce4bbd61d296fbab3c761db4ffffac826b70457316efe50ee7fcc2e53cf4ba52dde798c6c80fee481b92db28e530eca76964555740e00dcd8619425139a15e93ecffe405a3de3bb14710d7708aeedc5006c31fe9535c258f28c94d82c526741c8c913ee057af66157"}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x1, {0x6, 0x0, 0x40, 0x81, 0x0, 0xfffeffff, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x19}, @in=@dev={0xac, 0x14, 0x14, 0x28}}}, @sadb_key={0x7, 0x9, 0x158, 0x0, "3acfdd3dd5dc014d9be0fa6f6f59d70e44f6ec7ae70fc26928841d0c97888f4130df59f3de3549fc6c2598"}, @sadb_x_sec_ctx={0x16, 0x18, 0x4, 0x5, 0xa4, "3e875b0a638d5aadce940da581f779a841e1fc3be0bf14fb64f06fd13ecdb31ab5aa0e5ccdd010f551826976b0ec2fa046e5a9e67237e0c56f28d70cef86d104c94300c9344e2f1271443dacd18ff7a2f6a542696f66e1d72e9a02ead49f547b8279e914a0aa3348a9a761395924c4e18bc88d191f8e1ae77e4ab15bdfdf520d21f41bf03ea52ac0b1b29cef1904fcb233b8f9891db155b9cc50cc9f67793d988a9f6f0a"}]}, 0x1d8}}, 0x60004800) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) 10:44:10 executing program 4: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x8100, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) 10:44:10 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b2807070000004200000010fffccc9fddbb6d300000000000001b0000000000000000000000000038"], 0x40) 10:44:10 executing program 3: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x6558, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) 10:44:10 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, 0x0) 10:44:10 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000fefffccc9fddbb6d300000000000001b0000000000000000000000000038"], 0x40) 10:44:11 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:44:11 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() exit_group(0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}}, 0x0, 0xe, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) 10:44:11 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b280707000000420000000002fccc9fddbb6d300000000000001b0000000000000000000000000038"], 0x40) 10:44:11 executing program 4: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x6558, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) 10:44:11 executing program 3 (fault-call:5 fault-nth:0): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:11 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, 0x0) 10:44:11 executing program 4 (fault-call:3 fault-nth:0): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) [ 946.622674][T31439] FAULT_INJECTION: forcing a failure. [ 946.622674][T31439] name failslab, interval 1, probability 0, space 0, times 0 10:44:11 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b280707000000420000000003fccc9fddbb6d300000000000001b0000000000000000000000000038"], 0x40) [ 946.709779][T31439] CPU: 0 PID: 31439 Comm: syz-executor.3 Not tainted 5.7.0-rc6-syzkaller #0 [ 946.718512][T31439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 946.727355][T31453] FAULT_INJECTION: forcing a failure. [ 946.727355][T31453] name failslab, interval 1, probability 0, space 0, times 0 [ 946.728722][T31439] Call Trace: [ 946.728778][T31439] dump_stack+0x188/0x20d [ 946.728798][T31439] should_fail.cold+0x5/0xa [ 946.728824][T31439] ? lock_downgrade+0x840/0x840 [ 946.760379][T31439] ? fault_create_debugfs_attr+0x140/0x140 [ 946.760408][T31439] should_failslab+0x5/0xf [ 946.760427][T31439] __kmalloc_track_caller+0x2d1/0x7a0 [ 946.760443][T31439] ? strndup_user+0x70/0xe0 [ 946.760461][T31439] ? vfs_write+0x161/0x5d0 [ 946.760479][T31439] ? fput_many+0x2f/0x1a0 [ 946.760507][T31439] memdup_user+0x22/0xd0 [ 946.793648][T31439] strndup_user+0x70/0xe0 [ 946.793673][T31439] __x64_sys_mount+0xe6/0x230 [ 946.802683][T31439] do_syscall_64+0xf6/0x7d0 10:44:11 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b280707000000420000000004fccc9fddbb6d300000000000001b0000000000000000000000000038"], 0x40) [ 946.802729][T31439] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 946.802747][T31439] RIP: 0033:0x45ca29 [ 946.817101][T31439] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 946.837070][T31439] RSP: 002b:00007f0805530c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 946.845500][T31439] RAX: ffffffffffffffda RBX: 00000000004f62c0 RCX: 000000000045ca29 [ 946.853487][T31439] RDX: 00000000200000c0 RSI: 0000000020000100 RDI: 0000000000000000 [ 946.861678][T31439] RBP: 000000000078bf00 R08: 0000000020000140 R09: 0000000000000000 [ 946.869677][T31439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 946.877671][T31439] R13: 0000000000000752 R14: 00000000004ca315 R15: 00007f08055316d4 [ 946.885812][T31453] CPU: 1 PID: 31453 Comm: syz-executor.4 Not tainted 5.7.0-rc6-syzkaller #0 [ 946.894533][T31453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 946.904598][T31453] Call Trace: [ 946.907916][T31453] dump_stack+0x188/0x20d [ 946.912276][T31453] should_fail.cold+0x5/0xa [ 946.916802][T31453] ? lock_downgrade+0x840/0x840 [ 946.921710][T31453] ? fault_create_debugfs_attr+0x140/0x140 [ 946.927549][T31453] should_failslab+0x5/0xf [ 946.932593][T31453] __kmalloc+0x2d9/0x7a0 [ 946.936857][T31453] ? __x64_sys_memfd_create+0x131/0x460 [ 946.942420][T31453] ? __this_cpu_preempt_check+0x28/0x190 [ 946.948080][T31453] ? __sb_end_write+0x101/0x1d0 [ 946.952964][T31453] ? strnlen_user+0x1f5/0x2e0 [ 946.957669][T31453] __x64_sys_memfd_create+0x131/0x460 [ 946.963087][T31453] ? ksys_write+0x1a5/0x250 [ 946.967616][T31453] ? memfd_fcntl+0x16f0/0x16f0 [ 946.972399][T31453] ? __ia32_sys_clock_settime+0x260/0x260 [ 946.978168][T31453] ? trace_hardirqs_off_caller+0x55/0x230 [ 946.983923][T31453] do_syscall_64+0xf6/0x7d0 [ 946.988546][T31453] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 946.994476][T31453] RIP: 0033:0x45ca29 10:44:11 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000040)=0x1) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x140f, 0x100, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xa, 0x45, 'ipoib\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x54}}, 0x8080) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcsa\x00', 0x80000, 0x0) ioctl$BLKTRACESTOP(r6, 0x1275, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000040)=0x1) setsockopt$TIPC_MCAST_REPLICAST(r5, 0x10f, 0x86) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) 10:44:11 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, 0x0) [ 946.998381][T31453] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 947.018021][T31453] RSP: 002b:00007f75ccd45a68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 947.018037][T31453] RAX: ffffffffffffffda RBX: 00000000005089c0 RCX: 000000000045ca29 [ 947.018044][T31453] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c1b91 10:44:11 executing program 4 (fault-call:3 fault-nth:1): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) [ 947.018052][T31453] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000001 [ 947.018061][T31453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 947.018070][T31453] R13: 0000000000000bee R14: 00000000004ce2f7 R15: 00007f75ccd466d4 [ 947.271869][T31467] FAULT_INJECTION: forcing a failure. [ 947.271869][T31467] name failslab, interval 1, probability 0, space 0, times 0 [ 947.297256][T31467] CPU: 1 PID: 31467 Comm: syz-executor.4 Not tainted 5.7.0-rc6-syzkaller #0 [ 947.305987][T31467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 947.316091][T31467] Call Trace: [ 947.319418][T31467] dump_stack+0x188/0x20d [ 947.323798][T31467] should_fail.cold+0x5/0xa [ 947.328336][T31467] ? lock_downgrade+0x840/0x840 [ 947.333218][T31467] ? fault_create_debugfs_attr+0x140/0x140 [ 947.339120][T31467] ? shmem_destroy_inode+0x70/0x70 [ 947.344256][T31467] should_failslab+0x5/0xf [ 947.348696][T31467] kmem_cache_alloc+0x29b/0x740 [ 947.353576][T31467] ? find_held_lock+0x2d/0x110 [ 947.358400][T31467] ? __alloc_fd+0x46d/0x600 [ 947.363222][T31467] ? shmem_destroy_inode+0x70/0x70 [ 947.368462][T31467] shmem_alloc_inode+0x18/0x40 [ 947.373251][T31467] ? shmem_destroy_inode+0x70/0x70 [ 947.378564][T31467] alloc_inode+0x61/0x1e0 [ 947.382947][T31467] new_inode_pseudo+0x14/0xe0 [ 947.388198][T31467] new_inode+0x1b/0x40 [ 947.394293][T31467] shmem_get_inode+0x84/0x7e0 [ 947.399270][T31467] __shmem_file_setup.part.0+0x7a/0x2b0 [ 947.405458][T31467] shmem_file_setup+0x61/0x90 [ 947.410266][T31467] __x64_sys_memfd_create+0x28a/0x460 [ 947.415674][T31467] ? memfd_fcntl+0x16f0/0x16f0 [ 947.420559][T31467] ? __ia32_sys_clock_settime+0x260/0x260 [ 947.426413][T31467] ? trace_hardirqs_off_caller+0x55/0x230 [ 947.432397][T31467] do_syscall_64+0xf6/0x7d0 [ 947.436963][T31467] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 947.442904][T31467] RIP: 0033:0x45ca29 [ 947.446819][T31467] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 947.466566][T31467] RSP: 002b:00007f75ccd45a68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 947.474996][T31467] RAX: ffffffffffffffda RBX: 00000000005089c0 RCX: 000000000045ca29 [ 947.482992][T31467] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c1b91 [ 947.491175][T31467] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000001 [ 947.499204][T31467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 947.507204][T31467] R13: 0000000000000bee R14: 00000000004ce2f7 R15: 00007f75ccd466d4 10:44:12 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:44:12 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_mmap='cache=mmap'}, {@access_any='access=any'}]}}) 10:44:12 executing program 3 (fault-call:5 fault-nth:1): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:12 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b280707000000420000000005fccc9fddbb6d300000000000001b0000000000000000000000000038"], 0x40) 10:44:12 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r1, &(0x7f00000004c0)={{0x1b, 0x28, 0x7, 0x7, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000001500)) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r2, &(0x7f00000004c0)={{0x1b, 0x28, 0x7, 0x7, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f0000001540)) syz_mount_image$nfs4(&(0x7f0000000040)='nfs4\x00', &(0x7f00000000c0)='./file0\x00', 0x2, 0x5, &(0x7f00000003c0)=[{&(0x7f0000000100)="b505c0238a7f6ddaa03b5282f42ba6a333a9e8bfa8f20f4da73583c48fc8c439a5a02a851d1d3b7ba2003da9480e2d6259ada7a43149b36d464f43a875c05db5085fa27b706e2499b8515445afa312ff75b82d36235252756a4fbbf8fd6e5bbd14ce8a1179a544ed113624e1b99ba14a6c2cfc27abcebfa6d329c328b03821", 0x7f, 0xfffffffffffff9b5}, {&(0x7f0000000180)="56c1317998d899bff1000a3f1024ac0aeca94d1ab9973ac9cd0ba69268e3ead6c5e67f5287e992c1fd5ae073f28bba2c0c5a9837", 0x34, 0xffffffffffffff01}, {&(0x7f0000000240)="609a0736d35b24c714106462d3acb0ed1f497524a1a2fac929a1bd4a1fd5f9c1d563fae8cebde6d0b18f84110c7c8da971b5f207e60422afc6c46510e465abc72620", 0x42, 0x40}, {&(0x7f0000000380)="aa2dfa07a99e0ccde20a674cde123b02", 0x10}, {&(0x7f0000000500)="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", 0x1000, 0x2}], 0xc8800, &(0x7f0000000440)='GPL&,eth1!GPL%!!,\x00') r3 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pidfd_open(r3, 0x0) [ 947.653442][T31482] 9pnet: Insufficient options for proto=fd [ 947.658229][T31480] FAULT_INJECTION: forcing a failure. [ 947.658229][T31480] name failslab, interval 1, probability 0, space 0, times 0 10:44:12 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_mmap='cache=mmap'}, {@access_any='access=any'}]}}) 10:44:12 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b280707000000420000000008fccc9fddbb6d300000000000001b0000000000000000000000000038"], 0x40) [ 947.778778][T31480] CPU: 0 PID: 31480 Comm: syz-executor.3 Not tainted 5.7.0-rc6-syzkaller #0 [ 947.788317][T31480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 947.798481][T31480] Call Trace: [ 947.801851][T31480] dump_stack+0x188/0x20d [ 947.806242][T31480] should_fail.cold+0x5/0xa [ 947.810993][T31480] ? lock_downgrade+0x840/0x840 [ 947.818547][T31480] ? fault_create_debugfs_attr+0x140/0x140 [ 947.824399][T31480] should_failslab+0x5/0xf 10:44:12 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_mmap='cache=mmap'}, {@access_any='access=any'}]}}) [ 947.825451][T31490] 9pnet: Insufficient options for proto=fd [ 947.828851][T31480] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 947.828869][T31480] ? __might_fault+0x190/0x1d0 [ 947.828888][T31480] ? _copy_from_user+0x13c/0x1a0 [ 947.828914][T31480] copy_mount_options+0x53/0x160 [ 947.828934][T31480] __x64_sys_mount+0x15b/0x230 [ 947.828957][T31480] do_syscall_64+0xf6/0x7d0 [ 947.828982][T31480] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 947.870242][T31480] RIP: 0033:0x45ca29 [ 947.874206][T31480] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 947.894171][T31480] RSP: 002b:00007f0805530c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 947.896489][T31494] 9pnet: Insufficient options for proto=fd [ 947.902598][T31480] RAX: ffffffffffffffda RBX: 00000000004f62c0 RCX: 000000000045ca29 [ 947.902608][T31480] RDX: 00000000200000c0 RSI: 0000000020000100 RDI: 0000000000000000 [ 947.902615][T31480] RBP: 000000000078bf00 R08: 0000000020000140 R09: 0000000000000000 [ 947.902622][T31480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 947.902631][T31480] R13: 0000000000000752 R14: 00000000004ca315 R15: 00007f08055316d4 10:44:12 executing program 4 (fault-call:3 fault-nth:2): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:12 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) connect(r0, &(0x7f00000000c0)=@x25={0x9, @null=' \x00'}, 0x80) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) 10:44:12 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b280707000000420000000009fccc9fddbb6d300000000000001b0000000000000000000000000038"], 0x40) 10:44:12 executing program 3 (fault-call:5 fault-nth:2): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) [ 948.166128][T31504] FAULT_INJECTION: forcing a failure. [ 948.166128][T31504] name failslab, interval 1, probability 0, space 0, times 0 [ 948.198030][T31508] FAULT_INJECTION: forcing a failure. [ 948.198030][T31508] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 948.211633][T31508] CPU: 0 PID: 31508 Comm: syz-executor.3 Not tainted 5.7.0-rc6-syzkaller #0 [ 948.220327][T31508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 948.230400][T31508] Call Trace: [ 948.233719][T31508] dump_stack+0x188/0x20d [ 948.238084][T31508] should_fail.cold+0x5/0xa [ 948.242639][T31508] ? fault_create_debugfs_attr+0x140/0x140 [ 948.248465][T31508] ? mark_held_locks+0xe0/0xe0 [ 948.253357][T31508] ? mark_held_locks+0xe0/0xe0 [ 948.258155][T31508] __alloc_pages_nodemask+0x17a/0x810 [ 948.263566][T31508] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 948.270371][T31508] ? find_held_lock+0x2d/0x110 [ 948.275193][T31508] ? lock_downgrade+0x840/0x840 [ 948.284284][T31508] cache_grow_begin+0x8c/0xc10 [ 948.289083][T31508] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 948.294574][T31508] kmem_cache_alloc_trace+0x6ed/0x7d0 [ 948.301124][T31508] copy_mount_options+0x53/0x160 [ 948.306105][T31508] __x64_sys_mount+0x15b/0x230 [ 948.311344][T31508] do_syscall_64+0xf6/0x7d0 [ 948.315997][T31508] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 948.322101][T31508] RIP: 0033:0x45ca29 [ 948.326016][T31508] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 948.345647][T31508] RSP: 002b:00007f0805530c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 948.354083][T31508] RAX: ffffffffffffffda RBX: 00000000004f62c0 RCX: 000000000045ca29 [ 948.362073][T31508] RDX: 00000000200000c0 RSI: 0000000020000100 RDI: 0000000000000000 [ 948.370057][T31508] RBP: 000000000078bf00 R08: 0000000020000140 R09: 0000000000000000 [ 948.378043][T31508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 948.386031][T31508] R13: 0000000000000752 R14: 00000000004ca315 R15: 00007f08055316d4 [ 948.427715][T31504] CPU: 0 PID: 31504 Comm: syz-executor.4 Not tainted 5.7.0-rc6-syzkaller #0 [ 948.436460][T31504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 948.446535][T31504] Call Trace: [ 948.449856][T31504] dump_stack+0x188/0x20d [ 948.454225][T31504] should_fail.cold+0x5/0xa [ 948.458778][T31504] ? lock_downgrade+0x840/0x840 [ 948.464528][T31504] ? fault_create_debugfs_attr+0x140/0x140 [ 948.470372][T31504] should_failslab+0x5/0xf 10:44:13 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:44:13 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno'}, 0x2c, {[{@cache_mmap='cache=mmap'}, {@access_any='access=any'}]}}) 10:44:13 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000000afccc9fddbb6d300000000000001b0000000000000000000000000038"], 0x40) 10:44:13 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x8000}, 0x4) r2 = accept(r1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000000900690a953df41b0100f8ff00001100319a5bee94e83f040000539e7eba33a8a3187e5e04e78dd12609a7c81df95e6bc5a52ce2b78c4860b0fa485849888b036b78edd49c3a9e8e13c31fa555eeb643c0f777c755e7f934f42c76964e7277cb2301cc63a820efb9e8f644ab26a0df2a212a6847ed8059e0d21bd43c6eab60a6825e7b502e9fdcb5a420372f0190b1fdd310e3f425df8fc48a762b310e9747870ac4231223ebb511ef351baf4626111752", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB], 0x28}}, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@loopback, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e21, 0x8, 0x4e24, 0x4, 0xa, 0x0, 0x20, 0x1d, r7, 0xee00}, {0x1000, 0xfffffffffffffffe, 0xbf90, 0x1, 0x1ff, 0x1, 0x54, 0x6}, {0x1d39, 0x9, 0xffff}, 0x6, 0x6e6bb2, 0x1, 0x0, 0x1, 0x1}, {{@in=@rand_addr=0x64010100, 0x4d3, 0x6c}, 0x0, @in=@broadcast, 0x34ff, 0x4, 0x0, 0xb7, 0x4, 0x10001, 0xffff7c34}}, 0xe8) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x40, 0x0, 0x0, 0x0, 0x0, 0x81, 0x44000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x121b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000100), 0x4) sendmsg(r8, &(0x7f0000000080), 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) [ 948.474843][T31504] kmem_cache_alloc+0x29b/0x740 [ 948.479714][T31504] ? timestamp_truncate+0x20f/0x2f0 [ 948.484927][T31504] ? inode_init_owner+0x330/0x330 [ 948.490018][T31504] ? ktime_get_coarse_real_ts64+0xe5/0x280 [ 948.495852][T31504] __d_alloc+0x2b/0x8e0 [ 948.500044][T31504] d_alloc_pseudo+0x19/0x70 [ 948.504739][T31504] alloc_file_pseudo+0xc6/0x250 [ 948.509635][T31504] ? lockdep_init_map_waits+0x26a/0x890 [ 948.515229][T31504] ? alloc_file+0x4e0/0x4e0 [ 948.519764][T31504] ? lockdep_annotate_inode_mutex_key+0x3c/0x70 [ 948.526117][T31504] ? shmem_get_inode+0x484/0x7e0 [ 948.531086][T31504] __shmem_file_setup.part.0+0x102/0x2b0 [ 948.536748][T31504] shmem_file_setup+0x61/0x90 [ 948.541457][T31504] __x64_sys_memfd_create+0x28a/0x460 [ 948.546857][T31504] ? memfd_fcntl+0x16f0/0x16f0 [ 948.551655][T31504] ? __ia32_sys_clock_settime+0x260/0x260 [ 948.557515][T31504] ? trace_hardirqs_off_caller+0x55/0x230 [ 948.563361][T31504] do_syscall_64+0xf6/0x7d0 [ 948.567980][T31504] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 948.573894][T31504] RIP: 0033:0x45ca29 [ 948.577843][T31504] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 948.597482][T31504] RSP: 002b:00007f75ccd45a68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 948.605925][T31504] RAX: ffffffffffffffda RBX: 00000000005089c0 RCX: 000000000045ca29 [ 948.613916][T31504] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c1b91 [ 948.622005][T31504] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000001 [ 948.629996][T31504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 948.638014][T31504] R13: 0000000000000bee R14: 00000000004ce2f7 R15: 00007f75ccd466d4 10:44:13 executing program 3 (fault-call:5 fault-nth:3): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) [ 948.710467][T31529] 9pnet: Insufficient options for proto=fd 10:44:13 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000380)={'broute\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000100)=[{}, {}], 0x0, [{}, {}]}, 0x98) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0xc0385720, &(0x7f00000000c0)) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) 10:44:13 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno'}, 0x2c, {[{@cache_mmap='cache=mmap'}, {@access_any='access=any'}]}}) 10:44:13 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000000dfccc9fddbb6d300000000000001b0000000000000000000000000038"], 0x40) 10:44:13 executing program 4 (fault-call:3 fault-nth:3): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:13 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lsetxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'U-', 0x5}, 0x16, 0x2) exit_group(0x0) mkdir(0x0, 0x0) write(r0, &(0x7f0000000040)="410f0cdd7a887a853278025f6795da8ce1cf14cf63b762b6b165b8054969d241560320cc1317540dfb", 0x29) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) 10:44:13 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno'}, 0x2c, {[{@cache_mmap='cache=mmap'}, {@access_any='access=any'}]}}) [ 948.917648][T31538] FAULT_INJECTION: forcing a failure. [ 948.917648][T31538] name failslab, interval 1, probability 0, space 0, times 0 [ 948.918176][T31537] 9pnet: Insufficient options for proto=fd [ 948.990254][T31538] CPU: 1 PID: 31538 Comm: syz-executor.3 Not tainted 5.7.0-rc6-syzkaller #0 [ 948.993213][T31543] FAULT_INJECTION: forcing a failure. [ 948.993213][T31543] name failslab, interval 1, probability 0, space 0, times 0 [ 948.999010][T31538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 948.999019][T31538] Call Trace: [ 948.999052][T31538] dump_stack+0x188/0x20d [ 948.999075][T31538] should_fail.cold+0x5/0xa [ 948.999095][T31538] ? lock_downgrade+0x840/0x840 [ 948.999112][T31538] ? fault_create_debugfs_attr+0x140/0x140 [ 948.999138][T31538] should_failslab+0x5/0xf [ 948.999154][T31538] kmem_cache_alloc+0x29b/0x740 [ 948.999171][T31538] ? handle_mm_fault+0x29e/0x660 [ 948.999193][T31538] getname_flags+0xd2/0x5b0 [ 948.999212][T31538] user_path_at_empty+0x2a/0x50 [ 948.999233][T31538] do_mount+0x132/0x1b30 [ 948.999259][T31538] ? copy_mount_string+0x40/0x40 [ 948.999343][T31538] ? copy_user_enhanced_fast_string+0xe/0x30 [ 948.999364][T31538] ? _copy_from_user+0x13c/0x1a0 [ 948.999390][T31538] __x64_sys_mount+0x18f/0x230 [ 948.999410][T31538] do_syscall_64+0xf6/0x7d0 [ 948.999431][T31538] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 948.999443][T31538] RIP: 0033:0x45ca29 [ 948.999461][T31538] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 948.999470][T31538] RSP: 002b:00007f0805530c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 10:44:13 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000009bfccc9fddbb6d300000000000001b0000000000000000000000000038"], 0x40) [ 948.999483][T31538] RAX: ffffffffffffffda RBX: 00000000004f62c0 RCX: 000000000045ca29 [ 948.999499][T31538] RDX: 00000000200000c0 RSI: 0000000020000100 RDI: 0000000000000000 [ 949.153437][T31538] RBP: 000000000078bf00 R08: 0000000020000140 R09: 0000000000000000 [ 949.153448][T31538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 949.153458][T31538] R13: 0000000000000752 R14: 00000000004ca315 R15: 00007f08055316d4 [ 949.164304][T31543] CPU: 0 PID: 31543 Comm: syz-executor.4 Not tainted 5.7.0-rc6-syzkaller #0 [ 949.164317][T31543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 949.164323][T31543] Call Trace: [ 949.164349][T31543] dump_stack+0x188/0x20d [ 949.164371][T31543] should_fail.cold+0x5/0xa [ 949.164390][T31543] ? lock_downgrade+0x840/0x840 [ 949.164406][T31543] ? fault_create_debugfs_attr+0x140/0x140 [ 949.164430][T31543] should_failslab+0x5/0xf [ 949.164445][T31543] kmem_cache_alloc+0x29b/0x740 [ 949.164462][T31543] ? lock_downgrade+0x840/0x840 [ 949.164484][T31543] __alloc_file+0x21/0x350 [ 949.164501][T31543] alloc_empty_file+0x6d/0x170 [ 949.164518][T31543] alloc_file+0x5e/0x4e0 10:44:14 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:44:14 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x3, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000040)=0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f00000000c0)=0x908, 0x4) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000100), 0x4) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000040)) 10:44:14 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_mmap='cache=mmap'}]}}) 10:44:14 executing program 4 (fault-call:3 fault-nth:4): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) [ 949.164537][T31543] alloc_file_pseudo+0x165/0x250 [ 949.164554][T31543] ? alloc_file+0x4e0/0x4e0 [ 949.164573][T31543] ? shmem_get_inode+0x484/0x7e0 [ 949.164593][T31543] __shmem_file_setup.part.0+0x102/0x2b0 [ 949.164612][T31543] shmem_file_setup+0x61/0x90 [ 949.164633][T31543] __x64_sys_memfd_create+0x28a/0x460 [ 949.164652][T31543] ? memfd_fcntl+0x16f0/0x16f0 [ 949.164670][T31543] ? __ia32_sys_clock_settime+0x260/0x260 [ 949.164687][T31543] ? trace_hardirqs_off_caller+0x55/0x230 [ 949.164713][T31543] do_syscall_64+0xf6/0x7d0 [ 949.164736][T31543] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 949.164749][T31543] RIP: 0033:0x45ca29 [ 949.164766][T31543] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 10:44:14 executing program 3 (fault-call:5 fault-nth:4): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:14 executing program 4 (fault-call:3 fault-nth:5): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:14 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100), 0x4) getsockopt(r0, 0x7, 0x100, &(0x7f00000000c0)=""/140, &(0x7f0000000040)=0x8c) r1 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000040)=0x1) r5 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, r8, 0x11, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x5}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x28, 0x0, 0x800, 0x70bd27, 0xa5dfdbfe, {}, [@NL80211_ATTR_REG_RULES={0x14, 0x22, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x16, 0x4, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x18}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c880}, 0x4000000) exit_group(0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) [ 949.164774][T31543] RSP: 002b:00007f75ccd45a68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 949.164789][T31543] RAX: ffffffffffffffda RBX: 00000000005089c0 RCX: 000000000045ca29 [ 949.164798][T31543] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c1b91 [ 949.164806][T31543] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000001 [ 949.164815][T31543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 949.164824][T31543] R13: 0000000000000bee R14: 00000000004ce2f7 R15: 00007f75ccd466d4 [ 949.473187][T31564] FAULT_INJECTION: forcing a failure. [ 949.473187][T31564] name failslab, interval 1, probability 0, space 0, times 0 [ 949.473211][T31564] CPU: 1 PID: 31564 Comm: syz-executor.4 Not tainted 5.7.0-rc6-syzkaller #0 10:44:14 executing program 4 (fault-call:3 fault-nth:6): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:14 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_xen(&(0x7f0000000040)='syz\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0xc2, &(0x7f0000000140)={'trans=xen,', {[{@privport='privport'}, {@cache_fscache='cache=fscache'}, {@cache_fscache='cache=fscache'}], [{@hash='hash'}, {@dont_measure='dont_measure'}, {@audit='audit'}]}}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100), 0x4) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fadf0f15a36a15", 0xfffffffffffffffb}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) [ 949.473221][T31564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 949.473228][T31564] Call Trace: [ 949.473252][T31564] dump_stack+0x188/0x20d [ 949.473277][T31564] should_fail.cold+0x5/0xa [ 949.473305][T31564] ? lock_downgrade+0x840/0x840 [ 949.473329][T31564] ? fault_create_debugfs_attr+0x140/0x140 [ 949.473357][T31564] should_failslab+0x5/0xf [ 949.473380][T31564] kmem_cache_alloc+0x29b/0x740 [ 949.473399][T31564] ? kmem_cache_alloc+0x358/0x740 [ 949.473420][T31564] security_file_alloc+0x34/0x160 [ 949.473439][T31564] __alloc_file+0xd8/0x350 [ 949.473457][T31564] alloc_empty_file+0x6d/0x170 [ 949.473476][T31564] alloc_file+0x5e/0x4e0 [ 949.473499][T31564] alloc_file_pseudo+0x165/0x250 [ 949.473516][T31564] ? alloc_file+0x4e0/0x4e0 [ 949.473538][T31564] ? shmem_get_inode+0x484/0x7e0 [ 949.473559][T31564] __shmem_file_setup.part.0+0x102/0x2b0 [ 949.473577][T31564] shmem_file_setup+0x61/0x90 [ 949.473597][T31564] __x64_sys_memfd_create+0x28a/0x460 10:44:14 executing program 4 (fault-call:3 fault-nth:7): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) [ 949.473613][T31564] ? memfd_fcntl+0x16f0/0x16f0 [ 949.473629][T31564] ? __ia32_sys_clock_settime+0x260/0x260 [ 949.473645][T31564] ? trace_hardirqs_off_caller+0x55/0x230 [ 949.473670][T31564] do_syscall_64+0xf6/0x7d0 [ 949.473692][T31564] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 949.473705][T31564] RIP: 0033:0x45ca29 [ 949.473720][T31564] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 949.473727][T31564] RSP: 002b:00007f75ccd45a68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f 10:44:15 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) [ 949.473741][T31564] RAX: ffffffffffffffda RBX: 00000000005089c0 RCX: 000000000045ca29 [ 949.473750][T31564] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c1b91 [ 949.473760][T31564] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000001 [ 949.473774][T31564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 949.473784][T31564] R13: 0000000000000bee R14: 00000000004ce2f7 R15: 00007f75ccd466d4 [ 949.776167][T31574] FAULT_INJECTION: forcing a failure. [ 949.776167][T31574] name failslab, interval 1, probability 0, space 0, times 0 [ 949.776276][T31574] CPU: 1 PID: 31574 Comm: syz-executor.4 Not tainted 5.7.0-rc6-syzkaller #0 [ 949.776286][T31574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 949.776292][T31574] Call Trace: [ 949.776318][T31574] dump_stack+0x188/0x20d [ 949.776342][T31574] should_fail.cold+0x5/0xa [ 949.776362][T31574] ? fault_create_debugfs_attr+0x140/0x140 [ 949.776389][T31574] should_failslab+0x5/0xf [ 949.776405][T31574] __kmalloc+0x2d9/0x7a0 [ 949.776424][T31574] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 949.776440][T31574] ? tomoyo_realpath_from_path+0xc2/0x620 [ 949.776457][T31574] ? lock_release+0x800/0x800 [ 949.776470][T31574] ? print_usage_bug+0x240/0x240 [ 949.776490][T31574] tomoyo_realpath_from_path+0xc2/0x620 [ 949.776507][T31574] ? tomoyo_profile+0x42/0x50 [ 949.776528][T31574] tomoyo_path_perm+0x214/0x400 [ 949.776541][T31574] ? tomoyo_path_perm+0x1ba/0x400 [ 949.776559][T31574] ? tomoyo_check_open_permission+0x370/0x370 [ 949.776577][T31574] ? mark_held_locks+0xe0/0xe0 [ 949.776593][T31574] ? __fget_files+0x30d/0x500 [ 949.776640][T31574] ? rcu_read_lock_any_held+0xcd/0xf0 [ 949.776656][T31574] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 949.776683][T31574] security_path_truncate+0xeb/0x150 [ 949.776699][T31574] do_sys_ftruncate+0x3fc/0x570 [ 949.776722][T31574] do_syscall_64+0xf6/0x7d0 [ 949.776744][T31574] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 949.776758][T31574] RIP: 0033:0x45c9f7 [ 949.776776][T31574] Code: 24 29 d7 48 69 ff e8 03 00 00 48 89 7c 24 08 48 89 e7 e8 3c e5 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 b8 4d 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 949.776785][T31574] RSP: 002b:00007f75ccd45a68 EFLAGS: 00000213 ORIG_RAX: 000000000000004d [ 949.776801][T31574] RAX: ffffffffffffffda RBX: 00000000005089c0 RCX: 000000000045c9f7 [ 949.776809][T31574] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 949.776819][T31574] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000001 [ 949.776827][T31574] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000000000005 [ 949.776837][T31574] R13: 0000000000000bee R14: 00000000004ce2f7 R15: 00007f75ccd466d4 [ 949.776880][T31574] ERROR: Out of memory at tomoyo_realpath_from_path. [ 949.806488][T31574] hfsplus: unable to find HFS+ superblock [ 949.892572][T31584] FAULT_INJECTION: forcing a failure. [ 949.892572][T31584] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 949.892594][T31584] CPU: 0 PID: 31584 Comm: syz-executor.3 Not tainted 5.7.0-rc6-syzkaller #0 [ 949.892604][T31584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 949.892610][T31584] Call Trace: [ 949.892636][T31584] dump_stack+0x188/0x20d [ 949.892659][T31584] should_fail.cold+0x5/0xa [ 949.892679][T31584] ? do_raw_spin_lock+0x129/0x2e0 [ 949.892696][T31584] ? fault_create_debugfs_attr+0x140/0x140 [ 949.892712][T31584] ? mark_held_locks+0xe0/0xe0 [ 949.892726][T31584] ? fault_around_bytes_set+0x90/0x90 [ 949.892751][T31584] __alloc_pages_nodemask+0x17a/0x810 [ 949.892773][T31584] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 949.892786][T31584] ? find_held_lock+0x2d/0x110 [ 949.892809][T31584] ? lock_downgrade+0x840/0x840 [ 949.892829][T31584] cache_grow_begin+0x8c/0xc10 [ 949.892844][T31584] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 949.892861][T31584] kmem_cache_alloc+0x670/0x740 [ 949.892887][T31584] getname_flags+0xd2/0x5b0 [ 949.892904][T31584] user_path_at_empty+0x2a/0x50 [ 949.892921][T31584] do_mount+0x132/0x1b30 [ 949.892939][T31584] ? copy_mount_string+0x40/0x40 [ 949.892954][T31584] ? copy_user_enhanced_fast_string+0xe/0x30 [ 949.892966][T31584] ? _copy_from_user+0x13c/0x1a0 [ 949.892983][T31584] __x64_sys_mount+0x18f/0x230 [ 949.893013][T31584] do_syscall_64+0xf6/0x7d0 [ 949.893035][T31584] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 949.893047][T31584] RIP: 0033:0x45ca29 [ 949.893063][T31584] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 949.893071][T31584] RSP: 002b:00007f080550fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 949.893082][T31584] RAX: ffffffffffffffda RBX: 00000000004f62c0 RCX: 000000000045ca29 [ 949.893088][T31584] RDX: 00000000200000c0 RSI: 0000000020000100 RDI: 0000000000000000 [ 949.893094][T31584] RBP: 000000000078bfa0 R08: 0000000020000140 R09: 0000000000000000 [ 949.893099][T31584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 949.893105][T31584] R13: 0000000000000752 R14: 00000000004ca315 R15: 00007f08055106d4 [ 949.910166][T31584] 9pnet: Insufficient options for proto=fd [ 949.982417][T31591] FAULT_INJECTION: forcing a failure. [ 949.982417][T31591] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 949.982447][T31591] CPU: 0 PID: 31591 Comm: syz-executor.4 Not tainted 5.7.0-rc6-syzkaller #0 [ 949.982458][T31591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 949.982464][T31591] Call Trace: [ 949.982495][T31591] dump_stack+0x188/0x20d [ 949.982521][T31591] should_fail.cold+0x5/0xa [ 949.982541][T31591] ? fault_create_debugfs_attr+0x140/0x140 [ 949.982626][T31591] ? is_bpf_text_address+0xa9/0x160 [ 949.982667][T31591] __alloc_pages_nodemask+0x17a/0x810 [ 949.982693][T31591] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 949.982722][T31591] ? mark_held_locks+0xe0/0xe0 [ 949.982750][T31591] cache_grow_begin+0x8c/0xc10 [ 949.982770][T31591] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 949.982790][T31591] __kmalloc+0x6dc/0x7a0 [ 949.982806][T31591] ? tomoyo_realpath_from_path+0xc2/0x620 [ 949.982830][T31591] ? lock_release+0x800/0x800 [ 949.982847][T31591] ? print_usage_bug+0x240/0x240 [ 949.982868][T31591] tomoyo_realpath_from_path+0xc2/0x620 [ 949.982887][T31591] ? tomoyo_profile+0x42/0x50 [ 949.982909][T31591] tomoyo_path_perm+0x214/0x400 [ 949.982927][T31591] ? tomoyo_path_perm+0x1ba/0x400 [ 949.982948][T31591] ? tomoyo_check_open_permission+0x370/0x370 [ 949.982976][T31591] ? mark_held_locks+0xe0/0xe0 [ 949.982993][T31591] ? __fget_files+0x30d/0x500 [ 949.983045][T31591] ? rcu_read_lock_any_held+0xcd/0xf0 [ 949.983061][T31591] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 949.983091][T31591] security_path_truncate+0xeb/0x150 [ 949.983109][T31591] do_sys_ftruncate+0x3fc/0x570 [ 949.983142][T31591] do_syscall_64+0xf6/0x7d0 [ 949.983176][T31591] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 949.983191][T31591] RIP: 0033:0x45c9f7 [ 949.983215][T31591] Code: 24 29 d7 48 69 ff e8 03 00 00 48 89 7c 24 08 48 89 e7 e8 3c e5 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 b8 4d 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 949.983225][T31591] RSP: 002b:00007f75ccd45a68 EFLAGS: 00000213 ORIG_RAX: 000000000000004d [ 949.983245][T31591] RAX: ffffffffffffffda RBX: 00000000005089c0 RCX: 000000000045c9f7 [ 949.983256][T31591] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 949.983266][T31591] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000001 [ 949.983275][T31591] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000000000005 [ 949.983285][T31591] R13: 0000000000000bee R14: 00000000004ce2f7 R15: 00007f75ccd466d4 [ 950.030015][T31591] hfsplus: unable to find HFS+ superblock [ 950.268299][T31598] FAULT_INJECTION: forcing a failure. [ 950.268299][T31598] name failslab, interval 1, probability 0, space 0, times 0 [ 950.268323][T31598] CPU: 1 PID: 31598 Comm: syz-executor.4 Not tainted 5.7.0-rc6-syzkaller #0 [ 950.268334][T31598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 950.268340][T31598] Call Trace: [ 950.268368][T31598] dump_stack+0x188/0x20d [ 950.268392][T31598] should_fail.cold+0x5/0xa [ 950.268412][T31598] ? lock_downgrade+0x840/0x840 [ 950.268431][T31598] ? fault_create_debugfs_attr+0x140/0x140 [ 950.268458][T31598] should_failslab+0x5/0xf [ 950.268478][T31598] kmem_cache_alloc+0x29b/0x740 [ 950.268560][T31598] ? fsnotify_first_mark+0x200/0x200 [ 950.268576][T31598] ? lock_downgrade+0x840/0x840 [ 950.268602][T31598] getname_flags+0xd2/0x5b0 [ 950.268621][T31598] do_sys_openat2+0x3fc/0x7d0 [ 950.268644][T31598] ? file_open_root+0x400/0x400 [ 950.268672][T31598] do_sys_open+0xc3/0x140 [ 950.268687][T31598] ? filp_open+0x70/0x70 [ 950.268709][T31598] ? trace_hardirqs_off_caller+0x55/0x230 [ 950.268741][T31598] do_syscall_64+0xf6/0x7d0 [ 950.268774][T31598] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 950.268787][T31598] RIP: 0033:0x416821 [ 950.268803][T31598] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 950.268812][T31598] RSP: 002b:00007f75ccd45a60 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 10:44:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb08300000000000001b0000000000000000000000000038"], 0x40) 10:44:16 executing program 4 (fault-call:3 fault-nth:8): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:16 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:44:16 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) 10:44:16 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b280707000000420000000003fccc9fddbb6d300000000000001b0000000000000000000000000038"], 0x40) [ 950.268829][T31598] RAX: ffffffffffffffda RBX: 00000000005089c0 RCX: 0000000000416821 [ 950.268838][T31598] RDX: 00007f75ccd45b0a RSI: 0000000000000002 RDI: 00007f75ccd45b00 [ 950.268847][T31598] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 950.268856][T31598] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000005 [ 950.268864][T31598] R13: 0000000000000bee R14: 00000000004ce2f7 R15: 00007f75ccd466d4 10:44:16 executing program 3 (fault-call:5 fault-nth:5): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) [ 951.665407][T31617] FAULT_INJECTION: forcing a failure. [ 951.665407][T31617] name failslab, interval 1, probability 0, space 0, times 0 [ 951.681048][T31617] CPU: 0 PID: 31617 Comm: syz-executor.4 Not tainted 5.7.0-rc6-syzkaller #0 [ 951.689760][T31617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 951.699832][T31617] Call Trace: [ 951.703157][T31617] dump_stack+0x188/0x20d [ 951.707541][T31617] should_fail.cold+0x5/0xa 10:44:16 executing program 1: socket$inet(0x10, 0x2000000002, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x4000054) r1 = socket$inet6(0xa, 0x1, 0x8010000400000084) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'veth1_to_team\x00', 0x4000}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'rose0\x00'}) shutdown(r1, 0x0) r2 = userfaultfd(0x6d6a6d473084fbcd) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000080)={{&(0x7f00003e9000/0x3000)=nil, 0x3000}, 0x0, 0x6000000}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000040)=0xd235, 0x4) [ 951.707563][T31617] ? lock_downgrade+0x840/0x840 [ 951.707582][T31617] ? fault_create_debugfs_attr+0x140/0x140 [ 951.707612][T31617] should_failslab+0x5/0xf 10:44:16 executing program 4 (fault-call:3 fault-nth:9): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) [ 951.707631][T31617] kmem_cache_alloc+0x29b/0x740 [ 951.707650][T31617] ? fsnotify_first_mark+0x200/0x200 [ 951.707665][T31617] ? lock_downgrade+0x840/0x840 [ 951.707687][T31617] getname_flags+0xd2/0x5b0 [ 951.707706][T31617] do_sys_openat2+0x3fc/0x7d0 [ 951.707736][T31617] ? file_open_root+0x400/0x400 10:44:16 executing program 4 (fault-call:3 fault-nth:10): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) [ 951.707763][T31617] do_sys_open+0xc3/0x140 [ 951.707779][T31617] ? filp_open+0x70/0x70 [ 951.707801][T31617] ? trace_hardirqs_off_caller+0x55/0x230 [ 951.707829][T31617] do_syscall_64+0xf6/0x7d0 [ 951.707849][T31617] entry_SYSCALL_64_after_hwframe+0x49/0xb3 10:44:16 executing program 4 (fault-call:3 fault-nth:11): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) [ 951.707863][T31617] RIP: 0033:0x416821 [ 951.707882][T31617] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 951.707891][T31617] RSP: 002b:00007f75ccd45a60 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 951.707908][T31617] RAX: ffffffffffffffda RBX: 00000000005089c0 RCX: 0000000000416821 [ 951.707918][T31617] RDX: 00007f75ccd45b0a RSI: 0000000000000002 RDI: 00007f75ccd45b00 [ 951.707927][T31617] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 951.707935][T31617] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000005 [ 951.707944][T31617] R13: 0000000000000bee R14: 00000000004ce2f7 R15: 00007f75ccd466d4 [ 951.821788][T31628] FAULT_INJECTION: forcing a failure. [ 951.821788][T31628] name failslab, interval 1, probability 0, space 0, times 0 [ 951.821811][T31628] CPU: 1 PID: 31628 Comm: syz-executor.3 Not tainted 5.7.0-rc6-syzkaller #0 [ 951.821819][T31628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 951.821824][T31628] Call Trace: [ 951.821847][T31628] dump_stack+0x188/0x20d [ 951.821869][T31628] should_fail.cold+0x5/0xa [ 951.821888][T31628] ? fault_create_debugfs_attr+0x140/0x140 [ 951.821914][T31628] should_failslab+0x5/0xf [ 951.821930][T31628] __kmalloc+0x2d9/0x7a0 [ 951.821947][T31628] ? tomoyo_encode2.part.0+0xec/0x3b0 [ 951.821962][T31628] ? mark_lock+0x12b/0xf10 [ 951.821985][T31628] tomoyo_encode2.part.0+0xec/0x3b0 [ 951.822008][T31628] ? do_syscall_64+0xf6/0x7d0 [ 951.822025][T31628] tomoyo_encode+0x28/0x50 [ 951.822039][T31628] tomoyo_mount_acl+0xe0/0x840 [ 951.822059][T31628] ? unlazy_walk+0x15b/0x3a0 [ 951.822075][T31628] ? tomoyo_check_mount_acl+0x1a0/0x1a0 [ 951.822092][T31628] ? mark_held_locks+0xe0/0xe0 [ 951.822109][T31628] ? do_raw_spin_unlock+0x171/0x260 [ 951.822127][T31628] ? trace_hardirqs_off+0x50/0x220 [ 951.822158][T31628] ? putname+0xe1/0x120 [ 951.822175][T31628] ? tomoyo_profile+0x42/0x50 [ 951.822184][T31628] ? tomoyo_get_mode.part.0+0x127/0x160 [ 951.822194][T31628] tomoyo_mount_permission+0x151/0x3f0 [ 951.822208][T31628] ? tomoyo_mount_permission+0xfa/0x3f0 [ 951.822216][T31628] ? tomoyo_mount_acl+0x840/0x840 [ 951.822310][T31628] ? __phys_addr_symbol+0x2c/0x70 [ 951.822351][T31628] security_sb_mount+0x82/0xc0 [ 951.822379][T31628] do_mount+0x1b4/0x1b30 [ 951.822405][T31628] ? copy_mount_string+0x40/0x40 [ 951.822429][T31628] ? _copy_from_user+0x13c/0x1a0 [ 951.822452][T31628] __x64_sys_mount+0x18f/0x230 [ 951.822465][T31628] do_syscall_64+0xf6/0x7d0 [ 951.822478][T31628] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 951.822487][T31628] RIP: 0033:0x45ca29 [ 951.822496][T31628] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 951.822500][T31628] RSP: 002b:00007f080550fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 951.822509][T31628] RAX: ffffffffffffffda RBX: 00000000004f62c0 RCX: 000000000045ca29 [ 951.822513][T31628] RDX: 00000000200000c0 RSI: 0000000020000100 RDI: 0000000000000000 [ 951.822518][T31628] RBP: 000000000078bfa0 R08: 0000000020000140 R09: 0000000000000000 [ 951.822522][T31628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 951.822527][T31628] R13: 0000000000000752 R14: 00000000004ca315 R15: 00007f08055106d4 [ 951.921704][T31634] FAULT_INJECTION: forcing a failure. [ 951.921704][T31634] name failslab, interval 1, probability 0, space 0, times 0 [ 951.921729][T31634] CPU: 0 PID: 31634 Comm: syz-executor.4 Not tainted 5.7.0-rc6-syzkaller #0 [ 951.921741][T31634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 951.921748][T31634] Call Trace: [ 951.921778][T31634] dump_stack+0x188/0x20d [ 951.921803][T31634] should_fail.cold+0x5/0xa [ 951.921822][T31634] ? lock_downgrade+0x840/0x840 [ 951.921838][T31634] ? fault_create_debugfs_attr+0x140/0x140 [ 951.921867][T31634] should_failslab+0x5/0xf [ 951.921883][T31634] kmem_cache_alloc+0x29b/0x740 [ 951.921903][T31634] ? kmem_cache_alloc+0x358/0x740 [ 951.921929][T31634] security_file_alloc+0x34/0x160 [ 951.921948][T31634] __alloc_file+0xd8/0x350 [ 951.921964][T31634] alloc_empty_file+0x6d/0x170 [ 951.921985][T31634] path_openat+0xe3/0x27d0 [ 951.922006][T31634] ? mark_held_locks+0xe0/0xe0 [ 951.922023][T31634] ? path_lookupat.isra.0+0x530/0x530 [ 951.922039][T31634] ? mark_held_locks+0xe0/0xe0 [ 951.922060][T31634] ? mark_held_locks+0xe0/0xe0 [ 951.922093][T31634] do_filp_open+0x192/0x260 [ 951.922106][T31634] ? may_open_dev+0xf0/0xf0 [ 951.922121][T31634] ? __alloc_fd+0x46d/0x600 [ 951.922136][T31634] ? lock_downgrade+0x840/0x840 [ 951.922151][T31634] ? do_raw_spin_lock+0x129/0x2e0 [ 951.922175][T31634] ? _raw_spin_unlock+0x24/0x40 [ 951.922189][T31634] ? __alloc_fd+0x46d/0x600 [ 951.922211][T31634] do_sys_openat2+0x585/0x7d0 [ 951.922235][T31634] ? file_open_root+0x400/0x400 [ 951.922253][T31634] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 951.922271][T31634] do_sys_open+0xc3/0x140 [ 951.922283][T31634] ? filp_open+0x70/0x70 [ 951.922299][T31634] ? switch_fpu_return+0x1db/0x4b0 [ 951.922318][T31634] ? trace_hardirqs_off_caller+0x55/0x230 [ 951.922343][T31634] do_syscall_64+0xf6/0x7d0 [ 951.922361][T31634] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 951.922374][T31634] RIP: 0033:0x416821 [ 951.922390][T31634] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 951.922398][T31634] RSP: 002b:00007f75ccd45a60 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 951.922413][T31634] RAX: ffffffffffffffda RBX: 00000000005089c0 RCX: 0000000000416821 [ 951.922423][T31634] RDX: 00007f75ccd45b0a RSI: 0000000000000002 RDI: 00007f75ccd45b00 [ 951.922432][T31634] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 951.922442][T31634] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000005 [ 951.922451][T31634] R13: 0000000000000bee R14: 00000000004ce2f7 R15: 00007f75ccd466d4 [ 952.058580][T31638] FAULT_INJECTION: forcing a failure. [ 952.058580][T31638] name failslab, interval 1, probability 0, space 0, times 0 [ 952.058603][T31638] CPU: 1 PID: 31638 Comm: syz-executor.4 Not tainted 5.7.0-rc6-syzkaller #0 [ 952.058614][T31638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 952.058620][T31638] Call Trace: [ 952.058656][T31638] dump_stack+0x188/0x20d [ 952.058679][T31638] should_fail.cold+0x5/0xa [ 952.058701][T31638] ? lock_downgrade+0x840/0x840 [ 952.058719][T31638] ? fault_create_debugfs_attr+0x140/0x140 [ 952.058745][T31638] should_failslab+0x5/0xf [ 952.058762][T31638] kmem_cache_alloc+0x29b/0x740 [ 952.058784][T31638] ? stack_trace_save+0x8c/0xc0 [ 952.058801][T31638] ? stack_trace_consume_entry+0x160/0x160 [ 952.058821][T31638] __alloc_file+0x21/0x350 [ 952.058838][T31638] alloc_empty_file+0x6d/0x170 [ 952.058857][T31638] path_openat+0xe3/0x27d0 [ 952.058879][T31638] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 952.058896][T31638] ? path_lookupat.isra.0+0x530/0x530 [ 952.058912][T31638] ? mark_held_locks+0xe0/0xe0 [ 952.058927][T31638] ? lock_acquire+0x1f2/0x8f0 [ 952.058949][T31638] do_filp_open+0x192/0x260 [ 952.058964][T31638] ? may_open_dev+0xf0/0xf0 [ 952.058978][T31638] ? __alloc_fd+0x46d/0x600 [ 952.058997][T31638] ? lock_downgrade+0x840/0x840 [ 952.059014][T31638] ? do_raw_spin_lock+0x129/0x2e0 [ 952.059041][T31638] ? _raw_spin_unlock+0x24/0x40 [ 952.059055][T31638] ? __alloc_fd+0x46d/0x600 [ 952.059078][T31638] do_sys_openat2+0x585/0x7d0 [ 952.059097][T31638] ? file_open_root+0x400/0x400 [ 952.059124][T31638] do_sys_open+0xc3/0x140 [ 952.059140][T31638] ? filp_open+0x70/0x70 [ 952.059161][T31638] ? trace_hardirqs_off_caller+0x55/0x230 [ 952.059186][T31638] do_syscall_64+0xf6/0x7d0 [ 952.059207][T31638] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 952.059220][T31638] RIP: 0033:0x416821 [ 952.059237][T31638] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 952.059246][T31638] RSP: 002b:00007f75ccd45a60 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 952.059263][T31638] RAX: ffffffffffffffda RBX: 00000000005089c0 RCX: 0000000000416821 [ 952.059273][T31638] RDX: 00007f75ccd45b0a RSI: 0000000000000002 RDI: 00007f75ccd45b00 [ 952.059282][T31638] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 952.059292][T31638] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000005 [ 952.059301][T31638] R13: 0000000000000bee R14: 00000000004ce2f7 R15: 00007f75ccd466d4 [ 952.158449][T31642] FAULT_INJECTION: forcing a failure. [ 952.158449][T31642] name failslab, interval 1, probability 0, space 0, times 0 [ 952.158472][T31642] CPU: 0 PID: 31642 Comm: syz-executor.4 Not tainted 5.7.0-rc6-syzkaller #0 [ 952.158483][T31642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 952.158490][T31642] Call Trace: [ 952.158520][T31642] dump_stack+0x188/0x20d [ 952.158544][T31642] should_fail.cold+0x5/0xa [ 952.158566][T31642] ? lock_downgrade+0x840/0x840 [ 952.158584][T31642] ? fault_create_debugfs_attr+0x140/0x140 [ 952.158614][T31642] should_failslab+0x5/0xf [ 952.158632][T31642] kmem_cache_alloc+0x29b/0x740 [ 952.158656][T31642] ? stack_trace_save+0x8c/0xc0 [ 952.158674][T31642] ? stack_trace_consume_entry+0x160/0x160 [ 952.158698][T31642] __alloc_file+0x21/0x350 [ 952.158717][T31642] alloc_empty_file+0x6d/0x170 [ 952.158736][T31642] path_openat+0xe3/0x27d0 [ 952.158760][T31642] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 952.158784][T31642] ? path_lookupat.isra.0+0x530/0x530 [ 952.158801][T31642] ? mark_held_locks+0xe0/0xe0 [ 952.158817][T31642] ? lock_acquire+0x1f2/0x8f0 [ 952.158841][T31642] do_filp_open+0x192/0x260 [ 952.158857][T31642] ? may_open_dev+0xf0/0xf0 [ 952.158872][T31642] ? __alloc_fd+0x46d/0x600 [ 952.158891][T31642] ? lock_downgrade+0x840/0x840 [ 952.158908][T31642] ? do_raw_spin_lock+0x129/0x2e0 [ 952.158936][T31642] ? _raw_spin_unlock+0x24/0x40 [ 952.158949][T31642] ? __alloc_fd+0x46d/0x600 [ 952.158976][T31642] do_sys_openat2+0x585/0x7d0 [ 952.159000][T31642] ? file_open_root+0x400/0x400 [ 952.159023][T31642] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 952.159042][T31642] do_sys_open+0xc3/0x140 [ 952.159062][T31642] ? filp_open+0x70/0x70 [ 952.159082][T31642] ? switch_fpu_return+0x1db/0x4b0 [ 952.159099][T31642] ? trace_hardirqs_off_caller+0x55/0x230 [ 952.159122][T31642] do_syscall_64+0xf6/0x7d0 [ 953.155648][T31642] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 953.155668][T31642] RIP: 0033:0x416821 [ 953.165557][T31642] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 953.165564][T31642] RSP: 002b:00007f75ccd45a60 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 953.165577][T31642] RAX: ffffffffffffffda RBX: 00000000005089c0 RCX: 0000000000416821 [ 953.165584][T31642] RDX: 00007f75ccd45b0a RSI: 0000000000000002 RDI: 00007f75ccd45b00 [ 953.165599][T31642] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 953.217925][T31642] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000005 10:44:18 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb09300000000000001b0000000000000000000000000038"], 0x40) 10:44:18 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000040)=0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x4, 0x4}, 0x6) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) 10:44:18 executing program 3 (fault-call:5 fault-nth:6): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:18 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:44:18 executing program 4 (fault-call:3 fault-nth:12): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:18 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000040)=0x1) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x2, 0x7, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xfffffffffffffffe}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x840) r3 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) [ 953.217934][T31642] R13: 0000000000000bee R14: 00000000004ce2f7 R15: 00007f75ccd466d4 [ 953.392750][T31658] FAULT_INJECTION: forcing a failure. [ 953.392750][T31658] name failslab, interval 1, probability 0, space 0, times 0 [ 953.392775][T31658] CPU: 0 PID: 31658 Comm: syz-executor.4 Not tainted 5.7.0-rc6-syzkaller #0 [ 953.392791][T31658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 953.392798][T31658] Call Trace: [ 953.392824][T31658] dump_stack+0x188/0x20d [ 953.392848][T31658] should_fail.cold+0x5/0xa [ 953.392869][T31658] ? fault_create_debugfs_attr+0x140/0x140 [ 953.392897][T31658] should_failslab+0x5/0xf [ 953.392913][T31658] __kmalloc+0x2d9/0x7a0 [ 953.392930][T31658] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 953.392946][T31658] ? tomoyo_realpath_from_path+0xc2/0x620 [ 953.392966][T31658] ? lock_release+0x800/0x800 [ 953.392982][T31658] ? print_usage_bug+0x240/0x240 [ 953.393004][T31658] tomoyo_realpath_from_path+0xc2/0x620 [ 953.393029][T31658] tomoyo_check_open_permission+0x26d/0x370 [ 953.393045][T31658] ? tomoyo_path_number_perm+0x4d0/0x4d0 [ 953.393061][T31658] ? __lock_acquire+0xcbb/0x4c50 [ 953.393105][T31658] ? lock_downgrade+0x840/0x840 [ 953.393118][T31658] ? do_raw_spin_lock+0x129/0x2e0 [ 953.393135][T31658] tomoyo_file_open+0xa3/0xd0 [ 953.393152][T31658] security_file_open+0x6e/0x410 [ 953.393172][T31658] do_dentry_open+0x358/0x1290 [ 953.393196][T31658] ? devcgroup_check_permission+0x1a8/0x420 [ 953.393214][T31658] ? security_inode_permission+0xc4/0xf0 [ 953.393232][T31658] ? chown_common+0x550/0x550 [ 953.393251][T31658] ? inode_permission+0xab/0x500 [ 953.393278][T31658] path_openat+0x1e59/0x27d0 [ 953.393308][T31658] ? path_lookupat.isra.0+0x530/0x530 [ 953.393329][T31658] ? lock_acquire+0x1f2/0x8f0 [ 953.393354][T31658] do_filp_open+0x192/0x260 [ 953.393378][T31658] ? may_open_dev+0xf0/0xf0 [ 953.393405][T31658] ? do_raw_spin_lock+0x129/0x2e0 [ 953.393437][T31658] ? _raw_spin_unlock+0x24/0x40 [ 953.393454][T31658] ? __alloc_fd+0x46d/0x600 [ 953.393479][T31658] do_sys_openat2+0x585/0x7d0 [ 953.393501][T31658] ? file_open_root+0x400/0x400 [ 953.393522][T31658] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 953.393541][T31658] do_sys_open+0xc3/0x140 [ 953.393553][T31658] ? filp_open+0x70/0x70 [ 953.393570][T31658] ? switch_fpu_return+0x1db/0x4b0 [ 953.393589][T31658] ? trace_hardirqs_off_caller+0x55/0x230 [ 953.393610][T31658] do_syscall_64+0xf6/0x7d0 [ 953.393628][T31658] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 953.393641][T31658] RIP: 0033:0x416821 [ 953.393657][T31658] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 953.393664][T31658] RSP: 002b:00007f75ccd45a60 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 953.393679][T31658] RAX: ffffffffffffffda RBX: 00000000005089c0 RCX: 0000000000416821 [ 953.393688][T31658] RDX: 00007f75ccd45b0a RSI: 0000000000000002 RDI: 00007f75ccd45b00 [ 953.393695][T31658] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 953.393703][T31658] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000005 [ 953.393713][T31658] R13: 0000000000000bee R14: 00000000004ce2f7 R15: 00007f75ccd466d4 [ 953.393895][T31658] ERROR: Out of memory at tomoyo_realpath_from_path. [ 953.441377][T31658] hfsplus: unable to find HFS+ superblock [ 953.450427][T31662] FAULT_INJECTION: forcing a failure. [ 953.450427][T31662] name failslab, interval 1, probability 0, space 0, times 0 [ 953.450450][T31662] CPU: 0 PID: 31662 Comm: syz-executor.3 Not tainted 5.7.0-rc6-syzkaller #0 [ 953.450460][T31662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 953.450466][T31662] Call Trace: [ 953.450490][T31662] dump_stack+0x188/0x20d [ 953.450514][T31662] should_fail.cold+0x5/0xa [ 953.450535][T31662] ? fault_create_debugfs_attr+0x140/0x140 [ 953.450565][T31662] should_failslab+0x5/0xf [ 953.450581][T31662] __kmalloc+0x2d9/0x7a0 [ 953.450597][T31662] ? tomoyo_encode2.part.0+0xec/0x3b0 [ 953.450611][T31662] ? kfree+0x1eb/0x2b0 [ 953.450627][T31662] ? tomoyo_realpath_from_path+0x18f/0x620 [ 953.450649][T31662] tomoyo_encode2.part.0+0xec/0x3b0 [ 953.450670][T31662] tomoyo_encode+0x28/0x50 [ 953.450686][T31662] tomoyo_mount_acl+0x320/0x840 [ 953.450711][T31662] ? unlazy_walk+0x15b/0x3a0 [ 953.450729][T31662] ? tomoyo_check_mount_acl+0x1a0/0x1a0 [ 953.450747][T31662] ? mark_held_locks+0xe0/0xe0 [ 953.450767][T31662] ? trace_hardirqs_off+0x50/0x220 [ 953.450804][T31662] ? putname+0xe1/0x120 [ 953.450827][T31662] ? tomoyo_profile+0x42/0x50 [ 953.450843][T31662] ? tomoyo_get_mode.part.0+0x127/0x160 [ 953.450863][T31662] tomoyo_mount_permission+0x151/0x3f0 [ 953.450876][T31662] ? tomoyo_mount_permission+0xfa/0x3f0 [ 953.450892][T31662] ? tomoyo_mount_acl+0x840/0x840 [ 953.450908][T31662] ? __phys_addr_symbol+0x2c/0x70 [ 953.450944][T31662] security_sb_mount+0x82/0xc0 [ 953.450966][T31662] do_mount+0x1b4/0x1b30 [ 953.450989][T31662] ? copy_mount_string+0x40/0x40 [ 953.451012][T31662] ? _copy_from_user+0x13c/0x1a0 [ 953.451037][T31662] __x64_sys_mount+0x18f/0x230 [ 953.451058][T31662] do_syscall_64+0xf6/0x7d0 [ 953.451081][T31662] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 953.451094][T31662] RIP: 0033:0x45ca29 [ 953.451110][T31662] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 953.451118][T31662] RSP: 002b:00007f080550fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 953.451133][T31662] RAX: ffffffffffffffda RBX: 00000000004f62c0 RCX: 000000000045ca29 [ 953.451142][T31662] RDX: 00000000200000c0 RSI: 0000000020000100 RDI: 0000000000000000 [ 953.451151][T31662] RBP: 000000000078bfa0 R08: 0000000020000140 R09: 0000000000000000 10:44:19 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b280707000000420000000003fccc9fddbb6d300000000000001b0000000000000000000000000038"], 0x40) 10:44:19 executing program 4 (fault-call:3 fault-nth:13): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:19 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100), 0x4) recvmmsg(r1, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4093, 0xffd}, {&(0x7f0000000140)=""/120, 0x78}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) 10:44:19 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb0a300000000000001b0000000000000000000000000038"], 0x40) [ 953.451160][T31662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 953.451169][T31662] R13: 0000000000000752 R14: 00000000004ca315 R15: 00007f08055106d4 10:44:19 executing program 3 (fault-call:5 fault-nth:7): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:19 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e2800", 0x26}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) [ 954.271231][T31681] FAULT_INJECTION: forcing a failure. [ 954.271231][T31681] name failslab, interval 1, probability 0, space 0, times 0 10:44:19 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb0d300000000000001b0000000000000000000000000038"], 0x40) [ 954.334160][T31681] CPU: 0 PID: 31681 Comm: syz-executor.4 Not tainted 5.7.0-rc6-syzkaller #0 [ 954.342879][T31681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 954.353153][T31681] Call Trace: [ 954.356478][T31681] dump_stack+0x188/0x20d [ 954.360860][T31681] should_fail.cold+0x5/0xa [ 954.365399][T31681] ? fault_create_debugfs_attr+0x140/0x140 [ 954.371415][T31681] should_failslab+0x5/0xf [ 954.375871][T31681] __kmalloc+0x2d9/0x7a0 10:44:19 executing program 5 (fault-call:4 fault-nth:0): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) [ 954.375893][T31681] ? tomoyo_encode2.part.0+0xec/0x3b0 [ 954.375914][T31681] ? d_absolute_path+0x10c/0x160 [ 954.375935][T31681] ? __d_path+0x140/0x140 [ 954.375957][T31681] tomoyo_encode2.part.0+0xec/0x3b0 [ 954.375977][T31681] tomoyo_encode+0x28/0x50 [ 954.375993][T31681] tomoyo_realpath_from_path+0x184/0x620 [ 954.376014][T31681] tomoyo_path_number_perm+0x1c2/0x4d0 [ 954.376026][T31681] ? tomoyo_path_number_perm+0x17a/0x4d0 [ 954.376042][T31681] ? tomoyo_execute_permission+0x470/0x470 [ 954.376069][T31681] ? __fget_files+0x30d/0x500 [ 954.376104][T31681] ? __fget_files+0x32f/0x500 [ 954.376125][T31681] ? ksys_dup3+0x3c0/0x3c0 [ 954.376155][T31681] security_file_ioctl+0x6c/0xb0 [ 954.376175][T31681] ksys_ioctl+0x50/0x180 [ 954.376193][T31681] __x64_sys_ioctl+0x6f/0xb0 [ 954.376211][T31681] ? lockdep_hardirqs_on+0x463/0x620 [ 954.376231][T31681] do_syscall_64+0xf6/0x7d0 [ 954.376254][T31681] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 954.376267][T31681] RIP: 0033:0x45c8f7 [ 954.376283][T31681] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 954.376291][T31681] RSP: 002b:00007f75ccd45a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 954.376304][T31681] RAX: ffffffffffffffda RBX: 00000000005089c0 RCX: 000000000045c8f7 [ 954.376312][T31681] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 954.376319][T31681] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 954.376327][T31681] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000005 [ 954.376335][T31681] R13: 0000000000000bee R14: 00000000004ce2f7 R15: 00007f75ccd466d4 [ 954.428321][T31691] FAULT_INJECTION: forcing a failure. [ 954.428321][T31691] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 954.600926][T31691] CPU: 0 PID: 31691 Comm: syz-executor.3 Not tainted 5.7.0-rc6-syzkaller #0 [ 954.609635][T31691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 954.619905][T31691] Call Trace: [ 954.623227][T31691] dump_stack+0x188/0x20d [ 954.627615][T31691] should_fail.cold+0x5/0xa [ 954.632148][T31691] ? __x64_sys_mount+0x18f/0x230 [ 954.637111][T31691] ? fault_create_debugfs_attr+0x140/0x140 [ 954.642974][T31691] ? lock_downgrade+0x840/0x840 [ 954.647968][T31691] ? unwind_next_frame+0x105a/0x1df0 [ 954.653457][T31691] __alloc_pages_nodemask+0x17a/0x810 [ 954.659646][T31691] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 954.666629][T31691] cache_grow_begin+0x8c/0xc10 [ 954.671446][T31691] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 954.676933][T31691] __kmalloc+0x6dc/0x7a0 [ 954.681206][T31691] ? tomoyo_realpath_from_path+0xc2/0x620 [ 954.687107][T31691] ? mark_lock+0x12b/0xf10 [ 954.691709][T31691] tomoyo_realpath_from_path+0xc2/0x620 [ 954.697271][T31691] ? tomoyo_fill_path_info+0x22e/0x420 [ 954.702775][T31691] tomoyo_mount_acl+0x149/0x840 [ 954.707750][T31691] ? unlazy_walk+0x15b/0x3a0 [ 954.712663][T31691] ? tomoyo_check_mount_acl+0x1a0/0x1a0 [ 954.718261][T31691] ? mark_held_locks+0xe0/0xe0 [ 954.723060][T31691] ? trace_hardirqs_off+0x50/0x220 [ 954.729057][T31691] ? putname+0xe1/0x120 [ 954.733249][T31691] ? tomoyo_profile+0x42/0x50 [ 954.737977][T31691] ? tomoyo_get_mode.part.0+0x127/0x160 [ 954.742062][T31702] FAULT_INJECTION: forcing a failure. [ 954.742062][T31702] name failslab, interval 1, probability 0, space 0, times 0 [ 954.743739][T31691] tomoyo_mount_permission+0x151/0x3f0 [ 954.743757][T31691] ? tomoyo_mount_permission+0xfa/0x3f0 [ 954.743785][T31691] ? tomoyo_mount_acl+0x840/0x840 [ 954.743801][T31691] ? __phys_addr_symbol+0x2c/0x70 [ 954.743835][T31691] security_sb_mount+0x82/0xc0 [ 954.782365][T31691] do_mount+0x1b4/0x1b30 [ 954.786628][T31691] ? copy_mount_string+0x40/0x40 [ 954.791581][T31691] ? _copy_from_user+0x13c/0x1a0 [ 954.796527][T31691] __x64_sys_mount+0x18f/0x230 [ 954.801294][T31691] do_syscall_64+0xf6/0x7d0 [ 954.805817][T31691] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 954.811713][T31691] RIP: 0033:0x45ca29 [ 954.815607][T31691] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 954.835212][T31691] RSP: 002b:00007f080550fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 954.843621][T31691] RAX: ffffffffffffffda RBX: 00000000004f62c0 RCX: 000000000045ca29 [ 954.851765][T31691] RDX: 00000000200000c0 RSI: 0000000020000100 RDI: 0000000000000000 [ 954.859746][T31691] RBP: 000000000078bfa0 R08: 0000000020000140 R09: 0000000000000000 [ 954.867815][T31691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 954.876035][T31691] R13: 0000000000000752 R14: 00000000004ca315 R15: 00007f08055106d4 [ 954.884070][T31702] CPU: 1 PID: 31702 Comm: syz-executor.5 Not tainted 5.7.0-rc6-syzkaller #0 [ 954.893026][T31702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 954.903276][T31702] Call Trace: [ 954.906604][T31702] dump_stack+0x188/0x20d [ 954.907807][T31681] ERROR: Out of memory at tomoyo_realpath_from_path. [ 954.910973][T31702] should_fail.cold+0x5/0xa [ 954.910994][T31702] ? lock_downgrade+0x840/0x840 [ 954.911011][T31702] ? fault_create_debugfs_attr+0x140/0x140 [ 954.911039][T31702] should_failslab+0x5/0xf [ 954.937730][T31702] __kmalloc_track_caller+0x2d1/0x7a0 [ 954.938835][T31691] 9pnet: Insufficient options for proto=fd 10:44:19 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e2800", 0x26}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) [ 954.943138][T31702] ? strndup_user+0x70/0xe0 [ 954.943156][T31702] ? vfs_write+0x161/0x5d0 [ 954.943175][T31702] ? fput_many+0x2f/0x1a0 [ 954.943190][T31702] memdup_user+0x22/0xd0 [ 954.943207][T31702] strndup_user+0x70/0xe0 [ 954.972547][T31702] __x64_sys_mount+0xe6/0x230 [ 954.975125][T31681] hfsplus: unable to find HFS+ superblock [ 954.977246][T31702] do_syscall_64+0xf6/0x7d0 [ 954.977272][T31702] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 954.977294][T31702] RIP: 0033:0x45ca29 10:44:19 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e2800", 0x26}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) [ 954.997334][T31702] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 955.017387][T31702] RSP: 002b:00007fc7a34d3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 955.025822][T31702] RAX: ffffffffffffffda RBX: 00000000004f62c0 RCX: 000000000045ca29 [ 955.033898][T31702] RDX: 0000000020000280 RSI: 0000000020000380 RDI: 0000000000000000 [ 955.041970][T31702] RBP: 000000000078bf00 R08: 00000000200003c0 R09: 0000000000000000 10:44:19 executing program 3 (fault-call:5 fault-nth:8): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) [ 955.050125][T31702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 955.058310][T31702] R13: 0000000000000752 R14: 00000000004ca315 R15: 00007fc7a34d46d4 10:44:19 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d080000000000001b0000000000000000000000000038"], 0x40) 10:44:19 executing program 5 (fault-call:4 fault-nth:1): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:19 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:19 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000040)=0x1) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c1bedb28b8fdf2f3158ffff0040", @ANYRES16=0x0, @ANYBLOB="00082cbd7000fcdbdf2513000000540007800c000400f8b77d43000000000c00030000000000000000000c00030009000000000000000c0004000100000000000000080001000900000008000100090000000800020000000080080002006c5e38330c0006800400020004000200"], 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x4, 0x4, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) [ 955.209732][T31716] FAULT_INJECTION: forcing a failure. [ 955.209732][T31716] name failslab, interval 1, probability 0, space 0, times 0 10:44:20 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d090000000000001b0000000000000000000000000038"], 0x40) [ 955.261970][T31720] FAULT_INJECTION: forcing a failure. [ 955.261970][T31720] name failslab, interval 1, probability 0, space 0, times 0 [ 955.290991][T31716] CPU: 1 PID: 31716 Comm: syz-executor.3 Not tainted 5.7.0-rc6-syzkaller #0 [ 955.299740][T31716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 955.300757][T31724] hfsplus: unable to find HFS+ superblock [ 955.310415][T31716] Call Trace: [ 955.310453][T31716] dump_stack+0x188/0x20d [ 955.310478][T31716] should_fail.cold+0x5/0xa [ 955.310499][T31716] ? fault_create_debugfs_attr+0x140/0x140 [ 955.310521][T31716] should_failslab+0x5/0xf [ 955.310537][T31716] __kmalloc+0x2d9/0x7a0 [ 955.310557][T31716] ? tomoyo_encode2.part.0+0xec/0x3b0 [ 955.310575][T31716] ? d_absolute_path+0x10c/0x160 [ 955.310596][T31716] ? __d_path+0x140/0x140 [ 955.357965][T31716] tomoyo_encode2.part.0+0xec/0x3b0 [ 955.363312][T31716] tomoyo_encode+0x28/0x50 [ 955.367741][T31716] tomoyo_realpath_from_path+0x184/0x620 [ 955.373375][T31716] tomoyo_mount_acl+0x149/0x840 [ 955.378245][T31716] ? unlazy_walk+0x15b/0x3a0 [ 955.382847][T31716] ? tomoyo_check_mount_acl+0x1a0/0x1a0 [ 955.388491][T31716] ? mark_held_locks+0xe0/0xe0 [ 955.393267][T31716] ? trace_hardirqs_off+0x50/0x220 [ 955.398391][T31716] ? putname+0xe1/0x120 [ 955.402545][T31716] ? tomoyo_profile+0x42/0x50 [ 955.407239][T31716] ? tomoyo_get_mode.part.0+0x127/0x160 [ 955.412794][T31716] tomoyo_mount_permission+0x151/0x3f0 [ 955.419211][T31716] ? tomoyo_mount_permission+0xfa/0x3f0 [ 955.424751][T31716] ? tomoyo_mount_acl+0x840/0x840 [ 955.429820][T31716] ? __phys_addr_symbol+0x2c/0x70 [ 955.434860][T31716] security_sb_mount+0x82/0xc0 [ 955.439669][T31716] do_mount+0x1b4/0x1b30 [ 955.443933][T31716] ? copy_mount_string+0x40/0x40 [ 955.448913][T31716] ? _copy_from_user+0x13c/0x1a0 [ 955.453881][T31716] __x64_sys_mount+0x18f/0x230 [ 955.458654][T31716] do_syscall_64+0xf6/0x7d0 [ 955.463162][T31716] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 955.469047][T31716] RIP: 0033:0x45ca29 [ 955.472933][T31716] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 955.492538][T31716] RSP: 002b:00007f0805530c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 955.501037][T31716] RAX: ffffffffffffffda RBX: 00000000004f62c0 RCX: 000000000045ca29 [ 955.509012][T31716] RDX: 00000000200000c0 RSI: 0000000020000100 RDI: 0000000000000000 [ 955.517044][T31716] RBP: 000000000078bf00 R08: 0000000020000140 R09: 0000000000000000 [ 955.525013][T31716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 955.533001][T31716] R13: 0000000000000752 R14: 00000000004ca315 R15: 00007f08055316d4 [ 955.541037][T31720] CPU: 0 PID: 31720 Comm: syz-executor.5 Not tainted 5.7.0-rc6-syzkaller #0 [ 955.549850][T31720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 955.560099][T31720] Call Trace: [ 955.563415][T31720] dump_stack+0x188/0x20d [ 955.567771][T31720] should_fail.cold+0x5/0xa [ 955.572298][T31720] ? lock_downgrade+0x840/0x840 [ 955.577607][T31720] ? fault_create_debugfs_attr+0x140/0x140 [ 955.582039][T31716] ERROR: Out of memory at tomoyo_realpath_from_path. [ 955.583454][T31720] should_failslab+0x5/0xf [ 955.583481][T31720] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 955.599977][T31720] ? __might_fault+0x190/0x1d0 [ 955.599997][T31720] ? _copy_from_user+0x13c/0x1a0 10:44:20 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0", 0x39}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) [ 955.600021][T31720] copy_mount_options+0x53/0x160 [ 955.600040][T31720] __x64_sys_mount+0x15b/0x230 [ 955.600064][T31720] do_syscall_64+0xf6/0x7d0 [ 955.624161][T31720] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 955.624181][T31720] RIP: 0033:0x45ca29 [ 955.634003][T31720] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 955.634012][T31720] RSP: 002b:00007fc7a34d3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 10:44:20 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f00000000c0)={0x39}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000002c0)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r1, 0x5501) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) 10:44:20 executing program 3 (fault-call:5 fault-nth:9): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) [ 955.634027][T31720] RAX: ffffffffffffffda RBX: 00000000004f62c0 RCX: 000000000045ca29 [ 955.634034][T31720] RDX: 0000000020000280 RSI: 0000000020000380 RDI: 0000000000000000 [ 955.634042][T31720] RBP: 000000000078bf00 R08: 00000000200003c0 R09: 0000000000000000 [ 955.634058][T31720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 955.694910][T31720] R13: 0000000000000752 R14: 00000000004ca315 R15: 00007fc7a34d46d4 10:44:20 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d0a0000000000001b0000000000000000000000000038"], 0x40) 10:44:20 executing program 5 (fault-call:4 fault-nth:2): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:20 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x2, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:20 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0", 0x39}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) [ 955.828353][T31737] input: syz1 as /devices/virtual/input/input12 10:44:20 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000040)=0x1) r4 = accept$ax25(r3, &(0x7f00000000c0)={{}, [@netrom, @netrom, @netrom, @default, @netrom, @netrom, @netrom, @bcast]}, &(0x7f0000000040)=0x48) recvmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0xffffffffffffffda}], 0x5}}], 0x1, 0x40000100, 0x0) [ 955.902800][T31744] FAULT_INJECTION: forcing a failure. [ 955.902800][T31744] name failslab, interval 1, probability 0, space 0, times 0 10:44:20 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0", 0x39}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) [ 955.971420][T31757] FAULT_INJECTION: forcing a failure. [ 955.971420][T31757] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 955.979907][T31744] CPU: 0 PID: 31744 Comm: syz-executor.3 Not tainted 5.7.0-rc6-syzkaller #0 [ 955.994039][T31744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 956.004116][T31744] Call Trace: [ 956.007432][T31744] dump_stack+0x188/0x20d [ 956.011841][T31744] should_fail.cold+0x5/0xa [ 956.016330][T31744] ? fault_create_debugfs_attr+0x140/0x140 [ 956.022128][T31744] should_failslab+0x5/0xf [ 956.026528][T31744] __kmalloc+0x2d9/0x7a0 [ 956.030755][T31744] ? tomoyo_encode2.part.0+0xec/0x3b0 [ 956.036106][T31744] ? kfree+0x1eb/0x2b0 [ 956.040330][T31744] ? tomoyo_realpath_from_path+0x18f/0x620 [ 956.046123][T31744] tomoyo_encode2.part.0+0xec/0x3b0 [ 956.051322][T31744] tomoyo_encode+0x28/0x50 [ 956.055735][T31744] tomoyo_mount_acl+0x320/0x840 [ 956.061624][T31744] ? unlazy_walk+0x15b/0x3a0 [ 956.066200][T31744] ? tomoyo_check_mount_acl+0x1a0/0x1a0 [ 956.071820][T31744] ? mark_held_locks+0xe0/0xe0 [ 956.076569][T31744] ? trace_hardirqs_off+0x50/0x220 [ 956.081765][T31744] ? putname+0xe1/0x120 [ 956.085915][T31744] ? tomoyo_profile+0x42/0x50 [ 956.090573][T31744] ? tomoyo_get_mode.part.0+0x127/0x160 [ 956.096104][T31744] tomoyo_mount_permission+0x151/0x3f0 [ 956.101640][T31744] ? tomoyo_mount_permission+0xfa/0x3f0 [ 956.107344][T31744] ? tomoyo_mount_acl+0x840/0x840 [ 956.112362][T31744] ? __phys_addr_symbol+0x2c/0x70 [ 956.117395][T31744] security_sb_mount+0x82/0xc0 [ 956.122163][T31744] do_mount+0x1b4/0x1b30 [ 956.126399][T31744] ? copy_mount_string+0x40/0x40 [ 956.131337][T31744] ? _copy_from_user+0x13c/0x1a0 [ 956.137832][T31744] __x64_sys_mount+0x18f/0x230 [ 956.142609][T31744] do_syscall_64+0xf6/0x7d0 [ 956.147099][T31744] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 956.152975][T31744] RIP: 0033:0x45ca29 [ 956.156864][T31744] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 956.181254][T31744] RSP: 002b:00007f0805530c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 956.189671][T31744] RAX: ffffffffffffffda RBX: 00000000004f62c0 RCX: 000000000045ca29 [ 956.197715][T31744] RDX: 00000000200000c0 RSI: 0000000020000100 RDI: 0000000000000000 [ 956.205760][T31744] RBP: 000000000078bf00 R08: 0000000020000140 R09: 0000000000000000 [ 956.213712][T31744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 956.221851][T31744] R13: 0000000000000752 R14: 00000000004ca315 R15: 00007f08055316d4 [ 956.230107][T31757] CPU: 1 PID: 31757 Comm: syz-executor.5 Not tainted 5.7.0-rc6-syzkaller #0 [ 956.238800][T31757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 956.248879][T31757] Call Trace: [ 956.252433][T31757] dump_stack+0x188/0x20d [ 956.256801][T31757] should_fail.cold+0x5/0xa [ 956.261350][T31757] ? fault_create_debugfs_attr+0x140/0x140 [ 956.267182][T31757] ? mark_held_locks+0xe0/0xe0 [ 956.272044][T31757] ? mark_held_locks+0xe0/0xe0 [ 956.276836][T31757] __alloc_pages_nodemask+0x17a/0x810 [ 956.282421][T31757] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 956.289209][T31757] ? find_held_lock+0x2d/0x110 [ 956.294014][T31757] ? lock_downgrade+0x840/0x840 [ 956.298895][T31757] cache_grow_begin+0x8c/0xc10 [ 956.303682][T31757] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 956.309169][T31757] kmem_cache_alloc_trace+0x6ed/0x7d0 [ 956.315618][T31757] copy_mount_options+0x53/0x160 [ 956.320587][T31757] __x64_sys_mount+0x15b/0x230 [ 956.325379][T31757] do_syscall_64+0xf6/0x7d0 [ 956.330011][T31757] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 956.335919][T31757] RIP: 0033:0x45ca29 [ 956.339831][T31757] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 956.359479][T31757] RSP: 002b:00007fc7a34d3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 10:44:21 executing program 3 (fault-call:5 fault-nth:10): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:21 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d0d0000000000001b0000000000000000000000000038"], 0x40) [ 956.367927][T31757] RAX: ffffffffffffffda RBX: 00000000004f62c0 RCX: 000000000045ca29 [ 956.376011][T31757] RDX: 0000000020000280 RSI: 0000000020000380 RDI: 0000000000000000 [ 956.384259][T31757] RBP: 000000000078bf00 R08: 00000000200003c0 R09: 0000000000000000 [ 956.392267][T31757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 956.400255][T31757] R13: 0000000000000752 R14: 00000000004ca315 R15: 00007fc7a34d46d4 10:44:21 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b", 0x43}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:44:21 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80}, 0x0, 0x0, 0x20000000, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) 10:44:21 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d9b0000000000001b0000000000000000000000000038"], 0x40) [ 956.476750][T31760] hfsplus: unable to find HFS+ superblock 10:44:21 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b", 0x43}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) [ 956.527881][T31774] FAULT_INJECTION: forcing a failure. [ 956.527881][T31774] name failslab, interval 1, probability 0, space 0, times 0 [ 956.581629][T31774] CPU: 0 PID: 31774 Comm: syz-executor.3 Not tainted 5.7.0-rc6-syzkaller #0 [ 956.590437][T31774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 956.600518][T31774] Call Trace: [ 956.603854][T31774] dump_stack+0x188/0x20d [ 956.608244][T31774] should_fail.cold+0x5/0xa [ 956.612776][T31774] ? lock_downgrade+0x840/0x840 [ 956.618092][T31774] ? fault_create_debugfs_attr+0x140/0x140 [ 956.623931][T31774] should_failslab+0x5/0xf [ 956.628365][T31774] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 956.633769][T31774] alloc_fs_context+0x57/0x880 [ 956.638551][T31774] ? _raw_read_unlock+0x24/0x40 [ 956.643592][T31774] ? __get_fs_type+0x92/0xc0 [ 956.648214][T31774] do_mount+0x1150/0x1b30 [ 956.652591][T31774] ? copy_mount_string+0x40/0x40 [ 956.657641][T31774] ? _copy_from_user+0x13c/0x1a0 [ 956.662603][T31774] __x64_sys_mount+0x18f/0x230 [ 956.667617][T31774] do_syscall_64+0xf6/0x7d0 [ 956.672144][T31774] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 956.678047][T31774] RIP: 0033:0x45ca29 [ 956.682009][T31774] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 956.702410][T31774] RSP: 002b:00007f0805530c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 956.710859][T31774] RAX: ffffffffffffffda RBX: 00000000004f62c0 RCX: 000000000045ca29 [ 956.718946][T31774] RDX: 00000000200000c0 RSI: 0000000020000100 RDI: 0000000000000000 10:44:21 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x1, 0x5, 0x8, 0x6, 0x0, 0x20, 0x4020, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0xea, 0x2}, 0x8000, 0xc66, 0x6, 0x4, 0xfffffffffffffffb, 0xd97, 0x8}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000040)=0x1) ioctl$SIOCRSGL2CALL(r3, 0x89e5, &(0x7f0000000040)) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4092, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x0, 0x2000, 0x0) [ 956.727062][T31774] RBP: 000000000078bf00 R08: 0000000020000140 R09: 0000000000000000 [ 956.735934][T31774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 956.743930][T31774] R13: 0000000000000752 R14: 00000000004ca315 R15: 00007f08055316d4 10:44:21 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:21 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x3, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:21 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6dff1000000000001b0000000000000000000000000038"], 0x40) 10:44:21 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000040)=0x1) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x25fb2598}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004000}, 0x20004080) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r6 = dup(r5) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000040)=0x1) getpeername$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000240)=0x1c) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x16}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) 10:44:21 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b", 0x43}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:44:21 executing program 3 (fault-call:5 fault-nth:11): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) [ 956.955299][T31802] hfsplus: unable to find HFS+ superblock 10:44:21 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6dfffe00000000001b0000000000000000000000000038"], 0x40) 10:44:21 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x4, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:21 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f", 0x48}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:44:21 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300200000000001b0000000000000000000000000038"], 0x40) [ 957.188067][T31819] FAULT_INJECTION: forcing a failure. [ 957.188067][T31819] name failslab, interval 1, probability 0, space 0, times 0 10:44:22 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f", 0x48}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) [ 957.241908][T31826] hfsplus: unable to find HFS+ superblock [ 957.256981][T31819] CPU: 1 PID: 31819 Comm: syz-executor.3 Not tainted 5.7.0-rc6-syzkaller #0 [ 957.265696][T31819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 957.275764][T31819] Call Trace: [ 957.279069][T31819] dump_stack+0x188/0x20d [ 957.283418][T31819] should_fail.cold+0x5/0xa [ 957.288382][T31819] ? lock_downgrade+0x840/0x840 [ 957.293257][T31819] ? fault_create_debugfs_attr+0x140/0x140 [ 957.299090][T31819] should_failslab+0x5/0xf [ 957.303518][T31819] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 957.308930][T31819] ? lockdep_init_map_waits+0x26a/0x890 [ 957.314524][T31819] ? lockdep_init_map_waits+0x26a/0x890 [ 957.320098][T31819] legacy_init_fs_context+0x44/0xe0 [ 957.325399][T31819] ? generic_parse_monolithic+0x1f0/0x1f0 [ 957.331240][T31819] alloc_fs_context+0x51a/0x880 [ 957.336137][T31819] do_mount+0x1150/0x1b30 [ 957.340582][T31819] ? copy_mount_string+0x40/0x40 [ 957.345563][T31819] ? _copy_from_user+0x13c/0x1a0 [ 957.350793][T31819] __x64_sys_mount+0x18f/0x230 [ 957.355726][T31819] do_syscall_64+0xf6/0x7d0 [ 957.360295][T31819] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 957.366216][T31819] RIP: 0033:0x45ca29 [ 957.370629][T31819] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 957.390622][T31819] RSP: 002b:00007f0805530c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 957.399036][T31819] RAX: ffffffffffffffda RBX: 00000000004f62c0 RCX: 000000000045ca29 [ 957.407009][T31819] RDX: 00000000200000c0 RSI: 0000000020000100 RDI: 0000000000000000 [ 957.415016][T31819] RBP: 000000000078bf00 R08: 0000000020000140 R09: 0000000000000000 [ 957.422997][T31819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 957.431439][T31819] R13: 0000000000000752 R14: 00000000004ca315 R15: 00007f08055316d4 10:44:22 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f", 0x48}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:44:22 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x2, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:22 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300700000000001b0000000000000000000000000038"], 0x40) 10:44:22 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x5, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:22 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a3", 0x4a}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:44:22 executing program 3 (fault-call:5 fault-nth:12): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:22 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000040)=0x1) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000000240)={'nat\x00', 0x0, 0x4, 0x31, [], 0x3, &(0x7f00000000c0)=[{}, {}, {}], &(0x7f0000000180)=""/49}, &(0x7f00000008c0)=0x78) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) syz_mount_image$nfs(&(0x7f00000002c0)='nfs\x00', &(0x7f0000000300)='./file0\x00', 0x7, 0x5, &(0x7f0000000740)=[{&(0x7f0000000340)="eaee0e27788d7cbe1e834e21342e67f6d69c0acd17a9f29cc7c65bc6d7450c15f041950e9aa04b202d2d7de86e5f221c06ab18c9f9545c6e34ea5d7bb12c614f7ce27740694fbc179e411c5b194afd0be8671062b60014219c4d6179225fd2840cb6b7f9e12fa789cc5af05dc4cd589c1752bfaca0ec79e5126f78020d7e33a8f7e949624af437b2b57b9e78ef11f1ac07f0ca9fdb3845bae52421717ee843598d24708734503162c2a21495edf987e3abd36893ccd794ac685e7bfc43668ac522f8bb3ea1568e2867dc7dd50d2a18cc51903daa30b0dac5fe8e81549c5e7666facb58c89ace8033b717c1be18ddc0ffcfd6ee845625a20014429a", 0xfb, 0x1}, {&(0x7f0000000440)="18804f60712e3942b48f49cc942bc9697d71c6766e2d9fc3d9690fe78cf19401150a7eff5b6fe8788b4eb0d628f6ef5f4ca434731d87b0cf27c72d3750a50f9f93b9ee343e7c9d026796bba5c08e2291355cb56fa06d76a4b3760918e84da56af02ad315a2f36ade40033621ed6ab83620c5cf4a889b775d3dc7ecfd2ffdffeee3a991f011f2029fd174e1cd57a5a58d04b18d0e070d1ece4f8fb769dacd5d1f3b607c29bb1c99c7d0476540569827a3495ed0b3faada61b34f396b1d6e81ac05f5aa15d5d05dfe4c0bcd9a9c6de1b496ecd8cad80", 0xd5, 0x215}, {&(0x7f0000000540)="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", 0xfd, 0x9}, {&(0x7f0000000640)="2b89b862755be4141a5f74a15720f4b2e7c193a43b25a217a54e7b897f9561f6ebf42f3e8a7f3dbf447235b0c2a34ca93af183be33fa0d8ec9b72485f35280b419defaafa99c008f42741590af421d407090002b3d9c152826467dda0a6ab4b846bbfc83434586d54e79f4eca23abda5781498f94d20ca7e6dcda1aaa16a13faa17f25585fce83cb2fd5cf3162a3c0ffb9b7072f349ae2", 0x97, 0x2}, {&(0x7f0000000700)="3df871792e83a31b84f1bc73e476b42ad59c0ba6113c6afd4845f6d52861d13f64be7884dda1b7", 0x27, 0xffffffff00000000}], 0x4080, &(0x7f00000007c0)='broute\x00') ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r6 = dup(r5) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000040)=0x1) perf_event_open(&(0x7f0000000840)={0x5, 0x70, 0x10, 0x0, 0x80, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x800, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, r6, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031d054000000000000000000000000021e50c1be3681700ff7e280000005eea964cf0554edc5de8ddeb133c2b3ce9fad90f6982023115a36a15000000", 0x44}], 0x1}, 0x8841) recvmmsg(r0, &(0x7f0000002540), 0x0, 0x0, 0x0) r7 = dup(0xffffffffffffffff) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000040)=0x1) ioctl$CAPI_GET_PROFILE(r7, 0xc0404309, &(0x7f0000000800)=0x9) [ 957.969328][T31855] FAULT_INJECTION: forcing a failure. [ 957.969328][T31855] name failslab, interval 1, probability 0, space 0, times 0 [ 958.015887][T31860] hfsplus: unable to find HFS+ superblock [ 958.027308][T31857] nfs: Unknown parameter 'broute' [ 958.034977][T31855] CPU: 0 PID: 31855 Comm: syz-executor.3 Not tainted 5.7.0-rc6-syzkaller #0 [ 958.043679][T31855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 958.053754][T31855] Call Trace: [ 958.057079][T31855] dump_stack+0x188/0x20d [ 958.061438][T31855] should_fail.cold+0x5/0xa [ 958.065960][T31855] ? lock_downgrade+0x840/0x840 [ 958.070842][T31855] ? fault_create_debugfs_attr+0x140/0x140 [ 958.077454][T31855] should_failslab+0x5/0xf [ 958.081894][T31855] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 958.087293][T31855] ? apparmor_cred_prepare+0x750/0x750 [ 958.092769][T31855] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 958.098337][T31855] ? lockdep_init_map_waits+0x26a/0x890 [ 958.104507][T31855] v9fs_mount+0x5a/0x970 [ 958.108772][T31855] ? v9fs_write_inode+0x60/0x60 [ 958.113835][T31855] legacy_get_tree+0x105/0x220 [ 958.118710][T31855] ? ns_capable_common+0xe2/0x100 [ 958.124467][T31855] vfs_get_tree+0x89/0x2f0 [ 958.128905][T31855] do_mount+0x1306/0x1b30 [ 958.133264][T31855] ? copy_mount_string+0x40/0x40 [ 958.138235][T31855] ? _copy_from_user+0x13c/0x1a0 [ 958.143211][T31855] __x64_sys_mount+0x18f/0x230 [ 958.148050][T31855] do_syscall_64+0xf6/0x7d0 [ 958.152581][T31855] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 958.158487][T31855] RIP: 0033:0x45ca29 10:44:22 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a3", 0x4a}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:44:22 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a3", 0x4a}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) [ 958.162479][T31855] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 958.182849][T31855] RSP: 002b:00007f0805530c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 958.191310][T31855] RAX: ffffffffffffffda RBX: 00000000004f62c0 RCX: 000000000045ca29 [ 958.199300][T31855] RDX: 00000000200000c0 RSI: 0000000020000100 RDI: 0000000000000000 [ 958.207723][T31855] RBP: 000000000078bf00 R08: 0000000020000140 R09: 0000000000000000 10:44:23 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x3, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300800000000001b0000000000000000000000000038"], 0x40) 10:44:23 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x6, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:23 executing program 3 (fault-call:5 fault-nth:13): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) [ 958.215709][T31855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 958.223811][T31855] R13: 0000000000000752 R14: 00000000004ca315 R15: 00007f08055316d4 10:44:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300900000000001b0000000000000000000000000038"], 0x40) 10:44:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300a00000000001b0000000000000000000000000038"], 0x40) 10:44:23 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a", 0x4b}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:44:23 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r1, &(0x7f00000004c0)={{0x1b, 0x28, 0x7, 0x7, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000040)=0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000240)='vboxnet0&\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r5, &(0x7f00000004c0)={{0x1b, 0x28, 0x7, 0x7, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) sync_file_range(r5, 0x10afa394, 0x64, 0x0) r6 = dup3(r1, 0xffffffffffffffff, 0x80000) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000040)={&(0x7f00000000c0)="ab76a21f4385a34c584e24b6c4e8c71e83b3ad893f4bafab435879e768b3abd1e8386007e31700f66134a7d1cbc25a863b45180631db2c7ade7bb332530a1f4908879b1a96f077ca2f296d5d91bf60ed13396026809450d2bd637338bf3d1457a5cdd213bc5ecd9ddfaebc4794db64b61f30e3fc9631bab933e38b", &(0x7f0000000140)=""/79, &(0x7f0000000380)="2c7b4c9d955d5ef78440ac350f7241572ba6914cb7732834ce4dc20204f5f05d93e11b0188337c0408e409983cb749b80c12c7fc39f12b28aaa2e181121bebf311f8de874be7618a4e3b2de7efbeb3baf9119a1d1af2a00f245d1b82df2a0a8a1493e9063179321e7f61c3585a60b15c427b21cec37413fa6d815519cdfdfe49cd886b713fa4e82a17b5fed6c82b4f37f939f4358b69057b103c793e4c5e5410ef1389b3ae6bfa868d6c41dae0d50726135050a74cb75924bc50175a58467502f8b2579d2a2105f5eafd3143d0b4eb38cf5a634f738c5608fc3e635b877b9fa622aedbe6488524a49df1e9697284", &(0x7f0000000500)="d0ce1b3e2c234e6d1ac96fb2d57f280890dd90b889a2164ac8a222f794848da00384c7d03655ee8b7fa09466061901f7c7e21c0fcfc74572e22168bf7c5fba51505a414770958db3ca217307e1d6a6279d452d5f4f1419fff8d4f466950042798f67f0cbb6966ebbb6c292ab4263192db300804bf69652839a5dd6c972bdfa24d8e6dc64263973ec0838cd4f5f0eb4faacfd61000da0907657ba2376b28157", 0x81, r6}, 0x38) 10:44:23 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x4, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:23 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a", 0x4b}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) [ 958.451172][T31889] hfsplus: unable to find HFS+ superblock [ 958.486633][T31892] FAULT_INJECTION: forcing a failure. [ 958.486633][T31892] name failslab, interval 1, probability 0, space 0, times 0 [ 958.557751][T31892] CPU: 1 PID: 31892 Comm: syz-executor.3 Not tainted 5.7.0-rc6-syzkaller #0 [ 958.566471][T31892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 958.576628][T31892] Call Trace: [ 958.580043][T31892] dump_stack+0x188/0x20d [ 958.584405][T31892] should_fail.cold+0x5/0xa [ 958.588940][T31892] ? lock_downgrade+0x840/0x840 [ 958.593820][T31892] ? fault_create_debugfs_attr+0x140/0x140 [ 958.599919][T31892] should_failslab+0x5/0xf 10:44:23 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x7, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300c00000000001b0000000000000000000000000038"], 0x40) [ 958.604376][T31892] __kmalloc_track_caller+0x2d1/0x7a0 [ 958.609767][T31892] ? v9fs_session_init+0xae/0x18c0 [ 958.614897][T31892] ? mark_held_locks+0xe0/0xe0 [ 958.619690][T31892] ? mark_held_locks+0xe0/0xe0 [ 958.624756][T31892] ? __lock_acquire+0x2184/0x4c50 10:44:23 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a", 0x4b}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) [ 958.624779][T31892] kstrdup+0x36/0x70 [ 958.624801][T31892] v9fs_session_init+0xae/0x18c0 10:44:23 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) [ 958.624819][T31892] ? find_held_lock+0x2d/0x110 10:44:23 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x5, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) [ 958.624837][T31892] ? fs_reclaim_release+0xa/0x20 [ 958.624859][T31892] ? v9fs_show_options+0x7e0/0x7e0 [ 958.624874][T31892] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 958.624891][T31892] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 958.624914][T31892] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 958.624937][T31892] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 958.624959][T31892] ? apparmor_cred_prepare+0x750/0x750 [ 958.624973][T31892] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 958.624989][T31892] ? lockdep_init_map_waits+0x26a/0x890 10:44:23 executing program 3 (fault-call:5 fault-nth:14): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:23 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:44:23 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:23 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x6, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) [ 958.625008][T31892] v9fs_mount+0x79/0x970 [ 958.625026][T31892] ? v9fs_write_inode+0x60/0x60 [ 958.625046][T31892] legacy_get_tree+0x105/0x220 [ 958.625065][T31892] ? ns_capable_common+0xe2/0x100 [ 958.625085][T31892] vfs_get_tree+0x89/0x2f0 [ 958.625104][T31892] do_mount+0x1306/0x1b30 [ 958.625126][T31892] ? copy_mount_string+0x40/0x40 [ 958.625149][T31892] ? _copy_from_user+0x13c/0x1a0 [ 958.625172][T31892] __x64_sys_mount+0x18f/0x230 [ 958.625192][T31892] do_syscall_64+0xf6/0x7d0 [ 958.625214][T31892] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 958.625227][T31892] RIP: 0033:0x45ca29 [ 958.625244][T31892] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 958.625252][T31892] RSP: 002b:00007f0805530c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 958.625268][T31892] RAX: ffffffffffffffda RBX: 00000000004f62c0 RCX: 000000000045ca29 [ 958.625276][T31892] RDX: 00000000200000c0 RSI: 0000000020000100 RDI: 0000000000000000 [ 958.625285][T31892] RBP: 000000000078bf00 R08: 0000000020000140 R09: 0000000000000000 [ 958.625294][T31892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 958.625303][T31892] R13: 0000000000000752 R14: 00000000004ca315 R15: 00007f08055316d4 [ 958.806994][T31916] hfsplus: unable to find HFS+ superblock [ 959.074984][T31936] hfsplus: unable to find HFS+ superblock [ 959.167410][T31944] FAULT_INJECTION: forcing a failure. [ 959.167410][T31944] name failslab, interval 1, probability 0, space 0, times 0 [ 959.273077][T31944] CPU: 1 PID: 31944 Comm: syz-executor.3 Not tainted 5.7.0-rc6-syzkaller #0 [ 959.281817][T31944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 10:44:24 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000040)=0x1) write$UHID_SET_REPORT_REPLY(r3, &(0x7f00000000c0)={0xe, {0x5, 0x1f, 0xf0, 0x7d, "73598cdd9593abf62b6627dc626a8a1aa56386433283fbb563b17ae59a946c8e3f0d3c1214117cc5fc894ce1f46fbeda4900951836834833b80ea3c85358605e25176d7d59ed576e86c23421ff241c7a16c5f6cc3035a065e664841964d0d6e8b0392f0f804caf66eece4e98f33f2cdb16d0bc5ffb8f82138a3d123ac3"}}, 0x89) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000180)='/dev/usb/hiddev#\x00', 0x8, 0x4202) 10:44:24 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x7, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:24 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:44:24 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x9, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) [ 959.281824][T31944] Call Trace: [ 959.281855][T31944] dump_stack+0x188/0x20d [ 959.281879][T31944] should_fail.cold+0x5/0xa [ 959.281900][T31944] ? lock_downgrade+0x840/0x840 [ 959.281918][T31944] ? fault_create_debugfs_attr+0x140/0x140 [ 959.281947][T31944] should_failslab+0x5/0xf [ 959.281965][T31944] __kmalloc_track_caller+0x2d1/0x7a0 [ 959.282000][T31944] ? v9fs_session_init+0xef/0x18c0 [ 959.282014][T31944] ? mark_held_locks+0xe0/0xe0 [ 959.282031][T31944] ? mark_held_locks+0xe0/0xe0 [ 959.282045][T31944] ? __lock_acquire+0x2184/0x4c50 [ 959.282065][T31944] kstrdup+0x36/0x70 [ 959.282082][T31944] v9fs_session_init+0xef/0x18c0 [ 959.282100][T31944] ? find_held_lock+0x2d/0x110 [ 959.282118][T31944] ? fs_reclaim_release+0xa/0x20 [ 959.282140][T31944] ? v9fs_show_options+0x7e0/0x7e0 [ 959.282159][T31944] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 959.282182][T31944] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 959.282205][T31944] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 959.282227][T31944] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 959.282249][T31944] ? apparmor_cred_prepare+0x750/0x750 [ 959.282265][T31944] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 959.282281][T31944] ? lockdep_init_map_waits+0x26a/0x890 [ 959.282300][T31944] v9fs_mount+0x79/0x970 [ 959.282319][T31944] ? v9fs_write_inode+0x60/0x60 [ 959.282338][T31944] legacy_get_tree+0x105/0x220 [ 959.282358][T31944] ? ns_capable_common+0xe2/0x100 [ 959.282380][T31944] vfs_get_tree+0x89/0x2f0 [ 959.282399][T31944] do_mount+0x1306/0x1b30 [ 959.282423][T31944] ? copy_mount_string+0x40/0x40 [ 959.282446][T31944] ? _copy_from_user+0x13c/0x1a0 [ 959.282471][T31944] __x64_sys_mount+0x18f/0x230 [ 959.282494][T31944] do_syscall_64+0xf6/0x7d0 [ 959.282514][T31944] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 959.282529][T31944] RIP: 0033:0x45ca29 [ 959.282545][T31944] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 959.282552][T31944] RSP: 002b:00007f080550fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 959.282566][T31944] RAX: ffffffffffffffda RBX: 00000000004f62c0 RCX: 000000000045ca29 [ 959.282575][T31944] RDX: 00000000200000c0 RSI: 0000000020000100 RDI: 0000000000000000 10:44:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300d00000000001b0000000000000000000000000038"], 0x40) 10:44:24 executing program 3 (fault-call:5 fault-nth:15): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:24 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 10:44:24 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) 10:44:24 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x8, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:24 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0xa, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) [ 959.282584][T31944] RBP: 000000000078bfa0 R08: 0000000020000140 R09: 0000000000000000 [ 959.282592][T31944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 959.282600][T31944] R13: 0000000000000752 R14: 00000000004ca315 R15: 00007f08055106d4 [ 959.436975][T31952] hfsplus: unable to find HFS+ superblock 10:44:24 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x500}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) [ 959.955510][T31979] FAULT_INJECTION: forcing a failure. [ 959.955510][T31979] name failslab, interval 1, probability 0, space 0, times 0 [ 959.986835][T31978] hfsplus: unable to find HFS+ superblock [ 960.040228][T31979] CPU: 1 PID: 31979 Comm: syz-executor.3 Not tainted 5.7.0-rc6-syzkaller #0 [ 960.048952][T31979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 960.059155][T31979] Call Trace: [ 960.062479][T31979] dump_stack+0x188/0x20d [ 960.066849][T31979] should_fail.cold+0x5/0xa [ 960.071480][T31979] ? fault_create_debugfs_attr+0x140/0x140 [ 960.077361][T31979] should_failslab+0x5/0xf [ 960.081807][T31979] __kmalloc+0x2d9/0x7a0 [ 960.089642][T31979] ? tomoyo_encode2.part.0+0xec/0x3b0 [ 960.095045][T31979] ? kfree+0x1eb/0x2b0 [ 960.099151][T31979] ? tomoyo_realpath_from_path+0x18f/0x620 [ 960.104999][T31979] tomoyo_encode2.part.0+0xec/0x3b0 [ 960.110235][T31979] tomoyo_encode+0x28/0x50 [ 960.114680][T31979] tomoyo_mount_acl+0x320/0x840 [ 960.119736][T31979] ? unlazy_walk+0x15b/0x3a0 [ 960.124429][T31979] ? tomoyo_check_mount_acl+0x1a0/0x1a0 [ 960.130005][T31979] ? mark_held_locks+0xe0/0xe0 [ 960.134839][T31979] ? trace_hardirqs_off+0x50/0x220 [ 960.140082][T31979] ? putname+0xe1/0x120 [ 960.144292][T31979] ? tomoyo_profile+0x42/0x50 [ 960.149000][T31979] ? tomoyo_get_mode.part.0+0x127/0x160 [ 960.154661][T31979] tomoyo_mount_permission+0x151/0x3f0 [ 960.160141][T31979] ? tomoyo_mount_permission+0xfa/0x3f0 [ 960.165796][T31979] ? tomoyo_mount_acl+0x840/0x840 [ 960.170845][T31979] ? __phys_addr_symbol+0x2c/0x70 [ 960.175919][T31979] security_sb_mount+0x82/0xc0 [ 960.180718][T31979] do_mount+0x1b4/0x1b30 [ 960.184997][T31979] ? copy_mount_string+0x40/0x40 [ 960.190149][T31979] ? _copy_from_user+0x13c/0x1a0 [ 960.195124][T31979] __x64_sys_mount+0x18f/0x230 [ 960.199925][T31979] do_syscall_64+0xf6/0x7d0 [ 960.204457][T31979] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 960.210361][T31979] RIP: 0033:0x45ca29 [ 960.214271][T31979] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 10:44:25 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0xc, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) [ 960.233992][T31979] RSP: 002b:00007f0805530c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 960.242422][T31979] RAX: ffffffffffffffda RBX: 00000000004f62c0 RCX: 000000000045ca29 [ 960.250412][T31979] RDX: 00000000200000c0 RSI: 0000000020000100 RDI: 0000000000000000 [ 960.258402][T31979] RBP: 000000000078bf00 R08: 0000000020000140 R09: 0000000000000000 [ 960.266477][T31979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 960.274547][T31979] R13: 0000000000000752 R14: 00000000004ca315 R15: 00007f08055316d4 10:44:25 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 10:44:25 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x9, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300e00000000001b0000000000000000000000000038"], 0x40) 10:44:25 executing program 3 (fault-call:5 fault-nth:16): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) [ 960.438620][T32003] hfsplus: unable to find HFS+ superblock 10:44:25 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) r5 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000380)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r5}], 0x87, 0x0, &(0x7f0000000100)="b2f2e5cbb026146be02216bb08b569c20931c0add7368c489d12d84c37adb6e0cac5fcdd5dccf346217931411061c05c43d4dbf8cb188c6b3d31a60a8c5e08a70eea586345c257d112a1860b4618523f86c940efa4f26fc4bbe93e2e511860ab819b8fc4e7daa2d7eaff64c6ac833fd84c524b9f5d950e8eaef636d84ddfbbb9c654ece1639633"}) exit_group(0x0) mkdir(0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f00000003c0)={0x3f80000, 0x2, {0x0}, {}, 0xba3, 0x8a}) tkill(r6, 0x36) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) 10:44:25 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0xd, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:25 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x10, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300f00000000001b0000000000000000000000000038"], 0x40) 10:44:25 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) [ 960.659069][T32016] FAULT_INJECTION: forcing a failure. [ 960.659069][T32016] name failslab, interval 1, probability 0, space 0, times 0 [ 960.677426][T32023] binder: BINDER_SET_CONTEXT_MGR already set [ 960.692622][T32023] binder: 32015:32023 ioctl 40046207 0 returned -16 [ 960.713969][T32021] binder: BINDER_SET_CONTEXT_MGR already set [ 960.723027][T32021] binder: 32015:32021 ioctl 40046207 0 returned -16 [ 960.733948][T32016] CPU: 0 PID: 32016 Comm: syz-executor.3 Not tainted 5.7.0-rc6-syzkaller #0 [ 960.737759][T32022] binder: 32015:32022 ioctl c0306201 20000100 returned -14 [ 960.742747][T32016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 960.760549][T32016] Call Trace: 10:44:25 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xe43) perf_event_open$cgroup(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x40}, 0x0, 0x7, 0x7fffffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) r2 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xb1, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000025000535d25a80648c63940d0424fc60", 0x14}], 0x1}, 0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x9, 0x0, 0x82, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/108, 0x6c}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) [ 960.764039][T32016] dump_stack+0x188/0x20d [ 960.768397][T32016] should_fail.cold+0x5/0xa [ 960.772950][T32016] ? lock_downgrade+0x840/0x840 [ 960.778740][T32016] ? fault_create_debugfs_attr+0x140/0x140 [ 960.784587][T32016] should_failslab+0x5/0xf [ 960.789025][T32016] __kmalloc_track_caller+0x2d1/0x7a0 [ 960.794563][T32016] ? match_number.isra.0+0x81/0x170 [ 960.799884][T32016] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 960.805453][T32016] ? rcu_read_lock_any_held.part.0+0x50/0x50 10:44:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d301800000000001b0000000000000000000000000038"], 0x40) [ 960.813460][T32016] kmemdup_nul+0x2d/0xa0 [ 960.817860][T32016] match_number.isra.0+0x81/0x170 [ 960.823002][T32016] ? match_strdup+0x80/0x80 [ 960.827749][T32016] ? v9fs_session_init+0x1e7/0x18c0 [ 960.832983][T32016] ? legacy_get_tree+0x105/0x220 [ 960.837949][T32016] ? vfs_get_tree+0x89/0x2f0 [ 960.842571][T32016] ? memcpy+0x39/0x60 [ 960.846717][T32016] parse_opts.part.0+0x207/0x330 [ 960.851865][T32016] ? p9_fd_show_options+0x1c0/0x1c0 [ 960.857097][T32016] ? lock_downgrade+0x840/0x840 10:44:25 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x300, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:25 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540), 0x0, 0x0, 0x0) [ 960.861978][T32016] ? v9fs_get_trans_by_name+0xd9/0x110 [ 960.867486][T32016] ? trace_hardirqs_off+0x50/0x220 [ 960.872656][T32016] p9_fd_create+0x9b/0x380 [ 960.872675][T32016] ? p9_conn_create+0x520/0x520 [ 960.872693][T32016] ? kfree+0x1eb/0x2b0 [ 960.872707][T32016] ? p9_client_create+0x83b/0x1440 [ 960.872725][T32016] ? lockdep_hardirqs_on+0x463/0x620 [ 960.872744][T32016] p9_client_create+0x8a5/0x1440 [ 960.872770][T32016] ? p9_client_zc_rpc.constprop.0+0x1140/0x1140 [ 960.872786][T32016] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 10:44:25 executing program 3 (fault-call:5 fault-nth:17): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:25 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0xe, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) [ 960.872806][T32016] ? __kmalloc_track_caller+0x622/0x7a0 [ 960.872825][T32016] ? lockdep_init_map_waits+0x26a/0x890 10:44:25 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540), 0x0, 0x0, 0x0) [ 960.872852][T32016] ? v9fs_session_init+0x1e7/0x18c0 [ 960.872867][T32016] v9fs_session_init+0x1e7/0x18c0 10:44:26 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x500, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) [ 960.872884][T32016] ? find_held_lock+0x2d/0x110 [ 960.872903][T32016] ? fs_reclaim_release+0xa/0x20 10:44:26 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540), 0x0, 0x0, 0x0) [ 960.872926][T32016] ? v9fs_show_options+0x7e0/0x7e0 [ 960.872943][T32016] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 960.872959][T32016] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 960.872974][T32016] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 960.872995][T32016] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 960.873016][T32016] ? apparmor_cred_prepare+0x750/0x750 [ 960.873032][T32016] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 960.873048][T32016] ? lockdep_init_map_waits+0x26a/0x890 [ 960.873067][T32016] v9fs_mount+0x79/0x970 [ 960.873085][T32016] ? v9fs_write_inode+0x60/0x60 [ 960.873105][T32016] legacy_get_tree+0x105/0x220 10:44:26 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x600, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) [ 960.873125][T32016] ? ns_capable_common+0xe2/0x100 10:44:26 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x10, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:26 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 960.873145][T32016] vfs_get_tree+0x89/0x2f0 [ 960.873164][T32016] do_mount+0x1306/0x1b30 [ 960.873187][T32016] ? copy_mount_string+0x40/0x40 [ 960.873210][T32016] ? _copy_from_user+0x13c/0x1a0 [ 960.873233][T32016] __x64_sys_mount+0x18f/0x230 [ 960.873257][T32016] do_syscall_64+0xf6/0x7d0 10:44:26 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x17, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) [ 960.873280][T32016] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 960.873300][T32016] RIP: 0033:0x45ca29 [ 960.873317][T32016] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 960.873325][T32016] RSP: 002b:00007f0805530c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 960.873341][T32016] RAX: ffffffffffffffda RBX: 00000000004f62c0 RCX: 000000000045ca29 [ 960.873350][T32016] RDX: 00000000200000c0 RSI: 0000000020000100 RDI: 0000000000000000 [ 960.873359][T32016] RBP: 000000000078bf00 R08: 0000000020000140 R09: 0000000000000000 [ 960.873368][T32016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 960.873377][T32016] R13: 0000000000000752 R14: 00000000004ca315 R15: 00007f08055316d4 [ 960.886150][T32025] hfsplus: unable to find HFS+ superblock [ 960.903348][T32016] 9pnet: Insufficient options for proto=fd [ 961.276204][T32064] FAULT_INJECTION: forcing a failure. [ 961.276204][T32064] name failslab, interval 1, probability 0, space 0, times 0 [ 961.276228][T32064] CPU: 1 PID: 32064 Comm: syz-executor.3 Not tainted 5.7.0-rc6-syzkaller #0 [ 961.276238][T32064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 961.276245][T32064] Call Trace: [ 961.276272][T32064] dump_stack+0x188/0x20d [ 961.276298][T32064] should_fail.cold+0x5/0xa [ 961.276318][T32064] ? lock_downgrade+0x840/0x840 [ 961.276338][T32064] ? fault_create_debugfs_attr+0x140/0x140 [ 961.276368][T32064] should_failslab+0x5/0xf [ 961.276395][T32064] __kmalloc_track_caller+0x2d1/0x7a0 [ 961.276420][T32064] ? p9_client_create+0x57c/0x1440 [ 961.276439][T32064] ? match_wildcard+0x300/0x300 [ 961.276458][T32064] ? lockdep_init_map_waits+0x26a/0x890 [ 961.276481][T32064] kmemdup_nul+0x2d/0xa0 [ 961.276500][T32064] p9_client_create+0x57c/0x1440 [ 961.276529][T32064] ? p9_client_zc_rpc.constprop.0+0x1140/0x1140 [ 961.276545][T32064] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 961.276568][T32064] ? __kmalloc_track_caller+0x622/0x7a0 [ 961.276588][T32064] ? lockdep_init_map_waits+0x26a/0x890 [ 961.276615][T32064] ? v9fs_session_init+0x1e7/0x18c0 [ 961.276631][T32064] v9fs_session_init+0x1e7/0x18c0 [ 961.276647][T32064] ? find_held_lock+0x2d/0x110 [ 961.276665][T32064] ? kmem_cache_alloc_trace+0x61f/0x7d0 [ 961.276691][T32064] ? v9fs_show_options+0x7e0/0x7e0 [ 961.276709][T32064] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 961.276726][T32064] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 961.276741][T32064] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 961.276763][T32064] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 961.276789][T32064] v9fs_mount+0x79/0x970 [ 961.276807][T32064] ? v9fs_write_inode+0x60/0x60 [ 961.276826][T32064] legacy_get_tree+0x105/0x220 [ 961.276843][T32064] ? ns_capable_common+0xe2/0x100 [ 961.276862][T32064] vfs_get_tree+0x89/0x2f0 [ 961.276880][T32064] do_mount+0x1306/0x1b30 [ 961.276903][T32064] ? copy_mount_string+0x40/0x40 [ 961.276924][T32064] ? _copy_from_user+0x13c/0x1a0 [ 961.276949][T32064] __x64_sys_mount+0x18f/0x230 [ 961.276971][T32064] do_syscall_64+0xf6/0x7d0 [ 961.276994][T32064] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 961.277008][T32064] RIP: 0033:0x45ca29 [ 961.277026][T32064] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 961.277035][T32064] RSP: 002b:00007f080550fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 961.277051][T32064] RAX: ffffffffffffffda RBX: 00000000004f62c0 RCX: 000000000045ca29 [ 961.277060][T32064] RDX: 00000000200000c0 RSI: 0000000020000100 RDI: 0000000000000000 [ 961.277069][T32064] RBP: 000000000078bfa0 R08: 0000000020000140 R09: 0000000000000000 [ 961.277078][T32064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 961.277086][T32064] R13: 0000000000000752 R14: 00000000004ca315 R15: 00007f08055106d4 [ 961.315520][T32059] hfsplus: unable to find HFS+ superblock [ 961.576457][T32082] hfsplus: unable to find HFS+ superblock [ 961.752000][T32094] hfsplus: unable to find HFS+ superblock 10:44:27 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d301a00000000001b0000000000000000000000000038"], 0x40) 10:44:27 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x700, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:27 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 10:44:27 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x18, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:27 executing program 3 (fault-call:5 fault-nth:18): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) [ 962.583252][T32114] FAULT_INJECTION: forcing a failure. [ 962.583252][T32114] name failslab, interval 1, probability 0, space 0, times 0 [ 962.599947][T32112] hfsplus: unable to find HFS+ superblock [ 962.629149][T32114] CPU: 1 PID: 32114 Comm: syz-executor.3 Not tainted 5.7.0-rc6-syzkaller #0 [ 962.637955][T32114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 962.648025][T32114] Call Trace: [ 962.651342][T32114] dump_stack+0x188/0x20d [ 962.655701][T32114] should_fail.cold+0x5/0xa [ 962.660221][T32114] ? lock_downgrade+0x840/0x840 [ 962.665086][T32114] ? fault_create_debugfs_attr+0x140/0x140 [ 962.670921][T32114] should_failslab+0x5/0xf 10:44:27 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 962.675362][T32114] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 962.680757][T32114] ? preempt_schedule_irq+0xee/0x150 [ 962.686065][T32114] ? retint_kernel+0x2b/0x2b [ 962.690678][T32114] p9_fd_create+0x164/0x380 [ 962.695204][T32114] ? p9_conn_create+0x520/0x520 [ 962.700088][T32114] ? kfree+0x1fe/0x2b0 [ 962.704177][T32114] p9_client_create+0x8a5/0x1440 [ 962.709144][T32114] ? p9_client_zc_rpc.constprop.0+0x1140/0x1140 [ 962.715405][T32114] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 962.721243][T32114] ? __kmalloc_track_caller+0x622/0x7a0 [ 962.726815][T32114] ? lockdep_init_map_waits+0x26a/0x890 [ 962.732391][T32114] ? v9fs_session_init+0x1e7/0x18c0 [ 962.737614][T32114] v9fs_session_init+0x1e7/0x18c0 [ 962.742837][T32114] ? find_held_lock+0x2d/0x110 [ 962.747657][T32114] ? fs_reclaim_release+0xa/0x20 [ 962.752733][T32114] ? v9fs_show_options+0x7e0/0x7e0 [ 962.757863][T32114] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 962.763427][T32114] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 962.769425][T32114] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 962.775256][T32114] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 962.780910][T32114] ? apparmor_cred_prepare+0x750/0x750 [ 962.786404][T32114] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 962.792180][T32114] ? lockdep_init_map_waits+0x26a/0x890 [ 962.797757][T32114] v9fs_mount+0x79/0x970 [ 962.802050][T32114] ? v9fs_write_inode+0x60/0x60 [ 962.807129][T32114] legacy_get_tree+0x105/0x220 [ 962.811949][T32114] ? ns_capable_common+0xe2/0x100 [ 962.817001][T32114] vfs_get_tree+0x89/0x2f0 [ 962.821446][T32114] do_mount+0x1306/0x1b30 10:44:27 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000040)=0x1) r4 = syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, r4, &(0x7f0000000240)=0x202, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xf2ba825992b3006c}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYRES16=r5, @ANYRES64=r4], 0x3}, 0x1, 0x0, 0x0, 0x44000}, 0x20004811) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000280)={0x9}, 0x4) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r5, 0x100, 0x0, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x105}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000084) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r5, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x8014) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$VIDIOC_ENUMAUDIO(r6, 0xc0345641, &(0x7f00000000c0)={0x9, "4fbba63fd9118aa85cf756ffa012710537c03aa880026febb3bc654b76ea794a", 0x2}) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) [ 962.825807][T32114] ? copy_mount_string+0x40/0x40 [ 962.830782][T32114] ? _copy_from_user+0x13c/0x1a0 [ 962.835765][T32114] __x64_sys_mount+0x18f/0x230 [ 962.840573][T32114] do_syscall_64+0xf6/0x7d0 [ 962.845113][T32114] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 962.851058][T32114] RIP: 0033:0x45ca29 [ 962.854970][T32114] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 10:44:27 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000040)=0x1) ioctl$KVM_DIRTY_TLB(r3, 0x4010aeaa, &(0x7f0000000040)={0x6, 0x9}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) 10:44:27 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x900, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:27 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d301b00000000001b0000000000000000000000000038"], 0x40) [ 962.874673][T32114] RSP: 002b:00007f0805530c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 962.883158][T32114] RAX: ffffffffffffffda RBX: 00000000004f62c0 RCX: 000000000045ca29 [ 962.891152][T32114] RDX: 00000000200000c0 RSI: 0000000020000100 RDI: 0000000000000000 [ 962.899179][T32114] RBP: 000000000078bf00 R08: 0000000020000140 R09: 0000000000000000 [ 962.907185][T32114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 962.915170][T32114] R13: 0000000000000752 R14: 00000000004ca315 R15: 00007f08055316d4 10:44:27 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d303e00000000001b0000000000000000000000000038"], 0x40) 10:44:27 executing program 3 (fault-call:5 fault-nth:19): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:27 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}], 0x4}}], 0x1, 0x0, 0x0) 10:44:27 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x19, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:27 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000040)=0x1) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f00000000c0)={{0x3c, @empty, 0x4e21, 0x3, 'lblcr\x00', 0x15, 0x5, 0x1c}, {@empty, 0x4e21, 0x4, 0xbd, 0x7, 0x5}}, 0x44) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) 10:44:27 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x1020, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:28 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d309b00000000001b0000000000000000000000000038"], 0x40) [ 963.272658][T32149] FAULT_INJECTION: forcing a failure. [ 963.272658][T32149] name failslab, interval 1, probability 0, space 0, times 0 10:44:28 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}], 0x4}}], 0x1, 0x0, 0x0) [ 963.352668][T32149] CPU: 0 PID: 32149 Comm: syz-executor.3 Not tainted 5.7.0-rc6-syzkaller #0 [ 963.361398][T32149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 963.371652][T32149] Call Trace: [ 963.375064][T32149] dump_stack+0x188/0x20d [ 963.379430][T32149] should_fail.cold+0x5/0xa [ 963.383958][T32149] ? lock_downgrade+0x840/0x840 [ 963.388944][T32149] ? fault_create_debugfs_attr+0x140/0x140 [ 963.394785][T32149] should_failslab+0x5/0xf [ 963.399223][T32149] __kmalloc_track_caller+0x2d1/0x7a0 [ 963.404616][T32149] ? match_number.isra.0+0x81/0x170 [ 963.409932][T32149] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 963.415503][T32149] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 963.421609][T32149] kmemdup_nul+0x2d/0xa0 [ 963.425883][T32149] match_number.isra.0+0x81/0x170 [ 963.430929][T32149] ? match_strdup+0x80/0x80 [ 963.435476][T32149] ? v9fs_session_init+0x1e7/0x18c0 [ 963.440699][T32149] ? legacy_get_tree+0x105/0x220 [ 963.445722][T32149] ? vfs_get_tree+0x89/0x2f0 [ 963.450331][T32149] ? memcpy+0x39/0x60 [ 963.454334][T32149] parse_opts.part.0+0x207/0x330 [ 963.459295][T32149] ? p9_fd_show_options+0x1c0/0x1c0 [ 963.464517][T32149] ? lock_downgrade+0x840/0x840 [ 963.469396][T32149] ? v9fs_get_trans_by_name+0xd9/0x110 [ 963.474875][T32149] ? trace_hardirqs_off+0x50/0x220 [ 963.480008][T32149] p9_fd_create+0x9b/0x380 [ 963.484444][T32149] ? p9_conn_create+0x520/0x520 [ 963.489313][T32149] ? kfree+0x1eb/0x2b0 [ 963.493398][T32149] ? p9_client_create+0x83b/0x1440 [ 963.498527][T32149] ? lockdep_hardirqs_on+0x463/0x620 [ 963.503853][T32149] p9_client_create+0x8a5/0x1440 [ 963.508823][T32149] ? p9_client_zc_rpc.constprop.0+0x1140/0x1140 [ 963.515083][T32149] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 963.521000][T32149] ? __kmalloc_track_caller+0x622/0x7a0 [ 963.526749][T32149] ? lockdep_init_map_waits+0x26a/0x890 [ 963.532322][T32149] ? v9fs_session_init+0x1e7/0x18c0 [ 963.537539][T32149] v9fs_session_init+0x1e7/0x18c0 [ 963.542587][T32149] ? find_held_lock+0x2d/0x110 [ 963.547381][T32149] ? fs_reclaim_release+0xa/0x20 [ 963.552348][T32149] ? v9fs_show_options+0x7e0/0x7e0 [ 963.557583][T32149] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 963.563696][T32149] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 963.569698][T32149] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 963.575526][T32149] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 963.581094][T32149] ? apparmor_cred_prepare+0x750/0x750 [ 963.586664][T32149] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 963.592333][T32149] ? lockdep_init_map_waits+0x26a/0x890 [ 963.597911][T32149] v9fs_mount+0x79/0x970 [ 963.602175][T32149] ? v9fs_write_inode+0x60/0x60 [ 963.610522][T32149] legacy_get_tree+0x105/0x220 [ 963.615322][T32149] ? ns_capable_common+0xe2/0x100 [ 963.620368][T32149] vfs_get_tree+0x89/0x2f0 [ 963.624832][T32149] do_mount+0x1306/0x1b30 [ 963.629188][T32149] ? copy_mount_string+0x40/0x40 [ 963.634151][T32149] ? _copy_from_user+0x13c/0x1a0 [ 963.639113][T32149] __x64_sys_mount+0x18f/0x230 [ 963.643901][T32149] do_syscall_64+0xf6/0x7d0 [ 963.648429][T32149] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 963.654434][T32149] RIP: 0033:0x45ca29 [ 963.658604][T32149] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 963.678310][T32149] RSP: 002b:00007f0805530c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 963.686742][T32149] RAX: ffffffffffffffda RBX: 00000000004f62c0 RCX: 000000000045ca29 [ 963.694813][T32149] RDX: 00000000200000c0 RSI: 0000000020000100 RDI: 0000000000000000 [ 963.703467][T32149] RBP: 000000000078bf00 R08: 0000000020000140 R09: 0000000000000000 [ 963.711445][T32149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 963.719437][T32149] R13: 0000000000000752 R14: 00000000004ca315 R15: 00007f08055316d4 10:44:28 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r1, &(0x7f00000004c0)={{0x1b, 0x28, 0x7, 0x7, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r2, &(0x7f00000004c0)={{0x1b, 0x28, 0x7, 0x7, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000003c0)={0x704, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff, r1, r2]}, 0x4) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000040)=0x1) ioctl$VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000040)={0xa, 0x3, 0x7, 0x0, 0xffffffffffffffff}) r7 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r6, 0x24, &(0x7f00000000c0)={0x1, 0x1, 0x0, 0x3, r7}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) [ 963.751144][T32152] hfsplus: unable to find HFS+ superblock 10:44:28 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x2000, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:28 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d30f000000000001b0000000000000000000000000038"], 0x40) 10:44:28 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x23, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:28 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}], 0x4}}], 0x1, 0x0, 0x0) 10:44:28 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:28 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d308001000000001b0000000000000000000000000038"], 0x40) 10:44:28 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) 10:44:28 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0xffffffffffffff20, &(0x7f0000000240)=[{&(0x7f00000000c0)="77443265ae7f605fcdf05edbd4c8f46b45afb2d7cb1065da22016909b92a7722f2f9add24cc3e35c59ead042cdf45d6b679d1264555f0ebe52bdbb99812fe44babdc98a6c78e488c416978c5f5bab1cc79981cf4458126b61213504311562865a5924567272dea11563835e31709ea541ea82731ea5bf86c6e0f6354d8b5d2b4011b040dcfa3eaf4ab921029eee802d1c5a233dbbcc5873a90386fb5b71e3b77"}, {&(0x7f0000000000)="bfb0a4952d1243181a589e8fc8d8f4440bdf307bfa2a3e5043705ca42fa06085a67915d44b6f4083c13bbe0f"}, {&(0x7f0000000500)="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"}, {&(0x7f0000000180)="1b28ac76dd92c701d7d8718c682326b210ec51ff746412d92859cd4ccd0106c1fe9bc1e817055e264c5ab3104c151317ac253f212aae9c139469ebb6a0443c639f24027908cde827c84fea44ea846318a310eb16357737ffc8049ab054b96940fe51033bf427633166cb113b6b651083890a4203170f57f0f2278fb98ccd86fd422ce906f5"}, {&(0x7f0000000380)="290473519c4fd202a75cb29f88a1f740b9c936d97c704ab233a1a75e4745e67cfc8922d5d95fabc511c407e22eb6c6f433fc5977118b74f3381c0da14aa3185f14c499f6154af807a7903123cd7b402ced185231d5e7616bb8c8ca1ac8bb9b2f2595cc2c6807770898b2454d6d6a50525f0185c06ac9607364daf8d8db746b8fdd8d6bd5c5e294e5bae23adcc40733f698b065345ca1b1945c71854508e9394761b8d448ae48eec73272bc92da2f269fa150f85bc7963a96123576350d6a1e2a8144dd2d77f379"}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000001b00000000010000000000000002410000001000137564703a73797a3200000000"], 0x2c}}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x1c, r2, 0x400, 0x70bd2d, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44004}, 0x50005) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000040)=0x1) ioctl$BLKPBSZGET(r5, 0x127b, &(0x7f0000000040)) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x62, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000003580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) 10:44:28 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x2010, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) [ 964.048338][T32187] hfsplus: unable to find HFS+ superblock [ 964.055221][T32149] 9pnet: Insufficient options for proto=fd 10:44:28 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) 10:44:28 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x300, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:29 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300007000000001b0000000000000000000000000038"], 0x40) 10:44:29 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x3f00, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:29 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) 10:44:29 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300009000000001b0000000000000000000000000038"], 0x40) 10:44:29 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x2, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) [ 964.407655][T32214] attempt to access beyond end of device [ 964.433242][T32214] loop4: rw=2048, want=3, limit=1 [ 964.468366][T32214] hfsplus: unable to find HFS+ superblock 10:44:29 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {0x0}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) 10:44:29 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d30000a000000001b0000000000000000000000000038"], 0x40) 10:44:29 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0xedc0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:29 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d30000c000000001b0000000000000000000000000038"], 0x40) 10:44:29 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x500, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:29 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x3, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:29 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {0x0}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) 10:44:29 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0xff00, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:29 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0xe, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4c005}, 0x2000040) exit_group(0xc736) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000040)=0x1) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x18, r4, 0x1, 0x0, 0x0, {0x17}, [@TIPC_NLA_NODE={0x4, 0x6, 0x0, 0x0}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x220, r4, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdaf0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4356}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x400}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK={0x118, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x73f1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x99f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}]}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x39}]}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x40000) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffefff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) [ 965.009970][T32251] attempt to access beyond end of device [ 965.086210][T32251] loop4: rw=2048, want=3, limit=2 10:44:29 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d30000d000000001b0000000000000000000000000038"], 0x40) 10:44:29 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x4, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) [ 965.133139][T32251] hfsplus: unable to find HFS+ superblock 10:44:29 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x1000000, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:29 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {0x0}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) 10:44:30 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d30000e000000001b0000000000000000000000000038"], 0x40) 10:44:30 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) 10:44:30 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x600, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:30 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x2000000, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:30 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d30000f000000001b0000000000000000000000000038"], 0x40) 10:44:30 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) 10:44:30 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x5, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:30 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r6 = dup(r5) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000040)=0x1) ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000040)=0x1) connect$unix(r3, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) ioctl$KDFONTOP_GET(r6, 0x4b72, &(0x7f0000000180)={0x1, 0x1, 0xb, 0x8, 0x0, &(0x7f0000000500)}) [ 965.488174][T32292] hfsplus: unable to find HFS+ superblock 10:44:30 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x700, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:30 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) 10:44:30 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300018000000001b0000000000000000000000000038"], 0x40) 10:44:30 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x6, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:30 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x3000000, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:30 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000040)=0x1) sendmsg$AUDIT_SIGNAL_INFO(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x18, 0x70bd2a, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r4, &(0x7f00000004c0)={{0x1b, 0x28, 0x7, 0x7, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) r5 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setown(r4, 0x8, r5) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) [ 965.747304][T32313] hfsplus: unable to find HFS+ superblock 10:44:30 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d30001a000000001b0000000000000000000000000038"], 0x40) 10:44:30 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x900, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:30 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) 10:44:30 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000480)=""/116, 0x74}, {0x0}], 0x5}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000380)=""/208, 0xd0}], 0x2, &(0x7f0000000280)=""/33, 0x21}, 0x10000}, {{&(0x7f0000001500)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001580)=""/33, 0x21}], 0x1, &(0x7f0000001680)=""/54, 0x36}, 0x7fc000}, {{&(0x7f00000016c0)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000001940)=[{&(0x7f0000001740)=""/97, 0x61}, {&(0x7f00000017c0)=""/92, 0x5c}, {&(0x7f0000001840)=""/214, 0xd6}, {&(0x7f0000002580)=""/4096, 0x1000}], 0x4, &(0x7f0000001980)=""/207, 0xcf}, 0x8}], 0x4, 0x0, 0x0) getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)) 10:44:30 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x4000000, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:30 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x7, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:30 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000040)=0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)={0x8, 0x0, [{0x317, 0x0, 0x841}, {0xab8, 0x0, 0x2efa}, {0x4b564d04, 0x0, 0x2}, {0xaba, 0x0, 0xfffffffffffffd92}, {0xc0011035, 0x0, 0x6}, {0x914, 0x0, 0x6}, {0x2f5, 0x0, 0x40}, {0x20b}]}) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) [ 966.144021][T32345] hfsplus: unable to find HFS+ superblock 10:44:30 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {0x0}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) 10:44:31 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0xa00, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:31 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x8, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:31 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d30001b000000001b0000000000000000000000000038"], 0x40) 10:44:31 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x5000000, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:31 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {0x0}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) 10:44:31 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000040)=0x1) openat$cgroup_ro(r3, &(0x7f0000000040)='memory.current\x00', 0x0, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540), 0x0, 0x0, 0x0) [ 966.395669][T32366] hfsplus: unable to find HFS+ superblock 10:44:31 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x9, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:31 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d30003e000000001b0000000000000000000000000038"], 0x40) 10:44:31 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x6000000, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:31 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0xc00, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:31 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0xae9, 0x40000) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f00000000c0)={0x0, 0x6}) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x9}, 0x0, 0x0, 0x0, 0x0, 0x3}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setparam(r2, &(0x7f0000000100)=0x5) shmget(0x0, 0x2000, 0x1, &(0x7f0000ffc000/0x2000)=nil) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000240)=""/75) 10:44:31 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d30007f000000001b0000000000000000000000000038"], 0x40) 10:44:31 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {0x0}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) 10:44:31 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x10, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:31 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d30009b000000001b0000000000000000000000000038"], 0x40) [ 966.755050][T32404] hfsplus: unable to find HFS+ superblock 10:44:31 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x7000000, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:31 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) 10:44:31 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000040)=0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r3, &(0x7f00000004c0)={{0x1b, 0x28, 0x7, 0x7, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000100)={0x9b0000, 0x1, 0x1, r3, 0x0, &(0x7f00000000c0)={0x980927, 0x8001, [], @p_u16=&(0x7f0000000040)=0x9}}) getsockopt$X25_QBITINCL(r4, 0x106, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) r5 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400f77e280000005e00ffffba16a0aa1c0009b3ebeab36cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x4c054) recvmmsg(r5, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) 10:44:31 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d3000f0000000001b0000000000000000000000000038"], 0x40) 10:44:31 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0xd00, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:31 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x8000000, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:31 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x300, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:31 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='com.apple.system.Security\x00', &(0x7f0000000240)=""/72, 0x48) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000040)=0x1) readlinkat(r5, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)=""/80, 0x50) r6 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000040)=0x1) ioctl$SNDRV_PCM_IOCTL_XRUN(r6, 0x4148, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) setns(0xffffffffffffffff, 0x80) 10:44:31 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) 10:44:31 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000f00000001b0000000000000000000000000038"], 0x40) 10:44:31 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x9000000, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) [ 967.173371][T32437] hfsplus: unable to find HFS+ superblock 10:44:32 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x500, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:32 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x600, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:32 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) 10:44:32 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x10000000, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:32 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0xe00, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:32 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000100001b0000000000000000000000000038"], 0x40) 10:44:32 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) 10:44:32 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) 10:44:32 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x700, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:32 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x20000000, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:32 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000800100001b0000000000000000000000000038"], 0x40) 10:44:32 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000040)=0x1) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000040), 0x4) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) [ 967.607904][T32474] hfsplus: unable to find HFS+ superblock 10:44:32 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x900, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:32 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) 10:44:32 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) 10:44:32 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000200001b0000000000000000000000000038"], 0x40) 10:44:32 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x1020, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:32 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0xf8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000040)=0x1) sendmsg$tipc(r3, &(0x7f0000000180)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x0, 0x1}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000003580)="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", 0x1000}], 0x2, &(0x7f0000000100)="9cdda83dfd20494b45468af1630fa2dcafe41d1c5b1dff0a2b94c5fc2e7f4a98d59241c21018f09315924d92858216717149c2b5b03839704e59fbad16e044c93e45ae2b634e8d58", 0x48, 0x4004}, 0x200000d0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) 10:44:32 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x1020, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:32 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000700001b0000000000000000000000000038"], 0x40) 10:44:32 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{0x0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) [ 967.984854][T32519] hfsplus: unable to find HFS+ superblock 10:44:33 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x20100000, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:33 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{0x0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) 10:44:33 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) llistxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)=""/101, 0x65) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r3, &(0x7f00000004c0)={{0x1b, 0x28, 0x7, 0x7, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000180)={0x6, 0x6768, 0x9cbe, 0x3, 0x2}) r4 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000040)=0x1) r5 = openat(r4, &(0x7f0000000040)='./file0\x00', 0x6000, 0x0) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f00000000c0)={0x7, 0x3, 0x7, 0x101, 0x3ff, 0xce9}) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) r6 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/158, 0x9e}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) 10:44:33 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x2000, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:33 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x1700, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:33 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000800001b0000000000000000000000000038"], 0x40) [ 968.711795][T32551] hfsplus: unable to find HFS+ superblock 10:44:33 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{0x0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) 10:44:33 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000900001b0000000000000000000000000038"], 0x40) 10:44:33 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x210300, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r5 = socket(0x10, 0x803, 0x0) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r8 = dup(r7) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f0000000040)=0x1) ioctl$MON_IOCQ_URB_LEN(r8, 0x9201) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0xffffff7f, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MASTER={0x8, 0xa, r9}]}, 0x28}}, 0x0) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000a80)={0x358, 0x12, 0x800, 0x70bd2c, 0x25dfdbfb, {0xb, 0x38, 0x3f, 0x40, {0x4e22, 0x4e20, [0x9, 0x7ff, 0x9, 0xe4], [0x200, 0x986, 0x9, 0x803], r9, [0x80004, 0x6]}, 0x1, 0xc6}, [@INET_DIAG_REQ_BYTECODE={0xc7, 0x1, "e991981e94cffb895d2fc1f57cba0ab97814064046c660db745888392155d35eb6387c3a44a371dc2c757584bb86d1871ddcf33af9bb9c128da2234478a7d30c0f073ac7d08cd69f940e9c8da02f970336f0cca8c5646970417ef4978d15d2554f0ee9f9904c9305b70f6ce11c5099502b068f03003c6da7128e752a7c1700aa0a0294886bdf04840bf8bb126205b7dfa500f030c378ea24276a2f82d94f229df920bd408893ce980a384872133cd535d02a27713d5c94dfb0ce050b8b4ff0eb7d7178"}, @INET_DIAG_REQ_BYTECODE={0x86, 0x1, "c2df9c155d1a4ecf8fbe87e65c36391f481dc54a5cc6263491cec0c19884fb8cb4b297c69a9771c22bb1da56f137211037677f1ba87756e13ada51b3c52d047907aa57d93d3187b78e7c3ed08a110114f5be90c0fc3e469d258a0793e89829b5a21a8aa2b68bcc6839ab8f634ab84a8ffb912812cfbc675d953eb8e11b6283fa863b"}, @INET_DIAG_REQ_BYTECODE={0xab, 0x1, "a5a6f42c606477ba15112ff63f531962ed428c9760b08d77589c486ca4763ed698109b4f0ecd6a31400ed2bf856827a689a7c0bae8aaea6880b935e35041cba35fe17c81d2db7b717d0642c121f7cf5b79299b6cd0ed34ea982dbb4a9a7addc800406549f65a7c5bf9b9d2b4e3e442c129425bf9173211188a409a0752ada11da103326820f39d7c018562f8cb3c149bf3284c945c6562f7ac2981f15dbf97f7b65023ccd7acf2"}, @INET_DIAG_REQ_BYTECODE={0xd7, 0x1, "f4a1abfa52cb2b3d09af1c915283f5a4cd8c8c1abc1a023beb46cfdf6ae6d8f9a254e0fc14305e712219046f3d36ea967744728130a32f958d0db56dd749edb52a2be76fb7182faca56a54214671cdb69b3952647c4c23360fdd941a154d9c3bf8dbe63e28837ba8997f5bab5eeb2a102f66db3ed3b2bdf2455f68dc70c7879086ccc7e22e551a7eb90dc5389d8c29ba62dd7bd4721d57d65e81ce7c7f4d6a72dd152c9b032a013b6a03ed647bf8516f5c5c707d9781652ea602d07d8658b06d59964b2dce58c7ce0de1782d3d77f76f839474"}, @INET_DIAG_REQ_BYTECODE={0x35, 0x1, "05d9ce237857573b1be27061235da196a272f153079568a4e459db7423b707a1fa8df2874720afc95c3ec5209503e104fa"}]}, 0x358}}, 0x20000010) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) 10:44:33 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x2010, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:33 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) 10:44:33 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x1800, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) [ 969.075685][T32570] device bridge_slave_0 left promiscuous mode [ 969.130057][T32580] hfsplus: unable to find HFS+ superblock [ 969.141758][T32570] bridge0: port 1(bridge_slave_0) entered disabled state 10:44:34 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x3f000000, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:34 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000a00001b0000000000000000000000000038"], 0x40) 10:44:34 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='com.apple.system.Security\x00', &(0x7f0000000240)=""/72, 0x48) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000040)=0x1) readlinkat(r5, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)=""/80, 0x50) r6 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000040)=0x1) ioctl$SNDRV_PCM_IOCTL_XRUN(r6, 0x4148, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) setns(0xffffffffffffffff, 0x80) 10:44:34 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x3f00, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:34 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x1900, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:34 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000040)=0x1) ioctl$SG_EMULATED_HOST(r3, 0x2203, &(0x7f0000000100)) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="28000000100001047fffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000fc621a9d54000008000a00", @ANYRES32=r5, @ANYBLOB], 0x28}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r6, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x9, &(0x7f0000000240)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @exit, @map_val={0x18, 0x4, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xc90}, @initr0, @map={0x18, 0xa}], &(0x7f0000000180)='syzkaller\x00', 0x4, 0xa, &(0x7f0000000380)=""/10, 0x41000, 0x0, [], r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x2, 0x8001, 0x9}, 0x10, r6}, 0x78) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @dev, @loopback}, &(0x7f00000000c0)=0xc) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) 10:44:34 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000c00001b0000000000000000000000000038"], 0x40) [ 969.753927][T32602] hfsplus: unable to find HFS+ superblock 10:44:34 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000040)=0x1) ioctl$UI_END_FF_UPLOAD(r3, 0x406855c9, &(0x7f00000000c0)={0xc, 0x6170e6b9, {0x53, 0x8, 0x9, {0x9, 0x1a4c}, {0x1f, 0xfff}, @rumble={0x1, 0x2}}, {0x51, 0x3, 0x401, {0xc975, 0x8000}, {0x7, 0x3ff}, @rumble={0x1, 0x7}}}) exit_group(0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext, 0x140b2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) 10:44:34 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0xedc0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:34 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:34 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x8cffffff, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:34 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='com.apple.system.Security\x00', &(0x7f0000000240)=""/72, 0x48) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000040)=0x1) readlinkat(r5, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)=""/80, 0x50) r6 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000040)=0x1) ioctl$SNDRV_PCM_IOCTL_XRUN(r6, 0x4148, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) setns(0xffffffffffffffff, 0x80) 10:44:34 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000d00001b0000000000000000000000000038"], 0x40) 10:44:34 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0xc0ed0000, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:34 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000040)=0x1) ioctl$VFIO_IOMMU_MAP_DMA(r3, 0x3b71, &(0x7f0000000040)={0x20, 0x2, 0x1, 0x4, 0x9}) 10:44:34 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0xff00, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) [ 970.105732][T32634] hfsplus: unable to find HFS+ superblock 10:44:35 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x2010, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:35 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000e00001b0000000000000000000000000038"], 0x40) 10:44:35 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0xfeffff, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:35 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0xf6ffffff, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:35 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4088, 0xff8}, {&(0x7f00000000c0)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x102, 0x0) 10:44:35 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x210300, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r5 = socket(0x10, 0x803, 0x0) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r8 = dup(r7) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f0000000040)=0x1) ioctl$MON_IOCQ_URB_LEN(r8, 0x9201) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0xffffff7f, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MASTER={0x8, 0xa, r9}]}, 0x28}}, 0x0) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000a80)={0x358, 0x12, 0x800, 0x70bd2c, 0x25dfdbfb, {0xb, 0x38, 0x3f, 0x40, {0x4e22, 0x4e20, [0x9, 0x7ff, 0x9, 0xe4], [0x200, 0x986, 0x9, 0x803], r9, [0x80004, 0x6]}, 0x1, 0xc6}, [@INET_DIAG_REQ_BYTECODE={0xc7, 0x1, "e991981e94cffb895d2fc1f57cba0ab97814064046c660db745888392155d35eb6387c3a44a371dc2c757584bb86d1871ddcf33af9bb9c128da2234478a7d30c0f073ac7d08cd69f940e9c8da02f970336f0cca8c5646970417ef4978d15d2554f0ee9f9904c9305b70f6ce11c5099502b068f03003c6da7128e752a7c1700aa0a0294886bdf04840bf8bb126205b7dfa500f030c378ea24276a2f82d94f229df920bd408893ce980a384872133cd535d02a27713d5c94dfb0ce050b8b4ff0eb7d7178"}, @INET_DIAG_REQ_BYTECODE={0x86, 0x1, "c2df9c155d1a4ecf8fbe87e65c36391f481dc54a5cc6263491cec0c19884fb8cb4b297c69a9771c22bb1da56f137211037677f1ba87756e13ada51b3c52d047907aa57d93d3187b78e7c3ed08a110114f5be90c0fc3e469d258a0793e89829b5a21a8aa2b68bcc6839ab8f634ab84a8ffb912812cfbc675d953eb8e11b6283fa863b"}, @INET_DIAG_REQ_BYTECODE={0xab, 0x1, "a5a6f42c606477ba15112ff63f531962ed428c9760b08d77589c486ca4763ed698109b4f0ecd6a31400ed2bf856827a689a7c0bae8aaea6880b935e35041cba35fe17c81d2db7b717d0642c121f7cf5b79299b6cd0ed34ea982dbb4a9a7addc800406549f65a7c5bf9b9d2b4e3e442c129425bf9173211188a409a0752ada11da103326820f39d7c018562f8cb3c149bf3284c945c6562f7ac2981f15dbf97f7b65023ccd7acf2"}, @INET_DIAG_REQ_BYTECODE={0xd7, 0x1, "f4a1abfa52cb2b3d09af1c915283f5a4cd8c8c1abc1a023beb46cfdf6ae6d8f9a254e0fc14305e712219046f3d36ea967744728130a32f958d0db56dd749edb52a2be76fb7182faca56a54214671cdb69b3952647c4c23360fdd941a154d9c3bf8dbe63e28837ba8997f5bab5eeb2a102f66db3ed3b2bdf2455f68dc70c7879086ccc7e22e551a7eb90dc5389d8c29ba62dd7bd4721d57d65e81ce7c7f4d6a72dd152c9b032a013b6a03ed647bf8516f5c5c707d9781652ea602d07d8658b06d59964b2dce58c7ce0de1782d3d77f76f839474"}, @INET_DIAG_REQ_BYTECODE={0x35, 0x1, "05d9ce237857573b1be27061235da196a272f153079568a4e459db7423b707a1fa8df2874720afc95c3ec5209503e104fa"}]}, 0x358}}, 0x20000010) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) 10:44:35 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x1000000, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) [ 970.447181][T32661] hfsplus: unable to find HFS+ superblock 10:44:35 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000f00001b0000000000000000000000000038"], 0x40) 10:44:35 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0xff000000, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:35 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000002540), 0x0, 0x0, 0x0) 10:44:35 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000001800001b0000000000000000000000000038"], 0x40) 10:44:35 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x2300, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:35 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x2000000, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:35 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000040)=0x1) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r3, 0x40184150, &(0x7f0000000180)={0x0, &(0x7f0000000380)="9ccb3f752f38bbdb04b756ab1f4abe0b938f476dd5202ab4051978841aea225b9b3f1552595668b7e566983a2e2ca3a0b76b0e92c82fac66f78182f5d91da88988ea0dc1b980d9ddac90f751d546c28420488815191e2b12422d3b95b4ad6872065cf73d680bcf95b492a41c84abf9a5418aed501ed3db42755d6921bfd422f8daf4871f6cce049e56cf877b5699", 0x8e}) exit_group(0x0) mkdir(0x0, 0x0) r4 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, r4, 0xffffffffffffffff, r3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/110, 0x6e}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000500)=ANY=[@ANYBLOB="66696c646572000000000000000000000000000000000000000000000000000083000000d6071927e071db816ffbff175cc4a86d8981f6fb1f0f8e0fcbf0d587b9fc67afc77d6ed423225a7e02d340ff7f42707cdd6ddc02ed338e951943441c0010d3190ebede07d646a425a9765985f29cc4c64e85e105ea468fff181122d60b7f87288400cdf1af6a6ef239ef80ceb41b76a080729ca538a82746b1a86984430812b64000f9d936da0818a7544616e8"], &(0x7f0000000040)=0xa7) 10:44:35 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0xffff0000, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:35 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000001a00001b0000000000000000000000000038"], 0x40) 10:44:35 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='com.apple.system.Security\x00', &(0x7f0000000240)=""/72, 0x48) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000040)=0x1) readlinkat(r5, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)=""/80, 0x50) r6 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000040)=0x1) ioctl$SNDRV_PCM_IOCTL_XRUN(r6, 0x4148, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) setns(0xffffffffffffffff, 0x80) [ 970.892035][T32697] hfsplus: unable to find HFS+ superblock 10:44:35 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) 10:44:35 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x3000000, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:35 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x2b48, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:35 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000001b00001b0000000000000000000000000038"], 0x40) 10:44:35 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0xffffff8c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:36 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000040)=0x1) sendmsg$AUDIT_SIGNAL_INFO(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x18, 0x70bd2a, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r4, &(0x7f00000004c0)={{0x1b, 0x28, 0x7, 0x7, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) r5 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setown(r4, 0x8, r5) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) 10:44:36 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000003e00001b0000000000000000000000000038"], 0x40) [ 971.206491][T32729] hfsplus: unable to find HFS+ superblock 10:44:36 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x31000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000500), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000240)={0x40000100, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)=0x0, {0x22}, &(0x7f0000000380)=""/185, 0xb9, &(0x7f0000000140)=""/22, &(0x7f0000000180)=[0x0, 0x0, r1, r2, r3, r4, r5], 0x7}, 0x50) ptrace$poke(0x5, r6, &(0x7f0000000440), 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) 10:44:36 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x4000000, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:36 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0xfffffff6, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:36 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x3f00, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:36 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000007f00001b0000000000000000000000000038"], 0x40) 10:44:36 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0xedc000000000, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:36 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000040)=0x1) sendmsg$AUDIT_SIGNAL_INFO(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x18, 0x70bd2a, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r4, &(0x7f00000004c0)={{0x1b, 0x28, 0x7, 0x7, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) r5 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setown(r4, 0x8, r5) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) [ 971.624705][T32757] hfsplus: unable to find HFS+ superblock 10:44:36 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d30ffffff8000001b0000000000000000000000000038"], 0x40) 10:44:36 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x5000000, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) [ 971.728047][T32745] IPVS: ftp: loaded support on port[0] = 21 10:44:36 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:36 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x6000000, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:36 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000009b00001b0000000000000000000000000038"], 0x40) [ 972.059532][ T311] hfsplus: unable to find HFS+ superblock 10:44:37 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000040)=0x1) sendmsg$AUDIT_SIGNAL_INFO(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x18, 0x70bd2a, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r4, &(0x7f00000004c0)={{0x1b, 0x28, 0x7, 0x7, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) r5 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setown(r4, 0x8, r5) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) 10:44:37 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x100000000000000, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:37 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000ffff00001b0000000000000000000000000038"], 0x40) 10:44:37 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x7000000, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:37 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x4244, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:37 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x2, 0x40000) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f00000015c0)=ANY=[@ANYBLOB="010000000000200000000000000900"/24]) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x3}, 0x4) sendmsg$inet(r2, &(0x7f0000001940)={&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000500)="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", 0x1000}, {&(0x7f00000000c0)="e08c598a7c15b7e25755de4c986488a928a23564a1a6df5e1f8bc13073c5ec022831b9a83516be0e41f3635827f6ae298e249bf58eb5eeb94cf468da24e2e500c61a9824176ece55fca706ba32cfa5cff6217270a4734309", 0x58}, {&(0x7f0000000380)="a0c04d4a216b5d396bd25d5978b582e0bfe86205fae4af585f0bfb04e47ed3899312af920b8c9c6638bc1cdc2a909e1a3e99e4fa9b2dc2135a6ffb2b97be2563d6d3b9eef3c903719964b58dbb954d75ffdbb1254137f29d8988242ae1dc06c3b87dfeeeaaf95302d806444fa75c80fef63b7552d748b386576df77746374b7dba3ebf77f532c92f364eef250c7d3676f32f856def94f53efefbee66daf7d5dd9ffce911bf4d5c4da7aee08800cfd3e7d8819170a85fca5265ec8892ca7b0fa5ffcc0d9a90", 0xc5}, {&(0x7f0000001500)="7838af80f2296f9d7906d55c08b5215be16d149120f773418b59c8bf18f79a00fa2d2325e747d0206c602ac6cb6ab8542a80c5949704ac537d54ada55d758937a8ce897075dc97d38342cf3e3f7a838dee948468a50f026dc879516bbe47d1b00c0d6640964d598e892e8f74a73f7277a5bf68082df8073bc9294f58cb29807f0eaa16787315a9ced43a6b32c26d70a8294f62", 0x93}, {&(0x7f0000001680)="583555efab1f0f1d2076d788d896a2fd156ed38f6d6314ae96eb64273f02e14330e1adfb63db6b6d71e9211270bd20d883a09e2a24cf34096b96c1f9c6f5246a87402c7d944f962e5558fe117076233ed74bdc04a800e976b458c559b30167b1b4b77cd2d7af273de842cd7360715ab2a1743350d45261b250b83677758d21f4ef316c9623406eee5243e2c58c55bdef9a1d2ca8db8673f830e61224d49d", 0x9e}], 0x5}, 0xc0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000001740)='/dev/null\x00', 0x181000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)={0x5, 0x12, 0x4000000000000800, 0x5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001280)={r4, &(0x7f0000000040), &(0x7f00000011c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001040)={r4, &(0x7f0000001900)='7Ls', &(0x7f0000003580)=""/4096}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000018c0)={r4, &(0x7f00000017c0)="e4d20865b0c62ca16ac3afc17b7294dd5a8c9784a4230a510f6be511386e62dd36", &(0x7f0000001800)=""/135}, 0x20) ioctl$CAPI_GET_ERRCODE(r3, 0x80024321, &(0x7f0000001780)) 10:44:37 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x200000000000000, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) [ 972.637110][ T353] hfsplus: unable to find HFS+ superblock [ 972.683394][ T2888] tipc: TX() has been purged, node left! 10:44:37 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x4442, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:37 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x8000000, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:37 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r1, &(0x7f00000004c0)={{0x1b, 0x28, 0x7, 0x7, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000000c0)={0x49f, 0x5, 0x4, 0x400, 0x80000000, {}, {0x2, 0x8, 0xff, 0xff, 0x6, 0xf8, "99057ac1"}, 0x5, 0x3, @fd, 0x6b3, 0x0, r1}) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000040)) 10:44:37 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x300000000000000, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:37 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d3080ffffff00001b0000000000000000000000000038"], 0x40) 10:44:37 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000040)=0x1) sendmsg$AUDIT_SIGNAL_INFO(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x18, 0x70bd2a, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r4, &(0x7f00000004c0)={{0x1b, 0x28, 0x7, 0x7, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) r5 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setown(r4, 0x8, r5) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) [ 972.938256][ T376] hfsplus: unable to find HFS+ superblock 10:44:37 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000040)=0x1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000000c0)={0x0, @initdev, @loopback}, &(0x7f0000000100)=0xc) r3 = socket$inet(0x10, 0x2000000002, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r6 = dup(r5) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000040)=0x1) setsockopt$inet_mreqsrc(r6, 0x0, 0x25, &(0x7f0000000040)={@remote, @multicast1, @broadcast}, 0xc) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) 10:44:37 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x9000000, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:37 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300002000000001b0000000000000000000000000038"], 0x40) 10:44:37 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x482b, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:38 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002024ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000040)=0x2, 0x4) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) mkdir(0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f0000000180)={0xffffffee, 0x7, 0x4cc, @multicast, 'batadv_slave_1\x00'}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000040)=0x1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x5) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r6 = dup(r5) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000040)=0x1) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000240)={0x6, 0x9, 0x1, 0x0, 0x81c9, 0x80, 0x2, 0x1, 0x40, 0x0, 0x22, 0x9, 0x0, 0x100, 0x20, 0x2, 0xca, 0x1, 0x80, [], 0x1, 0x8001}) 10:44:38 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x400000000000000, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:38 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300007000000001b0000000000000000000000000038"], 0x40) 10:44:38 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x10000000, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:38 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x2, 0x40000) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f00000015c0)=ANY=[@ANYBLOB="010000000000200000000000000900"/24]) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x3}, 0x4) sendmsg$inet(r2, &(0x7f0000001940)={&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000500)="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", 0x1000}, {&(0x7f00000000c0)="e08c598a7c15b7e25755de4c986488a928a23564a1a6df5e1f8bc13073c5ec022831b9a83516be0e41f3635827f6ae298e249bf58eb5eeb94cf468da24e2e500c61a9824176ece55fca706ba32cfa5cff6217270a4734309", 0x58}, {&(0x7f0000000380)="a0c04d4a216b5d396bd25d5978b582e0bfe86205fae4af585f0bfb04e47ed3899312af920b8c9c6638bc1cdc2a909e1a3e99e4fa9b2dc2135a6ffb2b97be2563d6d3b9eef3c903719964b58dbb954d75ffdbb1254137f29d8988242ae1dc06c3b87dfeeeaaf95302d806444fa75c80fef63b7552d748b386576df77746374b7dba3ebf77f532c92f364eef250c7d3676f32f856def94f53efefbee66daf7d5dd9ffce911bf4d5c4da7aee08800cfd3e7d8819170a85fca5265ec8892ca7b0fa5ffcc0d9a90", 0xc5}, {&(0x7f0000001500)="7838af80f2296f9d7906d55c08b5215be16d149120f773418b59c8bf18f79a00fa2d2325e747d0206c602ac6cb6ab8542a80c5949704ac537d54ada55d758937a8ce897075dc97d38342cf3e3f7a838dee948468a50f026dc879516bbe47d1b00c0d6640964d598e892e8f74a73f7277a5bf68082df8073bc9294f58cb29807f0eaa16787315a9ced43a6b32c26d70a8294f62", 0x93}, {&(0x7f0000001680)="583555efab1f0f1d2076d788d896a2fd156ed38f6d6314ae96eb64273f02e14330e1adfb63db6b6d71e9211270bd20d883a09e2a24cf34096b96c1f9c6f5246a87402c7d944f962e5558fe117076233ed74bdc04a800e976b458c559b30167b1b4b77cd2d7af273de842cd7360715ab2a1743350d45261b250b83677758d21f4ef316c9623406eee5243e2c58c55bdef9a1d2ca8db8673f830e61224d49d", 0x9e}], 0x5}, 0xc0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000001740)='/dev/null\x00', 0x181000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)={0x5, 0x12, 0x4000000000000800, 0x5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001280)={r4, &(0x7f0000000040), &(0x7f00000011c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001040)={r4, &(0x7f0000001900)='7Ls', &(0x7f0000003580)=""/4096}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000018c0)={r4, &(0x7f00000017c0)="e4d20865b0c62ca16ac3afc17b7294dd5a8c9784a4230a510f6be511386e62dd36", &(0x7f0000001800)=""/135}, 0x20) ioctl$CAPI_GET_ERRCODE(r3, 0x80024321, &(0x7f0000001780)) 10:44:38 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000040)=0x1) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000040), &(0x7f00000000c0)=0x6) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) [ 973.389618][ T412] hfsplus: unable to find HFS+ superblock 10:44:38 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x500000000000000, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:38 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x4858, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:38 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x20000000, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:38 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300008000000001b0000000000000000000000000038"], 0x40) 10:44:38 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000040)={0x4, 0x2, [], [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}, @jumbo={0xc2, 0x4, 0x5}]}, 0x20) r1 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) 10:44:38 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x31000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000500), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000240)={0x40000100, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)=0x0, {0x22}, &(0x7f0000000380)=""/185, 0xb9, &(0x7f0000000140)=""/22, &(0x7f0000000180)=[0x0, 0x0, r1, r2, r3, r4, r5], 0x7}, 0x50) ptrace$poke(0x5, r6, &(0x7f0000000440), 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) [ 973.651710][ T436] hfsplus: unable to find HFS+ superblock 10:44:38 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) 10:44:38 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x4d50, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:38 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x600000000000000, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:38 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300009000000001b0000000000000000000000000038"], 0x40) 10:44:38 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x20100000, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:38 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d30000a000000001b0000000000000000000000000038"], 0x40) 10:44:38 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x700000000000000, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) [ 973.990925][ T462] hfsplus: unable to find HFS+ superblock [ 974.004747][ T445] IPVS: ftp: loaded support on port[0] = 21 10:44:38 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x80000000, 0x80) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000000c0)=@req={0x5, 0xfffffffb, 0x80000001, 0x10000}, 0x10) io_setup(0xffff9371, &(0x7f0000000100)=0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000040)=0x1) io_cancel(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x1000, r1, &(0x7f0000000140)="65e5fe3ee6638202fb872e75521cfa9b2545d8435e6a631e0030ea0ecc9ef1394093f8a795c1f887f34e6715da7ba71fdea9ffa064794c9e92aec5d1aa98f32bec923bdcbd9fd257d6bb80bb822d4da3d2e062ff7e078d70db80", 0x5a, 0x380000000, 0x0, 0x1, r5}, &(0x7f0000000280)) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) 10:44:38 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x504d, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:38 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x3f000000, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:39 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d30000c000000001b0000000000000000000000000038"], 0x40) [ 974.422165][ T489] hfsplus: unable to find HFS+ superblock 10:44:39 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0xffffffffffffff20, &(0x7f0000000240)=[{&(0x7f00000000c0)="77443265ae7f605fcdf05edbd4c8f46b45afb2d7cb1065da22016909b92a7722f2f9add24cc3e35c59ead042cdf45d6b679d1264555f0ebe52bdbb99812fe44babdc98a6c78e488c416978c5f5bab1cc79981cf4458126b61213504311562865a5924567272dea11563835e31709ea541ea82731ea5bf86c6e0f6354d8b5d2b4011b040dcfa3eaf4ab921029eee802d1c5a233dbbcc5873a90386fb5b71e3b77"}, {&(0x7f0000000000)="bfb0a4952d1243181a589e8fc8d8f4440bdf307bfa2a3e5043705ca42fa06085a67915d44b6f4083c13bbe0f"}, {&(0x7f0000000500)="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"}, {&(0x7f0000000180)="1b28ac76dd92c701d7d8718c682326b210ec51ff746412d92859cd4ccd0106c1fe9bc1e817055e264c5ab3104c151317ac253f212aae9c139469ebb6a0443c639f24027908cde827c84fea44ea846318a310eb16357737ffc8049ab054b96940fe51033bf427633166cb113b6b651083890a4203170f57f0f2278fb98ccd86fd422ce906f5"}, {&(0x7f0000000380)="290473519c4fd202a75cb29f88a1f740b9c936d97c704ab233a1a75e4745e67cfc8922d5d95fabc511c407e22eb6c6f433fc5977118b74f3381c0da14aa3185f14c499f6154af807a7903123cd7b402ced185231d5e7616bb8c8ca1ac8bb9b2f2595cc2c6807770898b2454d6d6a50525f0185c06ac9607364daf8d8db746b8fdd8d6bd5c5e294e5bae23adcc40733f698b065345ca1b1945c71854508e9394761b8d448ae48eec73272bc92da2f269fa150f85bc7963a96123576350d6a1e2a8144dd2d77f379"}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000001b00000000010000000000000002410000001000137564703a73797a3200000000"], 0x2c}}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x1c, r2, 0x400, 0x70bd2d, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44004}, 0x50005) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000040)=0x1) ioctl$BLKPBSZGET(r5, 0x127b, &(0x7f0000000040)) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x62, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000003580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) 10:44:39 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x800000000000000, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:39 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100), 0x4) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r4 = dup(r3) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r5, &(0x7f00000004c0)={{0x1b, 0x28, 0x7, 0x7, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0xda09, 0x1, 0x7, 0x4, 0x1}}) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000040)=0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x5, 0x9ca}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0xfffe}, 0x0, 0xffffffffffffffff, r4, 0xb) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540), 0x0, 0x10060, 0x0) 10:44:39 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d30000d000000001b0000000000000000000000000038"], 0x40) 10:44:39 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x8cffffff, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:39 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x5354, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) [ 975.193553][ T528] hfsplus: unable to find HFS+ superblock 10:44:40 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x900000000000000, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:40 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0xc0ed0000, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:40 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d30000e000000001b0000000000000000000000000038"], 0x40) 10:44:40 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000040)={0xfffffffa, 0x4, 0x0, 0x40000000}, 0x10) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) 10:44:40 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x5453, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:40 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000040)=0x1) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e24, @multicast2}}, 0x8, 0x7, 0xfdf, 0x7, 0x6}, &(0x7f0000000040)=0x98) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000180)={0x409, 0x400, 0x8001, 0x1c57, 0x1, 0x68c, 0x6, 0x1f, r4}, 0x20) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) [ 975.661816][ T558] hfsplus: unable to find HFS+ superblock 10:44:40 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0xffffffffffffff20, &(0x7f0000000240)=[{&(0x7f00000000c0)="77443265ae7f605fcdf05edbd4c8f46b45afb2d7cb1065da22016909b92a7722f2f9add24cc3e35c59ead042cdf45d6b679d1264555f0ebe52bdbb99812fe44babdc98a6c78e488c416978c5f5bab1cc79981cf4458126b61213504311562865a5924567272dea11563835e31709ea541ea82731ea5bf86c6e0f6354d8b5d2b4011b040dcfa3eaf4ab921029eee802d1c5a233dbbcc5873a90386fb5b71e3b77"}, {&(0x7f0000000000)="bfb0a4952d1243181a589e8fc8d8f4440bdf307bfa2a3e5043705ca42fa06085a67915d44b6f4083c13bbe0f"}, {&(0x7f0000000500)="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"}, {&(0x7f0000000180)="1b28ac76dd92c701d7d8718c682326b210ec51ff746412d92859cd4ccd0106c1fe9bc1e817055e264c5ab3104c151317ac253f212aae9c139469ebb6a0443c639f24027908cde827c84fea44ea846318a310eb16357737ffc8049ab054b96940fe51033bf427633166cb113b6b651083890a4203170f57f0f2278fb98ccd86fd422ce906f5"}, {&(0x7f0000000380)="290473519c4fd202a75cb29f88a1f740b9c936d97c704ab233a1a75e4745e67cfc8922d5d95fabc511c407e22eb6c6f433fc5977118b74f3381c0da14aa3185f14c499f6154af807a7903123cd7b402ced185231d5e7616bb8c8ca1ac8bb9b2f2595cc2c6807770898b2454d6d6a50525f0185c06ac9607364daf8d8db746b8fdd8d6bd5c5e294e5bae23adcc40733f698b065345ca1b1945c71854508e9394761b8d448ae48eec73272bc92da2f269fa150f85bc7963a96123576350d6a1e2a8144dd2d77f379"}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000001b00000000010000000000000002410000001000137564703a73797a3200000000"], 0x2c}}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x1c, r2, 0x400, 0x70bd2d, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44004}, 0x50005) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000040)=0x1) ioctl$BLKPBSZGET(r5, 0x127b, &(0x7f0000000040)) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x62, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000003580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) 10:44:40 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x1000000000000000, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:40 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0xf6ffffff, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:40 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d30000f000000001b0000000000000000000000000038"], 0x40) 10:44:40 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r1, &(0x7f00000004c0)={{0x1b, 0x28, 0x7, 0x7, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) r2 = dup2(0xffffffffffffffff, r1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)={0xec0, r3, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_IE_PROBE_RESP={0x3db, 0x7f, "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"}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x24, 0x49, [0xfac06, 0xfac08, 0xfac05, 0xfac09, 0xfac0a, 0xfac00, 0xfac02, 0xfac0b]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x3}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_IE_ASSOC_RESP={0x40d, 0x80, "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"}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x3}}, @NL80211_ATTR_IE={0x67a, 0x2a, "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"}, @NL80211_ATTR_PBSS={0x4}]}, 0xec0}, 0x1, 0x0, 0x0, 0x40004}, 0x400c800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) 10:44:40 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x5848, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:41 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300018000000001b0000000000000000000000000038"], 0x40) [ 976.199320][ T578] hfsplus: unable to find HFS+ superblock 10:44:41 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000040)) exit_group(0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000040)=0x1) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r6 = dup(r5) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000040)=0x1) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@private2={0xfc, 0x2, [], 0x1}, @private2={0xfc, 0x2, [], 0x1}, @private1, 0x10000, 0x2, 0x1, 0x100, 0x7, 0x100040, r7}) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x800) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) 10:44:41 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0xfeffffff, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:41 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x2000000000000000, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:41 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0xedc0, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:41 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d30001a000000001b0000000000000000000000000038"], 0x40) [ 976.685015][ T611] hfsplus: unable to find HFS+ superblock 10:44:41 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000040)=0x1) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e24, @multicast2}}, 0x8, 0x7, 0xfdf, 0x7, 0x6}, &(0x7f0000000040)=0x98) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000180)={0x409, 0x400, 0x8001, 0x1c57, 0x1, 0x68c, 0x6, 0x1f, r4}, 0x20) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) 10:44:41 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0xff000000, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:41 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100), 0x4) bind(r1, &(0x7f0000000240)=@generic={0xa, "93f78a9aa0c8bae9a54c7e4b7d810c1af4b199fe22e528558cd9c55756808a6f83d2455da0a4dcdc46fb7f5d09d2caad4d237ec696f9b6f32222e117c666be605f3443592957d37b600ebbae89dd7f5d5689fea7b082921e21b599d82b141f151cf8c08410c18fe0199a937cc6f94632655f457e2e6d1e93e4d4b612ff92"}, 0x80) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000180)={0x5c, @local, 0x4e22, 0x4, 'lblcr\x00', 0x1, 0x3d93, 0x63}, 0x2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000980)='/dev/hwrng\x00', 0x2301, 0x0) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000009c0)=""/173) syz_mount_image$ocfs2(&(0x7f0000000040)='ocfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x9, 0x8, &(0x7f00000008c0)=[{&(0x7f0000000380)="aadd27be268519c908b89e12e7382fde223580e28053c5696aa7538c18401a309f357e837fcb2c18b92a362ab538b14251dfd6f075d37cba1732b91a97e2b62b6564447642559e3686bd21ffc8298f286796a8ac42182cbffdcca94f6824f6e9e3b761f30a3c3ed1a983ef56c6bd824eb78a8bc2e0663d0d043fa2e3965d3edbd817eab21c442dcf130b5c50885c342d178486d8261ac416e95d1d89f3ac4e8a8186d6770064d960e1c43c3297bfc6fcb4169a67686e09b539b3e431e867805489266024e569c9df9564469c2ae9b4188d4789b051ea66", 0xd7, 0x1}, {&(0x7f0000000500)="41ca38e298e7178c19ee2df5099bc16ed4fa87c2a5f86a7004187b0d839f73d26c5efa029f5050c1d2159db099489f12a5b3de8599110c2d4b3a3982c392762f0cd6d632ccaf7eedc411c7f3d98212ff63627251115e11e81c174d2c3e69835347f29f719e112bd25cd5676c214b63605463061ac9a78a4ca56447c0f97c2b263d5cbb92e299a8c3067e8fe9975b06dd66c89add42f4574c81e46fc88669491cd39844224ad9be65206a506bd030faa4417119528869ee067395f0b561498f91111599bdc47ebc70f136bb40121766f11fb61265c914b6f36d0cbe54be", 0xdd, 0x20}, {&(0x7f0000000600)="99515b59faff5fbe248a8a025894b3f391f08d4cc4dd47f9a372bd36349fa0212107ac2d0762b11424801f42e893731c01be0b57193b8f25fc1157818d4781c708a675a38cc810e61d2326931d3d37163a91fb746d6279506267151097d0d54eec1ca9ba8ddbc27109f4b5e9f668454dac87796db5096e18dc5a43571906877bdfb12514a194b4c3ae6d2e72eb5937f236f34c1a24e4e2b055e538fe402dd8f02ca416ae1de6d3e1b45a0460913c7462ec6e2d7125e276b09b200e05fd1861c1c083643a0ea5f33ca2fb5f25781a12bfad3a1f379c09866712b1d0a6d65ec8cabe8c3dfa5311b52a721fba79ab42690797", 0xf1, 0x61}, {&(0x7f0000003580)="da026e7458d351f4c4178faeab8516bf2b610b8d11aa57d65f5f999de3f51b6366631a4246d037bec0a157202ed055d8a0d5babb78c63ce51e958a24eca5c1730ba0c9be0b7380db1eed1c566d27e4c30e0b9828afea36115cae5671f9f84e9d78b0b97e611c80047191d8b3ffa439177fa25721802738533525db1d5e1b4f4abfedcc8f4f5cdac676a663bfa42f86b055cb19bffff1ebe4c9a122243328961acc28748aa988b30909eacbbd2c82c2fb981683da3fe51d78de4f31e0794910c031db935eebf350b07ff464ff6588affe8281570f7672aadd9bb2664c0e768fe9edff96162b3e920a0f87a4bd55e9c76614d7c1a005531764f185ba4c8ee150b07b750b8edc11cb9d67bfd99ac19659a32475e0b068b020d2d833df1617f4a2e9576f845567cf107841b0cb69cedd9a5dd580b5a2ab35d7ab54b157b96abd6267ed3a927f3934372e1cd9d59d3c5396e0291d0592d3c167eee7dd42daafa9038f4311596219483c926b57aeb5301e83d8a0d1446d71f30d0e50356e20ada217f74db442f842a22fe4803c888d32839b6e8da7813fab511be61d8fe1f2e4a141dd32e3139b86079861875669320b514cbdaee966aca1e419af7d764d450e8ee9d70b30e659282b01c6326c2af352823ec5aa2843d9ab987bca1e35fed21741e3f3569c87df8b5623d0f23c461b10bde4bd5cd958ce096232df25346b866dabcf006555049a9032f72d120e6b8e2d433c55110db180f1c880f80e8ca24f4a5cb668a8228d41722934850de7d9d352baef010fcf899715150a30afddb952d1e18f6a04abde7d6d6ac115a6a7c30de4dcdc1ce0997cfc86d01d681d1f3f661978af71e397915e6624b62b05778bed5fc5692ff04f9f6b0d711f9cf204f492ab4b82ea3bba148b3da9b2ceafa8569df0037bb8cd086fbabf7f874d7a0b617532f4f6a60f56658db32c2c3ad339e64f19c96450e9cb0bc285bd18f410dec8632b59efc56e6768c7c821e88b40552a4cea48a6697963516780617e36ec0e8a880ea1cdfdb376b79235865ef17081f5a3029df238bf6f5b86d0773bed7114617a44a6d7b0e6d0630256bd6b3bc9f0f2970830a66816e930447faeabd67c44efe4d73e036d30a46b9d744179ffed738b07d7fa5b38e9003204b41c07cf377333e849e2a3dd01a5e6b5d6a71f1ab7549b0f3b9848a442c54ce4d184ceb39a60f451ee358d5891ec27590d526e8427f6b900fc721bd4e6c348fa0f87f68e5fe58da3e202afc09e75a4063a1de9604cbe6dc26f45a9576af05dc0c01555067f0762c05a526a68f26087a9eff6ada42750a89dc8c9d51fc415e9384f1a1a1417151495f91d58a861432e250bc24f844bbf93f882ae328f96b3d5d9bbd62f39c0af75d7ef023ff41dbc5b9409af45ff73749bbc0baa105aa535b662e4516c7b815274da44447b251bd20ae28e69d8c344db466dcb9063869a4c7c05e6706de8b216360026f207b198fc4259708175dd42a73742661504ae95737d1735ef0b9735eb46a249bbeeb1d571e0bd5ad8ecf90c7e8f44a52ea0ffb65974f0170887444e23da09ba0a99adf9465fdd16c8b1e1c106ef22942a8a9e65436c19218d4a7d10c945045db2dac4f77405ba24430c037538b8e05dd203be8f280cb91b444d993d06103fa3ffb0ae03486ecb2a822afbae4214479d376e4b016f5c0e790c5ecbc366b6c116783bb8b75674505c05461f8ba303735a624c49f700ae3b962a5e428840513f4404996d4aaa3e12836da4dfe2164c66da6aba0dfd8d771a1491fdbf0ad4e9cdb002511fb10ac26a8e108b3fb567a28ea3a89464f1279590a0a65de9a10c3e72c6bb56d2ee02144526cffbae3edc632048cd5b8114ea63c2baeeb862eccc3046e43413b8254c06b39d94e07c192a8e48403cf4ad2131f8b03496c65e0e6ef8d4ea7ddf86d01a5ccaad8344503440bbe3396173af962a8bdf8cc29e2e25b1ebc6609898ba43d1e0e15a9b8d38f09cd11dffb8ebc4c52978b9d72c134477a92001c301af056476dee2613a5e05edd9164cd7eba3f274502c3f4ff935c55ba394037c2a8f003829c86a61e89186c27d67b234314c217cff5183d75394a5041947e5750922ebbe9c07e8597f8aab00f602c184ed5c035ea76aff28d87424e644d7a7b845d3ac6d84366611c135240fb372b297852115349a431184a925a355c9fc9bacfb50f6a71f4ca152ef2aa9a83504c021f84aec85c3dccf1c5508bc5eb4b4532287c1793e707f6c7200ee2cd787893cf0f48eb8eddcafea04091062cf8d04d28dbc6210802b13861a0d590a3955dbc4654e037ad34d1f423b1b6bf6676b40e1d641130bacd983fb6101a0e1d65df452dc65472d2ec0e816d06633c323363f1bd9ed6ac135a5e7d391c3261fc207edc5306301665fd866f5ebe87fac28c8e2d15671999d39d42d430801dbf7cb4bc5292e06c8f543a542e9f7ac65a2500782c4650ef5449681b976c6e3560adebcfaa5b779c8b214cb55232da719c8b11035a6c0359b5f4bcd72958153d32367fb8c74de2791d41bc993b073708df88bc575882ad23ed86ca8eba017cbc8b047593d57fdf94448f6565ae2cbb131b3e9f97448c5ba669597c4d55f3dc135ebd3ab1a8ebedc95be07b58a93fd70bff901c0553a3e41133fc3b0463efb9049c5c9711ca87b2221533716bcb32d77f6fb1778c7a17fbb20f17ce793461136c9aad3ca8c88af32c328f60f9c3eea1a648cae06a3d886ef1d6c7a347385aab1e34cedb27f7f58cd9b8bf22d561b695722348ebbdbd8430fead281bba314782f39b4ede3ab1c32c9202fc8c4b3b905a73000a9b71126c2c6c10bc624869c8585e4563e2225817d51d3bb6e0e3b90a2da28ceb4ffbebda6677f2c28f2adb75e8cac06a1c75c0d91642710af780cc28fb7182fc6fcfe089e6e28c9fde333f59804f64f76f378a9b977f4bad7be2cc2f3ab71cdca8e3eb36120e503e4fe3fb462565c32a9ebbbf93621bdc43d02c3fe38b1e61b30aa52d3d4918902433d1b9b553394cfac7372ecc0605748da06c2cbe721339e8fc60dc8a3cc18c97284b70ea358209f311b39e89acaa7a5b459b6af9c1af2275e871eaf1071ac0198757c0e3ed8463b14374393cc14a80b49291f788fbb13b2daf2850d3cbade1bb706b47028c3625b89698040264689bd1fa0fede2fe426a11f2dc5825d45d5cc084cbf15bba588065e9d09ee8b09f4efccaf3a5603b848088d7d3dfe6ee712096055e1cd54c9faead5a1c5ef21a8cdde058fe898a0dd39d5ce8498b37e2b0261e4dcbc15c46aaee47a8b252c0e67646b6e3fcd2ba1fda64657f8b7ddb8afbb8a3c9134f2a64ab64f8ac434f62d29d3f9ce3a216c5b7c1f0d42df927b2ed2800992b09845510bd54d16bc1e31fb6565a4ccd7ed8e0ce22c209421fb9dbefe38c3f0c5a7d996b0d17bf7cc1d0ac1e8140f1fcd6783c0d50b0999a564fea200603f698ab9f371d105c5d27916dc8ca52fb3b623087a7efed147fb697182d4e0546bbb8f671b09d881dd24f69b002f5d0e153173bae1e71fbe79d4510afffb463706a4b2e71015f98ef96cabb674b4216dcbdca48aa9301f32360d01758fdea9766e234035e508e70436ba0dfd96cc09730536b6714b2577fd88a6b17a08fe0b7a4e9aa8a361c8da9126b97aa1cb7d9e5aca259896c2bcf46b579b8cb2e7f3cf732a8ff4dc52b18554e5687c79352f8b6a29987721d7cdce196a4e4981db5eac55fcec7cf17ff80882c1d59fec24e056e230819e7227fc693a9b4915c4bda0232f6388ffcc86920231a2130dcab514b2b910821c889a85077d9c0a36807e2ba6ecf80d5e82cad91c07b5f5549f9b1f5fc59d412d88f1a557ed3570254cea6d15a873f1d1bf5ead13cd7ebb6e5631e22b282e727e5a4f3c3d7710a331bf3ecd4826819ae8825e3908beef950d39a5caa3eceb605b62832a0820ed808a5ac7e56022064158b3c982765a466e519442a386b4bf9742b9c4a11c9adf29401a3950aa252a0beb26990e87d287f126f2a04e88c99aef9887d246ee7bb0547efcfe11536b6316e5ad516844fbc9f5a47a3ef1e7bf40daca4be00bfa8de162a67be81d4194cb7f7a4476a0c7b9ef0b1438a2832c8b5a8bd514925c32dd51456e536a4fe2b8c60d3db43791aa4eb5276e42d225048f9ea3562b6e843949899bcbeb8265cf3df5a1b60f2ee53b5708603e2dada7ffa0ba332fcbdd46f92a4a9487d0cd6da068574dd972d9fd7aa404f18f574850d3ba744bdf60cb40da33629fb60b15301bef19f41957f1ff0db86fddc13c8127e157454f016c423345125795fa0bdba62be35676194fd35430cef3669766e66d1514d8294ad232c754be56b0e0d36922f7f2704fff5ec29d22f9bed6c44049965fc0569dc6cc0eb9cd01a6d8fc26eee7858f6e4dd7a89cccd4e7e75c0af3b1207f1f4708a08fdd719a7b09ca6b3358e76855e2800fb054c7103048ee603c48f19047cb81f0c56aed9e4f5fa0851c36aefe7b25032f36dd6ced5897cbe739d109a9acde5fa300702bfd02e941d95635a2992f1f9380a9ddf3d81eb20514001a0ed0f9d56cc38edcfdffa5a651e1198c5afdfb8d3724aec4e6c8baffe980abb0244fd1eaf6c0006e433816ed19b64df76b803643741865f2cd727c476f6a6c20c8e92b71357cb4ddf97daac2a65d40682814da65a3d1cb455e3bfa07ab34952b3b6bc82483fe0bf42a41663e19b382d3fc158905aae8a8804694d279c50612b5954b2665efa94e9aff15339df095030e92bde05a3f2024061677bd97b411a1f091d471efc9b05ad3a4edc26871b7d2d9124285619fbc691154cce0ea5a5fadd7df9c27ec253ad4517061ef5a88089a8df316ba53b6a88ad4f1c025418592266abf78986abd8a027ccbe89eac15c8e54a24740dc2c30cf568b527c6f78ebb17481c61d909e9de61b4d781b9815881fd1d5ca39b7950b13a2fa4b6eeb1ba89849db8e55887624bb70bf6c419006d3debfa92dc16de28aaf7921992ed3d5c5b8872fcfa1eda99a086e92c16fb18125aedd1f005decd2845ab9a1850850a01d40be867c8cf0d946faf113e89858e8f7b0202cca4c316fef5d8096fcf4558cd71fbd2a7b68ad4e40ab3e95a7af77130d11c42d084641b7e479a4da8b784105e2c172befe9022f5bab62584b28cf5291bfed481b742ae7091883af0472e128ffd89d3fef261baeab72ee3165132291ca2dc8d0cfd10d76eb83fc72746920c51ec95231ecb36d581983b643a2f367fd3dab810ef04ee6e6416627ce51b3d0fab7097a06c944bc166352ea670230309163c214ffb071445a199a3329c508c9a8e295caeeaea36e1c69161b28cdf4158f37d7c0339b330b5bb6982924f84e5be5e7a60ef5a43fba7582281b238f1c7c2f17b3912b0c2b19b15b437d7ac24ac9012c1275fba1e9db4b91b722a899bef7d7ec1a6065e562550632433395d9f9886f0f3b2c27529d8fbad7ff631c4185bd5f0e1a696753def9ffec4afd805cd7c166dc9cf1e42bfcf69998332493ca527a2a6e9e943f3fca4fa60026f1c19345307a8726eb29b4e499ade6150daef16ab1fadc82ac9a55782cc59654f335c5378ce798dce35d1bf636fc203a1dfb87a706105b22d7e5eecd0dad793e89ccbb5f8a1b0fdf9c12e2623eb0969c39cbbb131c42b189e28c484ea55cd2cd643f33e31a8af01099f39bd85e6a94eeeca38ab46252b17c23bd0569f625c4f3eb0de8f3359a225e417fab349ec8e6b815f40c97fb71aecdf1336ab2017e", 0x1000, 0x100}, {&(0x7f0000000700)="2efbad8de5350390bcf854fb7ccc22832930d19e3c622bfccbe6c75e886fb26071b8194b3eeab752e94e2959f3f9f5acfb36be04697bb765cf917dae2fc31abb978d656171b8939f7333299758efd3c1c96de1e90ac91fdf43cd3de4505c7bff7986fb070ed7e315af38304a19d4c0f68a29b7ce77fb97a2bf1e7d7d37c27e6bd7555350df4d11d04a3d4eafbda9bdb9b41eb3e27f11b543bb87c6b30bb7653d724dc7cef0fc6958db97d4f58ab21cdbfd28b8870c4a47c91a4c3d3e9c3c1c1a4fc9d2b363fd50cec1feca525574e5b8b9e169c4a84f4aee9160600dab7a811b04ad107073c110a87b37", 0xea, 0x100000001}, {&(0x7f0000004580)="ce921be02f0d8666a8dc91b27a28d3bb7726c865d16ddf93017be777ccfe2dac1fd2404f9ec3e5bd5dc524aeb74d18de750d59cc4118f4b4bb7317a78920a4544d5699a0507b0e4777b4d9e19cbbf1dbfebfdffee080f221992a5edacd4cc299917b2313d71dedf57461591ce637c50ecbc4555bd602ec67fbdb27489660df6c5e5d140a2648451229d388e4fb22b17c545d32d29606db60033b96d099d53fa8314ade395bcecb992570248559aa984ab0d919a9e8684e52182d362603d1b18d911d97fd904a9d2b1926053943c627dc9c21b9315cd6c93da8ef97189ec6e91e4adf2994a4c2f6c402df3d0dc19b17fd5ffba56f840c8ce80714bcd6a4f3e99bdd7e203a4f3147f2ec8c6b0053e1b64e950c42b17d69d94279c41f433c5db41b091c829b3236ac13771c06d88766f2c9847e3cd53d8a677071c017d62adb0a1e486c321ec02c26dca7f00d3905cba05088eb1f8059656f1bde732687ae8eee5b8d003d617671503d78ad354909c9fa507fc67fb4d0cf72e8714083dd461708634b2ef05227bdc94aef6b8e88b94e792baa491466f475719e0523c935df32e1b6e5d01597a128838a8fc6555168263aa01ae9de7eac8ef862f11544e54fc68c82547af9f9edb6a533a374a936a08acdb99b6901acadc87ae844eee7fbc36d7df55397b95cf07b5446746a6e03f0f3193afd97f1fadee210a681ac9cf6c1e04ff97c70b1e82b0cd240f4bf79f948f1bab88cdae87916e6063d7d9ea846fe7b993d5bdf530bccc9a617deb6e13992052f687f076d515c3000ff69ec01be9169cfb672d4c82a669eea751bec4133dad8eb7b920a7ddb99f7ba272c986453dc71fd6ee2a4cc4f8de0cb18f87025a0af8249658156650fcf560551b86024024837751922bf161d77b58ccfad96ef3b2a5ff67e71a4fb326b1b7284be071317a95ea3c68244e965e102bce953de0465f0d00ddf75c4cff617934a1db5eea1239e2bc0cc1c3dfdb59b9a846cc44b312a1d14d55847a9d5d0fbd91ea10fcabd409680f72c16b07328f5f2dba4bbcdd2e31e75e9d25385695062cbdb57820b3b08d82f9b4b85dcd14cc8a97c3616a532f5a15a2affd396199a51795eea6e2be57dcbfa7e4bd623d778c4b412206482d7ec0d2557365f1410b0e295064f0775ce7f007c237a48a99b121353f402dea6f9c35aa8662eb217434d36f387f289d8c2e626c373c8f9b345cc0de1eaa6b49899b73492c0927a245649b8672245dd17b362fe649e538204f197457b697c6ebe38ac683a00fa975f9554a8df26fe8fc56c1a16357e3eeaa4c3bb5f91f81975cc4018e249ae2bb2a2c543ca511d9b5d7965b3f4de2c9adfb326456868d1c2caea37abec987b3f939cf1ce850d82f6ad472877412578218637fbfc8dc4240e0d9d53778f0faba2752b16679e6791e0c88503b115ff2bcfa3691d0b78e6566b1ed75da42f12d0b634635b7edac00c6d4b5b8b81bc2ddc7e79cc8f0751f6ad015f1861850899b41ab5d7d085413f9d560e4b7d9b598b1babcd1870002b36dc7bba7678be7319b6211139a37af424f975ae7b9dbaa3aaa2e39f63006e5908337bb103d10bd7e07c00a2e22d5cb3131e67445ddf9733ced01b72ce3022125f7e00fbbe5046672ecc1d5aef554ec7457bd2696f7dc91638f173ce5f89fbf2935441ebd1f847f201b01048677f5cb319b924b1d91f1d8ae0b891d07ef15223966a150b831a15353d44adf045c2f59c6dba8a23efec80e262b19effa9b9698312dc308c9d8253d737a4e9c681696718ff49e21520b4fcd532d62ee65f90f8695a51e5bfcdebf38222dfa193725f349ec3030b59c0fafbcfefdeecf33219f6185f2dd0b97c85a895928523274f9c8be06f98bccc1d58f705ffc5caca2800c5781ce35924e02e9c11425e6f313768d3cc068e5e86f67e50ee0f643cfee3856b23705a101be0703e14cdaa7579b9fe51e8b7f3a2a697819c06562c52237a5bf110c53383ea1c49ecbd8a04302f827e12b719ae8676ca3e50c28ba815c6f60168a2bc4859796232d8727c67a48b12adc0ef7985de1aaeb71f0b66caaac48d348d3d9dbf6dbd4b9154af4a7233b626c8a9b945dc472cbfe51979d390c6b1e2dc087106ea28495b9c55bae35d49fd95fd6249a9116cf5f9b7998955758f8d893dc8f81019beaf55399746845e88d0aba25b4a87f6ae5f2581dfd2aebdbf54bab8c79d7086cdf5916be7934b2f7189e5009f049b55db17e2f4c7ce0db40c5a234c2a4f047da5592094e707b1a23bf6e1909e2d0afdacde2792439b3d1201d84e42e1b92271ad35e49aae63bec5999f5961602c2fdea56ba6622d6cf14b244209c04f4896b952ba071c8a36ba71e22af3ff9d30ad1c42ce68b8a278d936d248a083aa49949568fdef89b16a79adba4e6a70f68c9b32f7d5161dd582145f06078c8106c822f537e2ebb98e0087666c8cf1e9e7a05c0504cb9ce3c4228065e402e648db093846d7057d054d4746f1ebb60730a44eecd85398c625b28dac572ca98790f0f59eebfc3dee40a99a3966bef70ce5f0e1b235cb98cf72c377ff152e07c2fec5f1b49c0131793ab61c165cad0417af553557faa9bde1124e4a45e92f1b424f84b1e1cbe2789a36ccff72f67a8ec48a642a98e792c60e1c6a1adddf889a87dafaf97eefbd79c91b14667adea5743883e1a5bc2dcb6d30df699d42abb9ccb9507ac059009822f14ff7c0f1147373df94a1bee052866f12ff228afb853c0a2ab978ba14074022fd04c9e5d6486709b1734fb0d8f21b5e7b3f77c1cfb5ab9ed4d59466e7ac4dd8465531a32d8ad9bf06de6abebbc59bce6488c0e52dd989e7e8e2faadd4dfef201489a04f27b0956781f900f4b7bfbda244cdc8d8f05bb8e2b870d260974652b5ca9f972ef450e23e56477f6a7b7d06aaf40d4b0f65e42a4b2b99228da120f2162924220de932cb54d06bb80bcefbc9c11693b48aaddd0e90e020205b1f8043045937cc32a78ee6c418a5982ec34dc1dc2f33bf2174018403cb8c8374435797e8ffa563ef7866b0343de32581ef2c4fe2faa8edc32339335f2d0020522b8a235dd91873b4cdb4349fcd5954151534187a17b91d0574fe6f97bf09e4a63c85aca604fa06d32c377c1d9bc8e682b7c0e568b4409f07f7d821b64c932c7222852800f829a33586695505ff3402c4458c18f43a73c123ee51cde280552600770e7fa3ebeebe7a570f037de78512a8c916ae57d8b7017a85f9f935ea2b43948920bcac2bf5384285aba92252aefd6e938e1b68d3a022ab8efb586ec05c0fa25fb25ff164830ed376d1711b35133a7f93a5eb8ff9ee47a273ce35b29cab75f152a50146c663dafa7c999315c1846e0c3373180a290bc47889d4386e55089a371ac08ab01cd9cef88833f890e8bc6e36aa0eef665bc21c6204a66e723303d5da1df15ec91db1c50420d13d4b0f8235784cd547056f2762b99dfccf77ee520b36e1f8adb2b0e3b88ffcee8c332224337d8dcf4cbac26e14e4b3b5d103f895c26572753aae83c9a71ae59d4d59392e38e8a0eef358df62c7e5e040360f557af55bc4ddaf0a433234b33862c4ac7721140753fd7d92a20d78ba00931a2e375f3f27af0a39ab5ba29dd8c2ed03aaa93adc1b86a57e38eca2b708f731497df8e615e41be06761be05434f3667bb5e4c2b1acb67fa81c47a24683bac00b959fd2fc00f5e82c500189a3e6e520836b6ab9da02cb00f4845138f3ccb55347b4c8594e505538529e2aac139b9c86b138eb5d47315b4206b7ebe68e933ddb27e242a0b4a0f569c25198a7dd00695d0fb3edeeb0ea3d6e7b2745cd13c72e12e611e6b2fdd55f890daa03c3c5a0a4884c0e81c8780ce83a3d4dce66f052d9180f158c0a59977d425b74b60265d8c4a63e90ee71d16b192c1583556718dca5419fd7a595a806473c34bcc705316959915df0368aa900b90dc57c7c36038a8b2a7f984b55bc7508dffa4828ca8e1a4f17db1b5f61ee2f7e89472edecfba995b0e4a3503ed6adfea1aea577628fd83d714d3649b2faaa5a7133d5a1d5802832a003493bb3732b92dae79d6cb2399fc04ab07da0de10d789260dda9eb71a14c3674b3e21e1ef312a4c6cbc733b4cd1c276ff57cdfa830278936eeefc83cc6dc7b420d9d3eac477d2c81412cf01cc3b5f054ecdb337658bddb5422b1f08d12043d5ca8398e953dc6149d72d79d837ccb80c754422a3d93c11c8109b04ac01b5e3de80f315f1b6be9b8e0d53f1b6b4688d608a11da152fdc4386c48b130e7d886233b8d51d11bcf834a3f08a75e71c76ad9b92640dfc8fd3cd3abac8bbf4d30db491698cce5573e071033d8f08aa7bf035973edb1ba9e9d95520d9ba67f0a18c945ac380a94ab983556c2242f6b793158f33fd3ddd7e76be4ded940785d92975b97ea75c8bc3a7566f37203e18d40933609465afc15cc77a7e9057793f7a2bf3a05365deb4001d3886945fb8354154f2d7b06bf6e75bbd0ab8d0cba5a816f254c9f3bf7d50b410671e59fad0ad01c61ca32f707f26fe0590dfcc49d88cf46a08e85fbea7cbe3f875ea607b4244ba4640724c0b802f35897f8d70911d4108150221ed87c1cab688de9097f1f345c5e5ba7e4ef10ea8ea64cc72bbf98c125a9fe7463fdfae3ce65f3f32e0acde1690de831d332ef6b309205fce1b5565e747238f58dbfdb0cf3ddae4cb5d145b04f74edd55395251a855d6416314d81a7578b0a882b588979cc14260ae7ad7241a8d4e2ed7f843d268c7616a1517c4589968445d6aa930779737ffdb3110396178d9f0be0fce5dabc53553b2e74b8fe701790cb2e5088dea651d2418077e34d905e85cd0e51d041ad5d2e314201a064da531ebeaa2bb54bb34bd08bcac6775420737ef30c61629082f4a5e6ad8522f9ca52d29f8bda779ab32992a976ac669b58bc5942a5299dd5f86dcba829bf73a1af95ecf09a8be8a2c611e66b4ccfa2d05598ddad778214555bc4db90172fe86ee761132ad6f9e28c5f96d62369486cec98dde95ffec940d93e6a2713cf4750ccbe6e8b12259e7b6c6e006e681a8a648cf3e1e14dc9bcd201f53a979ebaddcf8190705ac31bcd62c68435f1372d07168c9d129e13e090cc763accc9d85e77205eb329815b1618fcd61e424bf960d05a2393fb5def1f9fc0e3e74260bcc16ecd8f4554ce6a450785b2b013816c5b625db98927c6a414924e4a9934ff67938e0389bcaa674f12aa99eae658e563880435dfd0438477b1da0f9313aab7c55a9406ffb1c31ada9ae6d73b4ccd7a1cda2f9904871af618a8d23573a08fa14a827c23fa930b7b9357db877925fa4144016fbaf705b4e50a6ba13b572881e291f84979fd51b4be2a3ca389e9509ccb4d75b6dcf33ef3d2dd6dddf1e4fc4fffd4102dd5f5abef8e67e5fab3cd976de175b9c6fb750852c28246f6568e5fb6a8673f23ac38ad8532035ca228fead6dc880a829fcf3ddfedc02a80aee4d453a72c862dcafd7a237111277ee8bb034a0c0bd06693501c7c111c32e49086816a05848eb1636b8981634437cdf6acdd7b4e0bd72a2a47ddeca42a3bdea3ca0481d87a79da8e4050104325edf7d2bc806bd6b0a5f31005532819d54ce96e7b0676c7f96b4f459bf6654996b1244e1790693987ae66e2a1e7d40cefbc780c1938ea208a881932e191c17e6146921b0dbc572c131b275b9c45918c879f5282d34d6543b8345a1c4854a14739f3620ecfe93091dbd586fadaa60d0b7ba8baf341cee068378d2a8a0a74601935eb7d568b50", 0x1000, 0x700000000000}, {&(0x7f0000000100)="532339173d0ac2b53060b252d68ab1af5436d0e2fa92c904621e526d1f3f1c17", 0x20, 0x8000}, {&(0x7f0000000800)="ddfb08088d464f119a30c9a873de41b5dec00dfc948b59b970febb8b7ba1a5bb480045725e37042d34751a9b56668751872c34fa33a9a7953fe005ed16ff87f53ab8b322444ee399d5e6110a0b0d64944a4aeb4358117af1812efabf35694c085c9717f9fb38ec3dca36dbb7cf602b355d0771f17fdaac443a8fad328c8cb774059d9b3fd7f633bbb04034d3371a7100", 0x90, 0x9}], 0x810, &(0x7f0000000140)='#\x00') sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) 10:44:41 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x2010000000000000, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:41 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d30001b000000001b0000000000000000000000000038"], 0x40) 10:44:41 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0xff00, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) [ 976.952800][ T625] hfsplus: unable to find HFS+ superblock 10:44:41 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0xffff0000, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:41 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d30003e000000001b0000000000000000000000000038"], 0x40) 10:44:41 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x3f00000000000000, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:42 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0xe0000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:42 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000040)=0x1) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e24, @multicast2}}, 0x8, 0x7, 0xfdf, 0x7, 0x6}, &(0x7f0000000040)=0x98) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000180)={0x409, 0x400, 0x8001, 0x1c57, 0x1, 0x68c, 0x6, 0x1f, r4}, 0x20) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) [ 977.360846][ T648] hfsplus: unable to find HFS+ superblock [ 977.390758][ T627] (syz-executor.1,627,1):ocfs2_parse_options:1449 ERROR: Unrecognized mount option "#" or missing value 10:44:42 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d30009b000000001b0000000000000000000000000038"], 0x40) 10:44:42 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0xfffffe00, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:42 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x8000000000000000, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) [ 977.507093][ T627] (syz-executor.1,627,1):ocfs2_fill_super:1175 ERROR: status = -22 10:44:42 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100), 0x4) bind(r1, &(0x7f0000000240)=@generic={0xa, "93f78a9aa0c8bae9a54c7e4b7d810c1af4b199fe22e528558cd9c55756808a6f83d2455da0a4dcdc46fb7f5d09d2caad4d237ec696f9b6f32222e117c666be605f3443592957d37b600ebbae89dd7f5d5689fea7b082921e21b599d82b141f151cf8c08410c18fe0199a937cc6f94632655f457e2e6d1e93e4d4b612ff92"}, 0x80) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000180)={0x5c, @local, 0x4e22, 0x4, 'lblcr\x00', 0x1, 0x3d93, 0x63}, 0x2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000980)='/dev/hwrng\x00', 0x2301, 0x0) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000009c0)=""/173) syz_mount_image$ocfs2(&(0x7f0000000040)='ocfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x9, 0x8, &(0x7f00000008c0)=[{&(0x7f0000000380)="aadd27be268519c908b89e12e7382fde223580e28053c5696aa7538c18401a309f357e837fcb2c18b92a362ab538b14251dfd6f075d37cba1732b91a97e2b62b6564447642559e3686bd21ffc8298f286796a8ac42182cbffdcca94f6824f6e9e3b761f30a3c3ed1a983ef56c6bd824eb78a8bc2e0663d0d043fa2e3965d3edbd817eab21c442dcf130b5c50885c342d178486d8261ac416e95d1d89f3ac4e8a8186d6770064d960e1c43c3297bfc6fcb4169a67686e09b539b3e431e867805489266024e569c9df9564469c2ae9b4188d4789b051ea66", 0xd7, 0x1}, {&(0x7f0000000500)="41ca38e298e7178c19ee2df5099bc16ed4fa87c2a5f86a7004187b0d839f73d26c5efa029f5050c1d2159db099489f12a5b3de8599110c2d4b3a3982c392762f0cd6d632ccaf7eedc411c7f3d98212ff63627251115e11e81c174d2c3e69835347f29f719e112bd25cd5676c214b63605463061ac9a78a4ca56447c0f97c2b263d5cbb92e299a8c3067e8fe9975b06dd66c89add42f4574c81e46fc88669491cd39844224ad9be65206a506bd030faa4417119528869ee067395f0b561498f91111599bdc47ebc70f136bb40121766f11fb61265c914b6f36d0cbe54be", 0xdd, 0x20}, {&(0x7f0000000600)="99515b59faff5fbe248a8a025894b3f391f08d4cc4dd47f9a372bd36349fa0212107ac2d0762b11424801f42e893731c01be0b57193b8f25fc1157818d4781c708a675a38cc810e61d2326931d3d37163a91fb746d6279506267151097d0d54eec1ca9ba8ddbc27109f4b5e9f668454dac87796db5096e18dc5a43571906877bdfb12514a194b4c3ae6d2e72eb5937f236f34c1a24e4e2b055e538fe402dd8f02ca416ae1de6d3e1b45a0460913c7462ec6e2d7125e276b09b200e05fd1861c1c083643a0ea5f33ca2fb5f25781a12bfad3a1f379c09866712b1d0a6d65ec8cabe8c3dfa5311b52a721fba79ab42690797", 0xf1, 0x61}, {&(0x7f0000003580)="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", 0x1000, 0x100}, {&(0x7f0000000700)="2efbad8de5350390bcf854fb7ccc22832930d19e3c622bfccbe6c75e886fb26071b8194b3eeab752e94e2959f3f9f5acfb36be04697bb765cf917dae2fc31abb978d656171b8939f7333299758efd3c1c96de1e90ac91fdf43cd3de4505c7bff7986fb070ed7e315af38304a19d4c0f68a29b7ce77fb97a2bf1e7d7d37c27e6bd7555350df4d11d04a3d4eafbda9bdb9b41eb3e27f11b543bb87c6b30bb7653d724dc7cef0fc6958db97d4f58ab21cdbfd28b8870c4a47c91a4c3d3e9c3c1c1a4fc9d2b363fd50cec1feca525574e5b8b9e169c4a84f4aee9160600dab7a811b04ad107073c110a87b37", 0xea, 0x100000001}, {&(0x7f0000004580)="ce921be02f0d8666a8dc91b27a28d3bb7726c865d16ddf93017be777ccfe2dac1fd2404f9ec3e5bd5dc524aeb74d18de750d59cc4118f4b4bb7317a78920a4544d5699a0507b0e4777b4d9e19cbbf1dbfebfdffee080f221992a5edacd4cc299917b2313d71dedf57461591ce637c50ecbc4555bd602ec67fbdb27489660df6c5e5d140a2648451229d388e4fb22b17c545d32d29606db60033b96d099d53fa8314ade395bcecb992570248559aa984ab0d919a9e8684e52182d362603d1b18d911d97fd904a9d2b1926053943c627dc9c21b9315cd6c93da8ef97189ec6e91e4adf2994a4c2f6c402df3d0dc19b17fd5ffba56f840c8ce80714bcd6a4f3e99bdd7e203a4f3147f2ec8c6b0053e1b64e950c42b17d69d94279c41f433c5db41b091c829b3236ac13771c06d88766f2c9847e3cd53d8a677071c017d62adb0a1e486c321ec02c26dca7f00d3905cba05088eb1f8059656f1bde732687ae8eee5b8d003d617671503d78ad354909c9fa507fc67fb4d0cf72e8714083dd461708634b2ef05227bdc94aef6b8e88b94e792baa491466f475719e0523c935df32e1b6e5d01597a128838a8fc6555168263aa01ae9de7eac8ef862f11544e54fc68c82547af9f9edb6a533a374a936a08acdb99b6901acadc87ae844eee7fbc36d7df55397b95cf07b5446746a6e03f0f3193afd97f1fadee210a681ac9cf6c1e04ff97c70b1e82b0cd240f4bf79f948f1bab88cdae87916e6063d7d9ea846fe7b993d5bdf530bccc9a617deb6e13992052f687f076d515c3000ff69ec01be9169cfb672d4c82a669eea751bec4133dad8eb7b920a7ddb99f7ba272c986453dc71fd6ee2a4cc4f8de0cb18f87025a0af8249658156650fcf560551b86024024837751922bf161d77b58ccfad96ef3b2a5ff67e71a4fb326b1b7284be071317a95ea3c68244e965e102bce953de0465f0d00ddf75c4cff617934a1db5eea1239e2bc0cc1c3dfdb59b9a846cc44b312a1d14d55847a9d5d0fbd91ea10fcabd409680f72c16b07328f5f2dba4bbcdd2e31e75e9d25385695062cbdb57820b3b08d82f9b4b85dcd14cc8a97c3616a532f5a15a2affd396199a51795eea6e2be57dcbfa7e4bd623d778c4b412206482d7ec0d2557365f1410b0e295064f0775ce7f007c237a48a99b121353f402dea6f9c35aa8662eb217434d36f387f289d8c2e626c373c8f9b345cc0de1eaa6b49899b73492c0927a245649b8672245dd17b362fe649e538204f197457b697c6ebe38ac683a00fa975f9554a8df26fe8fc56c1a16357e3eeaa4c3bb5f91f81975cc4018e249ae2bb2a2c543ca511d9b5d7965b3f4de2c9adfb326456868d1c2caea37abec987b3f939cf1ce850d82f6ad472877412578218637fbfc8dc4240e0d9d53778f0faba2752b16679e6791e0c88503b115ff2bcfa3691d0b78e6566b1ed75da42f12d0b634635b7edac00c6d4b5b8b81bc2ddc7e79cc8f0751f6ad015f1861850899b41ab5d7d085413f9d560e4b7d9b598b1babcd1870002b36dc7bba7678be7319b6211139a37af424f975ae7b9dbaa3aaa2e39f63006e5908337bb103d10bd7e07c00a2e22d5cb3131e67445ddf9733ced01b72ce3022125f7e00fbbe5046672ecc1d5aef554ec7457bd2696f7dc91638f173ce5f89fbf2935441ebd1f847f201b01048677f5cb319b924b1d91f1d8ae0b891d07ef15223966a150b831a15353d44adf045c2f59c6dba8a23efec80e262b19effa9b9698312dc308c9d8253d737a4e9c681696718ff49e21520b4fcd532d62ee65f90f8695a51e5bfcdebf38222dfa193725f349ec3030b59c0fafbcfefdeecf33219f6185f2dd0b97c85a895928523274f9c8be06f98bccc1d58f705ffc5caca2800c5781ce35924e02e9c11425e6f313768d3cc068e5e86f67e50ee0f643cfee3856b23705a101be0703e14cdaa7579b9fe51e8b7f3a2a697819c06562c52237a5bf110c53383ea1c49ecbd8a04302f827e12b719ae8676ca3e50c28ba815c6f60168a2bc4859796232d8727c67a48b12adc0ef7985de1aaeb71f0b66caaac48d348d3d9dbf6dbd4b9154af4a7233b626c8a9b945dc472cbfe51979d390c6b1e2dc087106ea28495b9c55bae35d49fd95fd6249a9116cf5f9b7998955758f8d893dc8f81019beaf55399746845e88d0aba25b4a87f6ae5f2581dfd2aebdbf54bab8c79d7086cdf5916be7934b2f7189e5009f049b55db17e2f4c7ce0db40c5a234c2a4f047da5592094e707b1a23bf6e1909e2d0afdacde2792439b3d1201d84e42e1b92271ad35e49aae63bec5999f5961602c2fdea56ba6622d6cf14b244209c04f4896b952ba071c8a36ba71e22af3ff9d30ad1c42ce68b8a278d936d248a083aa49949568fdef89b16a79adba4e6a70f68c9b32f7d5161dd582145f06078c8106c822f537e2ebb98e0087666c8cf1e9e7a05c0504cb9ce3c4228065e402e648db093846d7057d054d4746f1ebb60730a44eecd85398c625b28dac572ca98790f0f59eebfc3dee40a99a3966bef70ce5f0e1b235cb98cf72c377ff152e07c2fec5f1b49c0131793ab61c165cad0417af553557faa9bde1124e4a45e92f1b424f84b1e1cbe2789a36ccff72f67a8ec48a642a98e792c60e1c6a1adddf889a87dafaf97eefbd79c91b14667adea5743883e1a5bc2dcb6d30df699d42abb9ccb9507ac059009822f14ff7c0f1147373df94a1bee052866f12ff228afb853c0a2ab978ba14074022fd04c9e5d6486709b1734fb0d8f21b5e7b3f77c1cfb5ab9ed4d59466e7ac4dd8465531a32d8ad9bf06de6abebbc59bce6488c0e52dd989e7e8e2faadd4dfef201489a04f27b0956781f900f4b7bfbda244cdc8d8f05bb8e2b870d260974652b5ca9f972ef450e23e56477f6a7b7d06aaf40d4b0f65e42a4b2b99228da120f2162924220de932cb54d06bb80bcefbc9c11693b48aaddd0e90e020205b1f8043045937cc32a78ee6c418a5982ec34dc1dc2f33bf2174018403cb8c8374435797e8ffa563ef7866b0343de32581ef2c4fe2faa8edc32339335f2d0020522b8a235dd91873b4cdb4349fcd5954151534187a17b91d0574fe6f97bf09e4a63c85aca604fa06d32c377c1d9bc8e682b7c0e568b4409f07f7d821b64c932c7222852800f829a33586695505ff3402c4458c18f43a73c123ee51cde280552600770e7fa3ebeebe7a570f037de78512a8c916ae57d8b7017a85f9f935ea2b43948920bcac2bf5384285aba92252aefd6e938e1b68d3a022ab8efb586ec05c0fa25fb25ff164830ed376d1711b35133a7f93a5eb8ff9ee47a273ce35b29cab75f152a50146c663dafa7c999315c1846e0c3373180a290bc47889d4386e55089a371ac08ab01cd9cef88833f890e8bc6e36aa0eef665bc21c6204a66e723303d5da1df15ec91db1c50420d13d4b0f8235784cd547056f2762b99dfccf77ee520b36e1f8adb2b0e3b88ffcee8c332224337d8dcf4cbac26e14e4b3b5d103f895c26572753aae83c9a71ae59d4d59392e38e8a0eef358df62c7e5e040360f557af55bc4ddaf0a433234b33862c4ac7721140753fd7d92a20d78ba00931a2e375f3f27af0a39ab5ba29dd8c2ed03aaa93adc1b86a57e38eca2b708f731497df8e615e41be06761be05434f3667bb5e4c2b1acb67fa81c47a24683bac00b959fd2fc00f5e82c500189a3e6e520836b6ab9da02cb00f4845138f3ccb55347b4c8594e505538529e2aac139b9c86b138eb5d47315b4206b7ebe68e933ddb27e242a0b4a0f569c25198a7dd00695d0fb3edeeb0ea3d6e7b2745cd13c72e12e611e6b2fdd55f890daa03c3c5a0a4884c0e81c8780ce83a3d4dce66f052d9180f158c0a59977d425b74b60265d8c4a63e90ee71d16b192c1583556718dca5419fd7a595a806473c34bcc705316959915df0368aa900b90dc57c7c36038a8b2a7f984b55bc7508dffa4828ca8e1a4f17db1b5f61ee2f7e89472edecfba995b0e4a3503ed6adfea1aea577628fd83d714d3649b2faaa5a7133d5a1d5802832a003493bb3732b92dae79d6cb2399fc04ab07da0de10d789260dda9eb71a14c3674b3e21e1ef312a4c6cbc733b4cd1c276ff57cdfa830278936eeefc83cc6dc7b420d9d3eac477d2c81412cf01cc3b5f054ecdb337658bddb5422b1f08d12043d5ca8398e953dc6149d72d79d837ccb80c754422a3d93c11c8109b04ac01b5e3de80f315f1b6be9b8e0d53f1b6b4688d608a11da152fdc4386c48b130e7d886233b8d51d11bcf834a3f08a75e71c76ad9b92640dfc8fd3cd3abac8bbf4d30db491698cce5573e071033d8f08aa7bf035973edb1ba9e9d95520d9ba67f0a18c945ac380a94ab983556c2242f6b793158f33fd3ddd7e76be4ded940785d92975b97ea75c8bc3a7566f37203e18d40933609465afc15cc77a7e9057793f7a2bf3a05365deb4001d3886945fb8354154f2d7b06bf6e75bbd0ab8d0cba5a816f254c9f3bf7d50b410671e59fad0ad01c61ca32f707f26fe0590dfcc49d88cf46a08e85fbea7cbe3f875ea607b4244ba4640724c0b802f35897f8d70911d4108150221ed87c1cab688de9097f1f345c5e5ba7e4ef10ea8ea64cc72bbf98c125a9fe7463fdfae3ce65f3f32e0acde1690de831d332ef6b309205fce1b5565e747238f58dbfdb0cf3ddae4cb5d145b04f74edd55395251a855d6416314d81a7578b0a882b588979cc14260ae7ad7241a8d4e2ed7f843d268c7616a1517c4589968445d6aa930779737ffdb3110396178d9f0be0fce5dabc53553b2e74b8fe701790cb2e5088dea651d2418077e34d905e85cd0e51d041ad5d2e314201a064da531ebeaa2bb54bb34bd08bcac6775420737ef30c61629082f4a5e6ad8522f9ca52d29f8bda779ab32992a976ac669b58bc5942a5299dd5f86dcba829bf73a1af95ecf09a8be8a2c611e66b4ccfa2d05598ddad778214555bc4db90172fe86ee761132ad6f9e28c5f96d62369486cec98dde95ffec940d93e6a2713cf4750ccbe6e8b12259e7b6c6e006e681a8a648cf3e1e14dc9bcd201f53a979ebaddcf8190705ac31bcd62c68435f1372d07168c9d129e13e090cc763accc9d85e77205eb329815b1618fcd61e424bf960d05a2393fb5def1f9fc0e3e74260bcc16ecd8f4554ce6a450785b2b013816c5b625db98927c6a414924e4a9934ff67938e0389bcaa674f12aa99eae658e563880435dfd0438477b1da0f9313aab7c55a9406ffb1c31ada9ae6d73b4ccd7a1cda2f9904871af618a8d23573a08fa14a827c23fa930b7b9357db877925fa4144016fbaf705b4e50a6ba13b572881e291f84979fd51b4be2a3ca389e9509ccb4d75b6dcf33ef3d2dd6dddf1e4fc4fffd4102dd5f5abef8e67e5fab3cd976de175b9c6fb750852c28246f6568e5fb6a8673f23ac38ad8532035ca228fead6dc880a829fcf3ddfedc02a80aee4d453a72c862dcafd7a237111277ee8bb034a0c0bd06693501c7c111c32e49086816a05848eb1636b8981634437cdf6acdd7b4e0bd72a2a47ddeca42a3bdea3ca0481d87a79da8e4050104325edf7d2bc806bd6b0a5f31005532819d54ce96e7b0676c7f96b4f459bf6654996b1244e1790693987ae66e2a1e7d40cefbc780c1938ea208a881932e191c17e6146921b0dbc572c131b275b9c45918c879f5282d34d6543b8345a1c4854a14739f3620ecfe93091dbd586fadaa60d0b7ba8baf341cee068378d2a8a0a74601935eb7d568b50", 0x1000, 0x700000000000}, {&(0x7f0000000100)="532339173d0ac2b53060b252d68ab1af5436d0e2fa92c904621e526d1f3f1c17", 0x20, 0x8000}, {&(0x7f0000000800)="ddfb08088d464f119a30c9a873de41b5dec00dfc948b59b970febb8b7ba1a5bb480045725e37042d34751a9b56668751872c34fa33a9a7953fe005ed16ff87f53ab8b322444ee399d5e6110a0b0d64944a4aeb4358117af1812efabf35694c085c9717f9fb38ec3dca36dbb7cf602b355d0771f17fdaac443a8fad328c8cb774059d9b3fd7f633bbb04034d3371a7100", 0x90, 0x9}], 0x810, &(0x7f0000000140)='#\x00') sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) 10:44:42 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100), 0x4) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r4 = dup(r3) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r5, &(0x7f00000004c0)={{0x1b, 0x28, 0x7, 0x7, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0xda09, 0x1, 0x7, 0x4, 0x1}}) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000040)=0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x5, 0x9ca}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0xfffe}, 0x0, 0xffffffffffffffff, r4, 0xb) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540), 0x0, 0x10060, 0x0) 10:44:42 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x1000000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:42 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d3000f0000000001b0000000000000000000000000038"], 0x40) 10:44:42 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0xffffff7f, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:42 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x8cffffff00000000, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) [ 977.749197][ T675] hfsplus: unable to find HFS+ superblock 10:44:42 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300080010000001b0000000000000000000000000038"], 0x40) 10:44:42 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100), 0x4) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r4 = dup(r3) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r5, &(0x7f00000004c0)={{0x1b, 0x28, 0x7, 0x7, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0xda09, 0x1, 0x7, 0x4, 0x1}}) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000040)=0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x5, 0x9ca}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0xfffe}, 0x0, 0xffffffffffffffff, r4, 0xb) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540), 0x0, 0x10060, 0x0) 10:44:42 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:42 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0xffffff8c, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:42 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0xf6ffffff00000000, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) [ 978.071645][ T684] (syz-executor.1,684,1):ocfs2_parse_options:1449 ERROR: Unrecognized mount option "#" or missing value 10:44:42 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000070000001b0000000000000000000000000038"], 0x40) [ 978.157060][ T705] hfsplus: unable to find HFS+ superblock [ 978.177362][ T684] (syz-executor.1,684,1):ocfs2_fill_super:1175 ERROR: status = -22 10:44:43 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100), 0x4) bind(r1, &(0x7f0000000240)=@generic={0xa, "93f78a9aa0c8bae9a54c7e4b7d810c1af4b199fe22e528558cd9c55756808a6f83d2455da0a4dcdc46fb7f5d09d2caad4d237ec696f9b6f32222e117c666be605f3443592957d37b600ebbae89dd7f5d5689fea7b082921e21b599d82b141f151cf8c08410c18fe0199a937cc6f94632655f457e2e6d1e93e4d4b612ff92"}, 0x80) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000180)={0x5c, @local, 0x4e22, 0x4, 'lblcr\x00', 0x1, 0x3d93, 0x63}, 0x2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000980)='/dev/hwrng\x00', 0x2301, 0x0) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000009c0)=""/173) syz_mount_image$ocfs2(&(0x7f0000000040)='ocfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x9, 0x8, &(0x7f00000008c0)=[{&(0x7f0000000380)="aadd27be268519c908b89e12e7382fde223580e28053c5696aa7538c18401a309f357e837fcb2c18b92a362ab538b14251dfd6f075d37cba1732b91a97e2b62b6564447642559e3686bd21ffc8298f286796a8ac42182cbffdcca94f6824f6e9e3b761f30a3c3ed1a983ef56c6bd824eb78a8bc2e0663d0d043fa2e3965d3edbd817eab21c442dcf130b5c50885c342d178486d8261ac416e95d1d89f3ac4e8a8186d6770064d960e1c43c3297bfc6fcb4169a67686e09b539b3e431e867805489266024e569c9df9564469c2ae9b4188d4789b051ea66", 0xd7, 0x1}, {&(0x7f0000000500)="41ca38e298e7178c19ee2df5099bc16ed4fa87c2a5f86a7004187b0d839f73d26c5efa029f5050c1d2159db099489f12a5b3de8599110c2d4b3a3982c392762f0cd6d632ccaf7eedc411c7f3d98212ff63627251115e11e81c174d2c3e69835347f29f719e112bd25cd5676c214b63605463061ac9a78a4ca56447c0f97c2b263d5cbb92e299a8c3067e8fe9975b06dd66c89add42f4574c81e46fc88669491cd39844224ad9be65206a506bd030faa4417119528869ee067395f0b561498f91111599bdc47ebc70f136bb40121766f11fb61265c914b6f36d0cbe54be", 0xdd, 0x20}, {&(0x7f0000000600)="99515b59faff5fbe248a8a025894b3f391f08d4cc4dd47f9a372bd36349fa0212107ac2d0762b11424801f42e893731c01be0b57193b8f25fc1157818d4781c708a675a38cc810e61d2326931d3d37163a91fb746d6279506267151097d0d54eec1ca9ba8ddbc27109f4b5e9f668454dac87796db5096e18dc5a43571906877bdfb12514a194b4c3ae6d2e72eb5937f236f34c1a24e4e2b055e538fe402dd8f02ca416ae1de6d3e1b45a0460913c7462ec6e2d7125e276b09b200e05fd1861c1c083643a0ea5f33ca2fb5f25781a12bfad3a1f379c09866712b1d0a6d65ec8cabe8c3dfa5311b52a721fba79ab42690797", 0xf1, 0x61}, {&(0x7f0000003580)="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", 0x1000, 0x100}, {&(0x7f0000000700)="2efbad8de5350390bcf854fb7ccc22832930d19e3c622bfccbe6c75e886fb26071b8194b3eeab752e94e2959f3f9f5acfb36be04697bb765cf917dae2fc31abb978d656171b8939f7333299758efd3c1c96de1e90ac91fdf43cd3de4505c7bff7986fb070ed7e315af38304a19d4c0f68a29b7ce77fb97a2bf1e7d7d37c27e6bd7555350df4d11d04a3d4eafbda9bdb9b41eb3e27f11b543bb87c6b30bb7653d724dc7cef0fc6958db97d4f58ab21cdbfd28b8870c4a47c91a4c3d3e9c3c1c1a4fc9d2b363fd50cec1feca525574e5b8b9e169c4a84f4aee9160600dab7a811b04ad107073c110a87b37", 0xea, 0x100000001}, {&(0x7f0000004580)="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", 0x1000, 0x700000000000}, {&(0x7f0000000100)="532339173d0ac2b53060b252d68ab1af5436d0e2fa92c904621e526d1f3f1c17", 0x20, 0x8000}, {&(0x7f0000000800)="ddfb08088d464f119a30c9a873de41b5dec00dfc948b59b970febb8b7ba1a5bb480045725e37042d34751a9b56668751872c34fa33a9a7953fe005ed16ff87f53ab8b322444ee399d5e6110a0b0d64944a4aeb4358117af1812efabf35694c085c9717f9fb38ec3dca36dbb7cf602b355d0771f17fdaac443a8fad328c8cb774059d9b3fd7f633bbb04034d3371a7100", 0x90, 0x9}], 0x810, &(0x7f0000000140)='#\x00') sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) 10:44:43 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0xff00000000000000, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:43 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0xfffffff6, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:43 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100), 0x4) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r4 = dup(r3) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r5, &(0x7f00000004c0)={{0x1b, 0x28, 0x7, 0x7, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0xda09, 0x1, 0x7, 0x4, 0x1}}) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000040)=0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x5, 0x9ca}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0xfffe}, 0x0, 0xffffffffffffffff, r4, 0xb) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540), 0x0, 0x10060, 0x0) 10:44:43 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x3000000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:43 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000090000001b0000000000000000000000000038"], 0x40) 10:44:43 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0xffff000000000000, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) [ 978.536472][ T721] hfsplus: unable to find HFS+ superblock 10:44:43 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0xfffffffe, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:43 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d3000000a0000001b0000000000000000000000000038"], 0x40) 10:44:43 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x4000000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:43 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100), 0x4) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r4 = dup(r3) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r5, &(0x7f00000004c0)={{0x1b, 0x28, 0x7, 0x7, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0xda09, 0x1, 0x7, 0x4, 0x1}}) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000040)=0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x5, 0x9ca}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0xfffe}, 0x0, 0xffffffffffffffff, r4, 0xb) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) [ 978.735756][ T734] (syz-executor.1,734,1):ocfs2_parse_options:1449 ERROR: Unrecognized mount option "#" or missing value 10:44:43 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x2, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) [ 978.831373][ T734] (syz-executor.1,734,0):ocfs2_fill_super:1175 ERROR: status = -22 [ 978.852112][ T744] hfsplus: unable to find HFS+ superblock 10:44:43 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0xffffffffffffff20, &(0x7f0000000240)=[{&(0x7f00000000c0)="77443265ae7f605fcdf05edbd4c8f46b45afb2d7cb1065da22016909b92a7722f2f9add24cc3e35c59ead042cdf45d6b679d1264555f0ebe52bdbb99812fe44babdc98a6c78e488c416978c5f5bab1cc79981cf4458126b61213504311562865a5924567272dea11563835e31709ea541ea82731ea5bf86c6e0f6354d8b5d2b4011b040dcfa3eaf4ab921029eee802d1c5a233dbbcc5873a90386fb5b71e3b77"}, {&(0x7f0000000000)="bfb0a4952d1243181a589e8fc8d8f4440bdf307bfa2a3e5043705ca42fa06085a67915d44b6f4083c13bbe0f"}, {&(0x7f0000000500)="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"}, {&(0x7f0000000180)="1b28ac76dd92c701d7d8718c682326b210ec51ff746412d92859cd4ccd0106c1fe9bc1e817055e264c5ab3104c151317ac253f212aae9c139469ebb6a0443c639f24027908cde827c84fea44ea846318a310eb16357737ffc8049ab054b96940fe51033bf427633166cb113b6b651083890a4203170f57f0f2278fb98ccd86fd422ce906f5"}, {&(0x7f0000000380)="290473519c4fd202a75cb29f88a1f740b9c936d97c704ab233a1a75e4745e67cfc8922d5d95fabc511c407e22eb6c6f433fc5977118b74f3381c0da14aa3185f14c499f6154af807a7903123cd7b402ced185231d5e7616bb8c8ca1ac8bb9b2f2595cc2c6807770898b2454d6d6a50525f0185c06ac9607364daf8d8db746b8fdd8d6bd5c5e294e5bae23adcc40733f698b065345ca1b1945c71854508e9394761b8d448ae48eec73272bc92da2f269fa150f85bc7963a96123576350d6a1e2a8144dd2d77f379"}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000001b00000000010000000000000002410000001000137564703a73797a3200000000"], 0x2c}}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x1c, r2, 0x400, 0x70bd2d, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44004}, 0x50005) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000040)=0x1) ioctl$BLKPBSZGET(r5, 0x127b, &(0x7f0000000040)) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x62, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000003580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) 10:44:43 executing program 2: socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100), 0x4) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r4, &(0x7f00000004c0)={{0x1b, 0x28, 0x7, 0x7, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0xda09, 0x1, 0x7, 0x4, 0x1}}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000040)=0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x5, 0x9ca}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0xfffe}, 0x0, 0xffffffffffffffff, r3, 0xb) 10:44:43 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0xedc000000000, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:43 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d3000000c0000001b0000000000000000000000000038"], 0x40) 10:44:43 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x5000000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:44 executing program 2: socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100), 0x4) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r4, &(0x7f00000004c0)={{0x1b, 0x28, 0x7, 0x7, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0xda09, 0x1, 0x7, 0x4, 0x1}}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000040)=0x1) [ 979.171984][ T771] hfsplus: unable to find HFS+ superblock 10:44:44 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x1000000000000, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:44 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d3000000d0000001b0000000000000000000000000038"], 0x40) 10:44:44 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x6000000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:44 executing program 2: socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100), 0x4) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) dup(r2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r3, &(0x7f00000004c0)={{0x1b, 0x28, 0x7, 0x7, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0xda09, 0x1, 0x7, 0x4, 0x1}}) [ 979.404942][ T789] hfsplus: unable to find HFS+ superblock 10:44:44 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x7000000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) [ 979.579931][ T802] hfsplus: unable to find HFS+ superblock 10:44:44 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x3, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:44 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000040)=0x1) write$UHID_SET_REPORT_REPLY(r3, &(0x7f00000000c0)={0xe, {0x5, 0x1f, 0xf0, 0x7d, "73598cdd9593abf62b6627dc626a8a1aa56386433283fbb563b17ae59a946c8e3f0d3c1214117cc5fc894ce1f46fbeda4900951836834833b80ea3c85358605e25176d7d59ed576e86c23421ff241c7a16c5f6cc3035a065e664841964d0d6e8b0392f0f804caf66eece4e98f33f2cdb16d0bc5ffb8f82138a3d123ac3"}}, 0x89) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000180)='/dev/usb/hiddev#\x00', 0x8, 0x4202) 10:44:44 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d3000000e0000001b0000000000000000000000000038"], 0x40) 10:44:44 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0xfeffff00000000, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:44 executing program 2: socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100), 0x4) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) dup(r2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0xda09, 0x1, 0x7, 0x4, 0x1}}) 10:44:44 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x8000000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) [ 980.068538][ T823] hfsplus: unable to find HFS+ superblock 10:44:44 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d3000000f0000001b0000000000000000000000000038"], 0x40) [ 980.113419][ T2888] tipc: TX() has been purged, node left! 10:44:44 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x100000000000000, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:44 executing program 2: socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100), 0x4) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) dup(r2) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0xda09, 0x1, 0x7, 0x4, 0x1}}) 10:44:44 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r1, &(0x7f00000004c0)={{0x1b, 0x28, 0x7, 0x7, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000040)=0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000240)='vboxnet0&\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r5, &(0x7f00000004c0)={{0x1b, 0x28, 0x7, 0x7, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) sync_file_range(r5, 0x10afa394, 0x64, 0x0) r6 = dup3(r1, 0xffffffffffffffff, 0x80000) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000040)={&(0x7f00000000c0)="ab76a21f4385a34c584e24b6c4e8c71e83b3ad893f4bafab435879e768b3abd1e8386007e31700f66134a7d1cbc25a863b45180631db2c7ade7bb332530a1f4908879b1a96f077ca2f296d5d91bf60ed13396026809450d2bd637338bf3d1457a5cdd213bc5ecd9ddfaebc4794db64b61f30e3fc9631bab933e38b", &(0x7f0000000140)=""/79, &(0x7f0000000380)="2c7b4c9d955d5ef78440ac350f7241572ba6914cb7732834ce4dc20204f5f05d93e11b0188337c0408e409983cb749b80c12c7fc39f12b28aaa2e181121bebf311f8de874be7618a4e3b2de7efbeb3baf9119a1d1af2a00f245d1b82df2a0a8a1493e9063179321e7f61c3585a60b15c427b21cec37413fa6d815519cdfdfe49cd886b713fa4e82a17b5fed6c82b4f37f939f4358b69057b103c793e4c5e5410ef1389b3ae6bfa868d6c41dae0d50726135050a74cb75924bc50175a58467502f8b2579d2a2105f5eafd3143d0b4eb38cf5a634f738c5608fc3e635b877b9fa622aedbe6488524a49df1e9697284", &(0x7f0000000500)="d0ce1b3e2c234e6d1ac96fb2d57f280890dd90b889a2164ac8a222f794848da00384c7d03655ee8b7fa09466061901f7c7e21c0fcfc74572e22168bf7c5fba51505a414770958db3ca217307e1d6a6279d452d5f4f1419fff8d4f466950042798f67f0cbb6966ebbb6c292ab4263192db300804bf69652839a5dd6c972bdfa24d8e6dc64263973ec0838cd4f5f0eb4faacfd61000da0907657ba2376b28157", 0x81, r6}, 0x38) 10:44:45 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x9000000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:45 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000180000001b0000000000000000000000000038"], 0x40) [ 980.422232][ T848] hfsplus: unable to find HFS+ superblock 10:44:45 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x4, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:45 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x200000000000000, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:45 executing program 2: socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100), 0x4) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) dup(r2) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0xda09, 0x1, 0x7, 0x4, 0x1}}) 10:44:45 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d3000001a0000001b0000000000000000000000000038"], 0x40) 10:44:45 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0xa000000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:45 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f", 0x48}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:44:45 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d3000001b0000001b0000000000000000000000000038"], 0x40) 10:44:45 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f", 0x48}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) [ 980.816683][ T865] hfsplus: unable to find HFS+ superblock 10:44:45 executing program 2: socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100), 0x4) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) dup(r2) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0xda09, 0x1, 0x7, 0x4, 0x1}}) 10:44:45 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x300000000000000, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:45 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x1, 0x5, 0x8, 0x6, 0x0, 0x20, 0x4020, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0xea, 0x2}, 0x8000, 0xc66, 0x6, 0x4, 0xfffffffffffffffb, 0xd97, 0x8}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000040)=0x1) ioctl$SIOCRSGL2CALL(r3, 0x89e5, &(0x7f0000000040)) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4092, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0}], 0x5}}], 0x0, 0x2000, 0x0) 10:44:45 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d3000003e0000001b0000000000000000000000000038"], 0x40) 10:44:46 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x5, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:46 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0xc000000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:46 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x400000000000000, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:46 executing program 2: socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100), 0x4) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0xda09, 0x1, 0x7, 0x4, 0x1}}) 10:44:46 executing program 1 (fault-call:5 fault-nth:0): r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:44:46 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d3000007f0000001b0000000000000000000000000038"], 0x40) 10:44:46 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d3000009b0000001b0000000000000000000000000038"], 0x40) 10:44:46 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x500000000000000, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) [ 981.851844][ T909] hfsplus: unable to find HFS+ superblock 10:44:46 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000f00000001b0000000000000000000000000038"], 0x40) [ 981.920626][ T912] FAULT_INJECTION: forcing a failure. [ 981.920626][ T912] name failslab, interval 1, probability 0, space 0, times 0 10:44:46 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x600000000000000, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:46 executing program 2: socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100), 0x4) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0xda09, 0x1, 0x7, 0x4, 0x1}}) [ 982.018588][ T912] CPU: 1 PID: 912 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 982.027144][ T912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 982.037240][ T912] Call Trace: [ 982.037272][ T912] dump_stack+0x188/0x20d [ 982.037295][ T912] should_fail.cold+0x5/0xa [ 982.037317][ T912] ? fault_create_debugfs_attr+0x140/0x140 [ 982.037336][ T912] ? __mutex_lock+0x458/0x13c0 [ 982.037376][ T912] ? sock_recvmsg+0xca/0x110 [ 982.037391][ T912] ? ____sys_recvmsg+0x208/0x580 [ 982.037411][ T912] ? do_recvmmsg+0x251/0x730 [ 982.075414][ T912] should_failslab+0x5/0xf [ 982.075439][ T912] kmem_cache_alloc_node+0x55/0x760 [ 982.085228][ T912] ? mutex_trylock+0x2c0/0x2c0 [ 982.085252][ T912] ? debug_check_no_obj_freed+0x213/0x449 [ 982.085276][ T912] __alloc_skb+0xba/0x5a0 [ 982.101061][ T912] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 982.101103][ T912] netlink_dump+0x2e9/0xf50 [ 982.113763][ T912] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 982.119769][ T912] ? __netlink_sendskb+0xb0/0xb0 [ 982.124735][ T912] ? kmem_cache_free+0xa4/0x320 [ 982.129734][ T912] ? kfree_skbmem+0xef/0x1b0 [ 982.134711][ T912] ? consume_skb+0xfb/0x400 [ 982.139802][ T912] netlink_recvmsg+0xb2c/0xee0 [ 982.144949][ T912] ? netlink_dump+0xf50/0xf50 [ 982.149916][ T912] ? aa_af_perm+0x260/0x260 [ 982.154652][ T912] ? security_socket_recvmsg+0x8e/0xc0 [ 982.160663][ T912] ? netlink_dump+0xf50/0xf50 [ 982.167377][ T912] sock_recvmsg+0xca/0x110 [ 982.172002][ T912] ____sys_recvmsg+0x208/0x580 [ 982.177090][ T912] ? sock_read_iter+0x3d0/0x3d0 [ 982.182235][ T912] ? find_held_lock+0x2d/0x110 [ 982.187143][ T912] ? __fget_files+0x30d/0x500 [ 982.192139][ T912] ? lock_downgrade+0x840/0x840 [ 982.198330][ T912] ___sys_recvmsg+0xe4/0x150 [ 982.202977][ T912] ? recvmsg_copy_msghdr+0x80/0x80 [ 982.208223][ T912] ? __fget_light+0x20e/0x270 [ 982.213119][ T912] ? sockfd_lookup_light+0xc6/0x170 [ 982.218439][ T912] do_recvmmsg+0x251/0x730 [ 982.222894][ T912] ? ___sys_recvmsg+0x150/0x150 [ 982.227800][ T912] ? lock_downgrade+0x840/0x840 [ 982.232689][ T912] ? __mutex_unlock_slowpath+0xe2/0x660 [ 982.238265][ T912] ? wait_for_completion+0x270/0x270 [ 982.243601][ T912] __sys_recvmmsg+0x23e/0x250 [ 982.248391][ T912] ? __ia32_sys_recvmsg+0xb0/0xb0 [ 982.253435][ T912] ? ksys_write+0x1a5/0x250 [ 982.258114][ T912] ? __ia32_sys_read+0xb0/0xb0 [ 982.262935][ T912] ? __ia32_sys_clock_settime+0x260/0x260 [ 982.269115][ T912] __x64_sys_recvmmsg+0xde/0x130 [ 982.274088][ T912] do_syscall_64+0xf6/0x7d0 [ 982.278738][ T912] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 982.284650][ T912] RIP: 0033:0x45ca29 [ 982.288669][ T912] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 982.308395][ T912] RSP: 002b:00007f0c17aefc78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b 10:44:47 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d30000000f000001b0000000000000000000000000038"], 0x40) [ 982.316929][ T912] RAX: ffffffffffffffda RBX: 00000000004fb6c0 RCX: 000000000045ca29 [ 982.325032][ T912] RDX: 0000000000000001 RSI: 0000000020002540 RDI: 0000000000000003 [ 982.333031][ T912] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 982.341019][ T912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 982.349008][ T912] R13: 00000000000008a2 R14: 00000000004cb748 R15: 00007f0c17af06d4 10:44:47 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x6, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:47 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x700000000000000, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:47 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000001001b0000000000000000000000000038"], 0x40) 10:44:47 executing program 2: socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100), 0x4) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0xda09, 0x1, 0x7, 0x4, 0x1}}) 10:44:47 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0xd000000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:47 executing program 1 (fault-call:5 fault-nth:1): r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:44:47 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000008001001b0000000000000000000000000038"], 0x40) 10:44:47 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x800000000000000, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) [ 982.985844][ T954] hfsplus: unable to find HFS+ superblock [ 983.008888][ T953] FAULT_INJECTION: forcing a failure. [ 983.008888][ T953] name failslab, interval 1, probability 0, space 0, times 0 10:44:47 executing program 2: socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100), 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0xda09, 0x1, 0x7, 0x4, 0x1}}) [ 983.099499][ T953] CPU: 1 PID: 953 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 983.108222][ T953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 983.118378][ T953] Call Trace: [ 983.121697][ T953] dump_stack+0x188/0x20d [ 983.126171][ T953] should_fail.cold+0x5/0xa [ 983.130708][ T953] ? fault_create_debugfs_attr+0x140/0x140 [ 983.136548][ T953] ? __need_fs_reclaim+0x22/0x1a0 [ 983.141596][ T953] should_failslab+0x5/0xf [ 983.146041][ T953] kmem_cache_alloc_node_trace+0x59/0x790 [ 983.151777][ T953] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 983.157894][ T953] ? kmem_cache_alloc_node+0x222/0x760 [ 983.157917][ T953] __kmalloc_node_track_caller+0x38/0x60 [ 983.169119][ T953] __kmalloc_reserve.isra.0+0x39/0xe0 [ 983.174517][ T953] __alloc_skb+0xef/0x5a0 [ 983.178954][ T953] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 983.184871][ T953] netlink_dump+0x2e9/0xf50 [ 983.189479][ T953] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 983.195469][ T953] ? __netlink_sendskb+0xb0/0xb0 [ 983.201373][ T953] ? kmem_cache_free+0xa4/0x320 [ 983.206262][ T953] ? kfree_skbmem+0xef/0x1b0 [ 983.210870][ T953] ? consume_skb+0xfb/0x400 [ 983.215421][ T953] netlink_recvmsg+0xb2c/0xee0 [ 983.220263][ T953] ? netlink_dump+0xf50/0xf50 [ 983.224973][ T953] ? _copy_from_user+0x13c/0x1a0 [ 983.229929][ T953] ? aa_af_perm+0x260/0x260 [ 983.234465][ T953] ? rw_copy_check_uvector+0x2cd/0x390 [ 983.239959][ T953] ? security_socket_recvmsg+0x8e/0xc0 [ 983.245436][ T953] ? netlink_dump+0xf50/0xf50 [ 983.250129][ T953] sock_recvmsg+0xca/0x110 [ 983.254560][ T953] ____sys_recvmsg+0x208/0x580 [ 983.259345][ T953] ? sock_read_iter+0x3d0/0x3d0 [ 983.264210][ T953] ? smp_apic_timer_interrupt+0x1b6/0x600 [ 983.270028][ T953] ? retint_kernel+0x2b/0x2b [ 983.274642][ T953] ___sys_recvmsg+0xe4/0x150 [ 983.279243][ T953] ? recvmsg_copy_msghdr+0x80/0x80 [ 983.284729][ T953] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 983.290759][ T953] ? smp_apic_timer_interrupt+0x1b6/0x600 [ 983.296780][ T953] ? sockfd_lookup_light+0x10a/0x170 [ 983.302179][ T953] ? __sanitizer_cov_trace_pc+0x37/0x50 [ 983.307827][ T953] ? sockfd_lookup_light+0xc6/0x170 [ 983.313038][ T953] do_recvmmsg+0x251/0x730 [ 983.317470][ T953] ? ___sys_recvmsg+0x150/0x150 [ 983.322436][ T953] ? perf_sched_cb_inc+0x250/0x250 [ 983.327582][ T953] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 983.333157][ T953] ? _raw_spin_unlock_irq+0x1f/0x80 [ 983.338393][ T953] ? lockdep_hardirqs_on+0x463/0x620 [ 983.343725][ T953] __sys_recvmmsg+0x23e/0x250 [ 983.348436][ T953] ? __ia32_sys_recvmsg+0xb0/0xb0 [ 983.353498][ T953] ? switch_fpu_return+0x1db/0x4b0 [ 983.358767][ T953] ? fpregs_mark_activate+0x320/0x320 [ 983.364179][ T953] __x64_sys_recvmmsg+0xde/0x130 [ 983.369147][ T953] do_syscall_64+0xf6/0x7d0 [ 983.373683][ T953] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 983.379593][ T953] RIP: 0033:0x45ca29 [ 983.383506][ T953] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 983.403233][ T953] RSP: 002b:00007f0c17aefc78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 983.411666][ T953] RAX: ffffffffffffffda RBX: 00000000004fb6c0 RCX: 000000000045ca29 [ 983.419744][ T953] RDX: 0000000000000001 RSI: 0000000020002540 RDI: 0000000000000003 [ 983.427738][ T953] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 983.435726][ T953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 983.443741][ T953] R13: 00000000000008a2 R14: 00000000004cb748 R15: 00007f0c17af06d4 10:44:48 executing program 2: socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0xda09, 0x1, 0x7, 0x4, 0x1}}) 10:44:48 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000002001b0000000000000000000000000038"], 0x40) 10:44:48 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x900000000000000, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:48 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x7, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:48 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x10000000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:48 executing program 1 (fault-call:5 fault-nth:2): r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:44:48 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x1000000000000000, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:48 executing program 2: socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0xda09, 0x1, 0x7, 0x4, 0x1}}) 10:44:48 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000007001b0000000000000000000000000038"], 0x40) 10:44:48 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000008001b0000000000000000000000000038"], 0x40) [ 984.010143][ T998] hfsplus: unable to find HFS+ superblock 10:44:48 executing program 2: socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0xda09, 0x1, 0x7, 0x4, 0x1}}) 10:44:48 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x2000000000000000, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) [ 984.091230][ T993] FAULT_INJECTION: forcing a failure. [ 984.091230][ T993] name failslab, interval 1, probability 0, space 0, times 0 [ 984.156913][ T993] CPU: 1 PID: 993 Comm: syz-executor.1 Not tainted 5.7.0-rc6-syzkaller #0 [ 984.165464][ T993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 984.175543][ T993] Call Trace: [ 984.178871][ T993] dump_stack+0x188/0x20d [ 984.183342][ T993] should_fail.cold+0x5/0xa [ 984.187887][ T993] ? fault_create_debugfs_attr+0x140/0x140 [ 984.193727][ T993] ? lockdep_hardirqs_on+0x463/0x620 [ 984.199050][ T993] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 984.204547][ T993] should_failslab+0x5/0xf [ 984.208998][ T993] kmem_cache_alloc+0x44/0x740 [ 984.213789][ T993] ? retint_kernel+0x2b/0x2b [ 984.218420][ T993] skb_clone+0x14d/0x3c0 [ 984.222686][ T993] netlink_deliver_tap+0x91c/0xb50 [ 984.227837][ T993] __netlink_sendskb+0x5b/0xb0 [ 984.232626][ T993] netlink_dump+0x700/0xf50 [ 984.237163][ T993] ? __netlink_sendskb+0xb0/0xb0 [ 984.242144][ T993] ? kmem_cache_free+0xa4/0x320 [ 984.247033][ T993] ? kfree_skbmem+0xef/0x1b0 [ 984.251643][ T993] ? consume_skb+0xfb/0x400 [ 984.256175][ T993] netlink_recvmsg+0xb2c/0xee0 [ 984.260972][ T993] ? netlink_dump+0xf50/0xf50 [ 984.265678][ T993] ? _copy_from_user+0x13c/0x1a0 [ 984.270735][ T993] ? aa_af_perm+0x260/0x260 [ 984.275272][ T993] ? rw_copy_check_uvector+0x2cd/0x390 [ 984.280858][ T993] ? security_socket_recvmsg+0x8e/0xc0 [ 984.286347][ T993] ? netlink_dump+0xf50/0xf50 [ 984.291056][ T993] sock_recvmsg+0xca/0x110 [ 984.295515][ T993] ____sys_recvmsg+0x208/0x580 [ 984.300317][ T993] ? sock_read_iter+0x3d0/0x3d0 [ 984.305198][ T993] ? retint_kernel+0x2b/0x2b [ 984.309820][ T993] ? copy_msghdr_from_user+0xd8/0x120 [ 984.315213][ T993] ? recvmsg_copy_msghdr+0x41/0x80 [ 984.320699][ T993] ___sys_recvmsg+0xe4/0x150 [ 984.325317][ T993] ? recvmsg_copy_msghdr+0x80/0x80 [ 984.330470][ T993] ? __fget_light+0x20e/0x270 [ 984.335196][ T993] ? sockfd_lookup_light+0xc6/0x170 [ 984.340507][ T993] do_recvmmsg+0x251/0x730 [ 984.344950][ T993] ? ___sys_recvmsg+0x150/0x150 [ 984.349823][ T993] ? lock_downgrade+0x840/0x840 [ 984.354713][ T993] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 984.360202][ T993] ? lockdep_hardirqs_on+0x463/0x620 [ 984.365519][ T993] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 984.371009][ T993] __sys_recvmmsg+0x23e/0x250 [ 984.375806][ T993] ? __ia32_sys_recvmsg+0xb0/0xb0 [ 984.380872][ T993] __x64_sys_recvmmsg+0xde/0x130 [ 984.385839][ T993] do_syscall_64+0xf6/0x7d0 [ 984.390386][ T993] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 984.396306][ T993] RIP: 0033:0x45ca29 [ 984.400252][ T993] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 984.420334][ T993] RSP: 002b:00007f0c17aefc78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 984.428771][ T993] RAX: ffffffffffffffda RBX: 00000000004fb6c0 RCX: 000000000045ca29 [ 984.436763][ T993] RDX: 0000000000000001 RSI: 0000000020002540 RDI: 0000000000000003 [ 984.444759][ T993] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 10:44:49 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x17000000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:49 executing program 2: socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0xda09, 0x1, 0x7, 0x4, 0x1}}) [ 984.452745][ T993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 984.459691][ T1019] hfsplus: unable to find HFS+ superblock [ 984.460752][ T993] R13: 00000000000008a2 R14: 00000000004cb748 R15: 00007f0c17af06d4 10:44:49 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000009001b0000000000000000000000000038"], 0x40) 10:44:49 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x8, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:49 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d30000000000a001b0000000000000000000000000038"], 0x40) 10:44:49 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x2010000000000000, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:49 executing program 2: socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0xda09, 0x1, 0x7, 0x4, 0x1}}) 10:44:49 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:44:49 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x18000000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:49 executing program 2: socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0xda09, 0x1, 0x7, 0x4, 0x1}}) 10:44:49 executing program 2: socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0xda09, 0x1, 0x7, 0x4, 0x1}}) [ 985.110318][ T1041] hfsplus: unable to find HFS+ superblock 10:44:49 executing program 2: socket$inet(0x10, 0x2000000002, 0x0) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0xda09, 0x1, 0x7, 0x4, 0x1}}) 10:44:50 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x3f00000000000000, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:50 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d30000000000c001b0000000000000000000000000038"], 0x40) 10:44:50 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:44:50 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x9, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:50 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x19000000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:50 executing program 2: socket$inet(0x10, 0x2000000002, 0x0) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0xda09, 0x1, 0x7, 0x4, 0x1}}) 10:44:50 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d30000000000d001b0000000000000000000000000038"], 0x40) 10:44:50 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x2, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:44:50 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x8000000000000000, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:50 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) [ 986.138397][ T1086] hfsplus: unable to find HFS+ superblock 10:44:51 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d30000000000e001b0000000000000000000000000038"], 0x40) 10:44:51 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x4, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:44:51 executing program 2: socket$inet(0x10, 0x2000000002, 0x0) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0xda09, 0x1, 0x7, 0x4, 0x1}}) 10:44:51 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x8cffffff00000000, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:51 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x20000000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) [ 986.566741][ T1121] hfsplus: unable to find HFS+ superblock 10:44:51 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x10, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:51 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x5, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:44:51 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0xda09, 0x1, 0x7, 0x4, 0x1}}) 10:44:51 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d30000000000f001b0000000000000000000000000038"], 0x40) 10:44:51 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0xf6ffffff00000000, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:51 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x20100000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:51 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x6, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:44:51 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0xda09, 0x1, 0x7, 0x4, 0x1}}) 10:44:52 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000018001b0000000000000000000000000038"], 0x40) 10:44:52 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0xfeffffff00000000, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) [ 987.169037][ T1142] hfsplus: unable to find HFS+ superblock 10:44:52 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x7, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:44:52 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x23000000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) [ 987.455239][ T1180] hfsplus: unable to find HFS+ superblock 10:44:52 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x300, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:52 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d30000000001a001b0000000000000000000000000038"], 0x40) 10:44:52 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0xff00000000000000, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:52 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0xda09, 0x1, 0x7, 0x4, 0x1}}) 10:44:52 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x8, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:44:52 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x3f000000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:52 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0xa, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:44:52 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0xda09, 0x1, 0x7, 0x4, 0x1}}) 10:44:52 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d30000000001b001b0000000000000000000000000038"], 0x40) [ 988.148650][ T1205] hfsplus: unable to find HFS+ superblock 10:44:53 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0xffff000000000000, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:53 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0xc, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:44:53 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0xda09, 0x1, 0x7, 0x4, 0x1}}) 10:44:53 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x500, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:53 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x40000000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:53 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d30000000003e001b0000000000000000000000000038"], 0x40) 10:44:53 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0xda09, 0x1, 0x7, 0x4, 0x1}}) 10:44:53 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0xffffff7f00000000, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:53 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0xe, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:44:53 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x10, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:44:53 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d30000000007f001b0000000000000000000000000038"], 0x40) 10:44:53 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x2, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) [ 989.095896][ T1254] hfsplus: unable to find HFS+ superblock 10:44:54 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0xda09, 0x1, 0x7, 0x4, 0x1}}) 10:44:54 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x42440000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:54 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x60, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:44:54 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x600, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:54 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d3000ffffff80001b0000000000000000000000000038"], 0x40) 10:44:54 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x3, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:54 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0xda09, 0x1, 0x7, 0x4, 0x1}}) 10:44:54 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x482b0000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:54 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x300, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:44:54 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) 10:44:54 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x500, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) [ 990.068284][ T1304] hfsplus: unable to find HFS+ superblock 10:44:54 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d30000000009b001b0000000000000000000000000038"], 0x40) 10:44:55 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x4, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:55 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) 10:44:55 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x48580000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) [ 990.357091][ T1335] hfsplus: unable to find HFS+ superblock 10:44:55 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x700, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:55 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x543, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:44:55 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) 10:44:55 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d30000000ffff001b0000000000000000000000000038"], 0x40) 10:44:55 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x4d500000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:55 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x5, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:55 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x600, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:44:55 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0x0, 0x1, 0x7, 0x4, 0x1}}) 10:44:55 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300080ffffff001b0000000000000000000000000038"], 0x40) [ 991.107453][ T1361] hfsplus: unable to find HFS+ superblock 10:44:55 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x608, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:44:56 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0x0, 0x0, 0x7, 0x4, 0x1}}) 10:44:56 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x6, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:56 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000020000001b0000000000000000000000000038"], 0x40) 10:44:56 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x53540000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:56 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0x0, 0x0, 0x0, 0x4, 0x1}}) 10:44:56 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x689, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:44:56 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x900, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:56 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x7, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:56 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x700, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:44:56 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000070000001b0000000000000000000000000038"], 0x40) [ 992.085320][ T1414] hfsplus: unable to find HFS+ superblock 10:44:56 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1}}) 10:44:57 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x806, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:44:57 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000080000001b0000000000000000000000000038"], 0x40) 10:44:57 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x8cffffff, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:57 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x8, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:57 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0xa00, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:44:57 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1}}) 10:44:57 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000180)) [ 992.361501][ T1443] hfsplus: unable to find HFS+ superblock 10:44:57 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x1020, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:57 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000090000001b0000000000000000000000000038"], 0x40) 10:44:57 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0xc00, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:44:57 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000180)) 10:44:57 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0xc0ed0000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:57 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x9, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:57 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0xe00, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) [ 993.058249][ T1479] hfsplus: unable to find HFS+ superblock 10:44:57 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d3000000a0000001b0000000000000000000000000038"], 0x40) 10:44:57 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000180)) 10:44:57 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0xf5ffffff, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:57 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x10, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:57 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x2000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:58 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x3580, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:44:58 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000180)) 10:44:58 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x2010, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:58 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d3000000c0000001b0000000000000000000000000038"], 0x40) 10:44:58 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x300, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) [ 993.330886][ T1517] hfsplus: unable to find HFS+ superblock 10:44:58 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x4000, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:44:58 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000180)) 10:44:58 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d3000000d0000001b0000000000000000000000000038"], 0x40) 10:44:58 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0xf6ffffff, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:58 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x3f00, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:58 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x500, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:58 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x4305, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:44:58 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000180)) 10:44:58 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000180)) [ 993.629995][ T1550] hfsplus: unable to find HFS+ superblock 10:44:58 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d3000000e0000001b0000000000000000000000000038"], 0x40) 10:44:58 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x4788, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:44:58 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000180)) 10:44:58 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0xf9fdffff, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:58 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0xedc0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:58 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x4888, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:44:58 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d3000000f0000001b0000000000000000000000000038"], 0x40) 10:44:58 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x600, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:58 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000180)) 10:44:58 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000180)) [ 993.973276][ T1587] hfsplus: unable to find HFS+ superblock 10:44:58 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x5865, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:44:58 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000180000001b0000000000000000000000000038"], 0x40) 10:44:58 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0xff00, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:58 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x700, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:58 executing program 2: exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000180)) 10:44:59 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0xff000000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:59 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x6000, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:44:59 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d3000001a0000001b0000000000000000000000000038"], 0x40) 10:44:59 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x6488, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:44:59 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d3000001b0000001b0000000000000000000000000038"], 0x40) 10:44:59 executing program 2: exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000180)) 10:44:59 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x1000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) [ 994.338801][ T1640] 9pnet: Insufficient options for proto=fd [ 994.406021][ T1641] hfsplus: unable to find HFS+ superblock 10:44:59 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x6558, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:44:59 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0xfffdffff, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:59 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d3000003e0000001b0000000000000000000000000038"], 0x40) 10:44:59 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x900, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:44:59 executing program 2: exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000180)) 10:44:59 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x8035, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:44:59 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d3000009b0000001b0000000000000000000000000038"], 0x40) [ 994.714115][ T1670] hfsplus: unable to find HFS+ superblock 10:44:59 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x8100, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:44:59 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000180)) 10:44:59 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0xffff0000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:44:59 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000f00000001b0000000000000000000000000038"], 0x40) [ 994.977009][ T1694] hfsplus: unable to find HFS+ superblock 10:45:00 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x2000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:00 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x1020, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:00 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x8847, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:00 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000800100001b0000000000000000000000000038"], 0x40) 10:45:00 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000180)) 10:45:00 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0xfffffdf9, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:45:00 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x8848, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:00 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000700001b0000000000000000000000000038"], 0x40) [ 995.526676][ T1722] hfsplus: unable to find HFS+ superblock 10:45:00 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x2000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:00 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x8864, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:00 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000900001b0000000000000000000000000038"], 0x40) 10:45:00 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000180)) 10:45:01 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x3000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:01 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0xfffffdff, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:45:01 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x2010, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:01 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x8906, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:01 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000a00001b0000000000000000000000000038"], 0x40) 10:45:01 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000180)) 10:45:01 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000180)) [ 996.497169][ T1767] hfsplus: unable to find HFS+ superblock 10:45:01 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000180)) 10:45:01 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x1000000, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:01 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x3f00, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:01 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000c00001b0000000000000000000000000038"], 0x40) 10:45:01 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x4000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:01 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000180)) 10:45:01 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0xffffff7f, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:45:01 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000d00001b0000000000000000000000000038"], 0x40) 10:45:01 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x2000000, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:01 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0xedc0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:01 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000180)) [ 996.854116][ T1809] hfsplus: unable to find HFS+ superblock 10:45:01 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000e00001b0000000000000000000000000038"], 0x40) 10:45:01 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x3000000, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:01 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0xffffff8c, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:45:01 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0xff00, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:01 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000f00001b0000000000000000000000000038"], 0x40) [ 997.111407][ T1833] hfsplus: unable to find HFS+ superblock 10:45:02 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x5000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:02 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) 10:45:02 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000001800001b0000000000000000000000000038"], 0x40) 10:45:02 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x4000000, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:02 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0xfffffff5, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:45:02 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0xfeffff, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:02 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x5000000, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:02 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x1000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) [ 997.775746][ T1863] hfsplus: unable to find HFS+ superblock 10:45:02 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) 10:45:02 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000001a00001b0000000000000000000000000038"], 0x40) 10:45:02 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x6000000, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:02 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0xfffffff6, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) [ 998.023980][ T1914] hfsplus: unable to find HFS+ superblock 10:45:03 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x6000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:03 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) 10:45:03 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000001b00001b0000000000000000000000000038"], 0x40) 10:45:03 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x7000000, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:03 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0xedc000000000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:45:03 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x2000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:03 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x8848, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) [ 998.691005][ T1936] hfsplus: unable to find HFS+ superblock 10:45:03 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x8000000, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:03 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000003e00001b0000000000000000000000000038"], 0x40) 10:45:03 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x3000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:03 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:45:03 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x7000000, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) [ 998.979428][ T1969] hfsplus: unable to find HFS+ superblock 10:45:04 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x7000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:04 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x8060000, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:04 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000007f00001b0000000000000000000000000038"], 0x40) 10:45:04 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x1000000000000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:45:04 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x8000000, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:04 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x4000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:04 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0xa000000, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) [ 999.698426][ T2001] hfsplus: unable to find HFS+ superblock 10:45:04 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000009b00001b0000000000000000000000000038"], 0x40) 10:45:04 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x6488, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:04 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x5000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:04 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0xe000000000000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:45:04 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0xc000000, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) [ 999.959330][ T2026] hfsplus: unable to find HFS+ superblock 10:45:05 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x8000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:05 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x6000, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:05 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d30000000f000001b0000000000000000000000000038"], 0x40) 10:45:05 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0xe000000, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:05 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x100000000000000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:45:05 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x6000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:05 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x689, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:05 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x10000000, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) [ 1000.614287][ T2051] hfsplus: unable to find HFS+ superblock 10:45:05 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d3000000000f0001b0000000000000000000000000038"], 0x40) 10:45:05 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x40000000, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:05 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x200000000000000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:45:05 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x7000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) [ 1000.929448][ T2084] hfsplus: unable to find HFS+ superblock 10:45:06 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x9000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:06 executing program 2: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x4, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:06 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000000011b0000000000000000000000000038"], 0x40) 10:45:06 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x43050000, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:06 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x300000000000000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:45:06 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x8000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:06 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x60000000, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:06 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x40000000, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) [ 1001.662833][ T2116] hfsplus: unable to find HFS+ superblock 10:45:06 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000080011b0000000000000000000000000038"], 0x40) 10:45:06 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x9000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:06 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x400000000000000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:45:06 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x60efff7f, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) [ 1001.933788][ T2140] hfsplus: unable to find HFS+ superblock 10:45:07 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x10000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:07 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x60000000, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:07 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000000021b0000000000000000000000000038"], 0x40) 10:45:07 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x65580000, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:07 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x10000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:07 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x500000000000000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:45:07 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000000071b0000000000000000000000000038"], 0x40) [ 1002.591899][ T2171] hfsplus: unable to find HFS+ superblock 10:45:07 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x7fffef60, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:07 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x600000000000000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:45:07 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000000081b0000000000000000000000000038"], 0x40) 10:45:07 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x20000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:07 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0xe, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) [ 1002.873820][ T2196] hfsplus: unable to find HFS+ superblock 10:45:08 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x20000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:08 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000000091b0000000000000000000000000038"], 0x40) 10:45:08 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x80350000, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:08 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x7fffef60, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:08 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x20100000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:08 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x700000000000000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:45:08 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x81000000, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:08 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x3f000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:08 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d3000000000000a1b0000000000000000000000000038"], 0x40) 10:45:08 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x80350000, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) [ 1003.735366][ T2234] hfsplus: unable to find HFS+ superblock 10:45:08 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d3000000000000c1b0000000000000000000000000038"], 0x40) 10:45:08 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x86ddffff, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:09 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x20100000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:09 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x800000000000000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:45:09 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x80350000, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:09 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x8cffffff, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:09 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d3000000000000d1b0000000000000000000000000038"], 0x40) 10:45:09 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x88470000, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:09 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x88480000, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:09 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d3000000000000e1b0000000000000000000000000038"], 0x40) 10:45:09 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0xc0ed0000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) [ 1004.689554][ T2286] hfsplus: unable to find HFS+ superblock 10:45:09 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x81000000, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:09 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x88640000, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:09 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0xf6ffffff, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:09 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x3f000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:09 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x900000000000000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:45:09 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d3000000000000f1b0000000000000000000000000038"], 0x40) 10:45:09 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x88a8ffff, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:09 executing program 2: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x5, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:09 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000000181b0000000000000000000000000038"], 0x40) [ 1004.996564][ T2325] hfsplus: unable to find HFS+ superblock 10:45:09 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0xfeffffff, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:10 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x88caffff, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:10 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0xa00000000000000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:45:10 executing program 2: socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100), 0x4) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0xda09, 0x1, 0x7, 0x4, 0x1}}) 10:45:10 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d3000000000001a1b0000000000000000000000000038"], 0x40) 10:45:10 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x89060000, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) [ 1005.376884][ T2350] hfsplus: unable to find HFS+ superblock 10:45:10 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x8cffffff, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:10 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0xff000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:10 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d3000000000001b1b0000000000000000000000000038"], 0x40) 10:45:10 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0xa6ffffff, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:10 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000f00000001b0000000000000000000000000038"], 0x40) 10:45:10 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0xc00000000000000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:45:10 executing program 2 (fault-call:3 fault-nth:0): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000180)) 10:45:10 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0xc3ffffff, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) [ 1005.941593][ T2388] hfsplus: unable to find HFS+ superblock 10:45:10 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d3000000000003e1b0000000000000000000000000038"], 0x40) 10:45:10 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0xffff0000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:10 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0xd00000000000000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:45:10 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000180)) 10:45:10 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0xc0ed0000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:10 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0xffffa888, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:10 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d3000000000007f1b0000000000000000000000000038"], 0x40) 10:45:11 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0xffffca88, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:11 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0xfffffe00, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) [ 1006.206659][ T2416] hfsplus: unable to find HFS+ superblock 10:45:11 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000ffffff801b0000000000000000000000000038"], 0x40) 10:45:11 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x1000000000000000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:45:11 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x2, &(0x7f0000000180)) 10:45:11 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0xffffdd86, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:11 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d3000000000009b1b0000000000000000000000000038"], 0x40) 10:45:11 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x10, &(0x7f0000000180)) 10:45:11 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0xffffff7f, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) [ 1006.463752][ T2448] hfsplus: unable to find HFS+ superblock 10:45:11 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0xf6ffffff, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:11 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0xffffffa6, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:11 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b2f, &(0x7f0000000180)) 10:45:11 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0xffffff8c, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:11 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x1700000000000000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:45:11 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d3000000000ffff1b0000000000000000000000000038"], 0x40) [ 1007.196964][ T2487] hfsplus: unable to find HFS+ superblock 10:45:12 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x1800000000000000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:45:12 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d30000080ffffff1b0000000000000000000000000038"], 0x40) 10:45:12 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b30, &(0x7f0000000180)) 10:45:12 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0xffffffc3, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:12 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0xff000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:12 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0xfffffff6, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:12 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d30000000000000070000000000000000000000000038"], 0x40) 10:45:12 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x14}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) [ 1007.478590][ T2516] hfsplus: unable to find HFS+ superblock 10:45:12 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0xfffffffe, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:12 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b31, &(0x7f0000000180)) 10:45:12 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0xffff0000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:12 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d30000000000000080000000000000000000000000038"], 0x40) 10:45:12 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x1900000000000000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:45:12 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x20000360}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:12 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0xedc000000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:12 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0xffffff8c, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:12 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b32, &(0x7f0000000180)) 10:45:12 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d30000000000000090000000000000000000000000038"], 0x40) 10:45:12 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0x7ffff000}, {0x0}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) [ 1007.838729][ T2555] hfsplus: unable to find HFS+ superblock 10:45:12 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x1000000000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:12 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x2000000000000000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:45:12 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x2}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:12 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b33, &(0x7f0000000180)) 10:45:12 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0xfffffff6, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:12 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000000000a0000000000000000000000000038"], 0x40) 10:45:12 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x3}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:12 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0xfeffff00000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) [ 1008.147709][ T2590] hfsplus: unable to find HFS+ superblock 10:45:13 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x4}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:13 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000000000c0000000000000000000000000038"], 0x40) 10:45:13 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0xedc000000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:13 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b34, &(0x7f0000000180)) 10:45:13 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x2010000000000000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:45:13 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x5}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:13 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x100000000000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:13 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000000000d0000000000000000000000000038"], 0x40) [ 1008.391300][ T2624] hfsplus: unable to find HFS+ superblock 10:45:13 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x200000000000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:13 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b35, &(0x7f0000000180)) 10:45:13 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x100000000000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:13 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000000000e0000000000000000000000000038"], 0x40) 10:45:13 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x6}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:13 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x300000000000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:13 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x2300000000000000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:45:13 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000000000f0000000000000000000000000038"], 0x40) 10:45:13 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x7}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:13 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d30000000000000180000000000000000000000000038"], 0x40) 10:45:13 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x200000000000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:13 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b36, &(0x7f0000000180)) [ 1008.771356][ T2671] hfsplus: unable to find HFS+ superblock 10:45:13 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x400000000000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:13 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000000001a0000000000000000000000000038"], 0x40) 10:45:13 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x8}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:13 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x3f00000000000000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:45:13 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b37, &(0x7f0000000180)) 10:45:13 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x300000000000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:13 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000200001b0000000000000000000000000038"], 0x40) 10:45:13 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x500000000000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:13 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0xa}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) [ 1009.117276][ T2715] hfsplus: unable to find HFS+ superblock 10:45:14 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b3a, &(0x7f0000000180)) 10:45:14 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x400000000000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:14 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0xc}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:14 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000700001b0000000000000000000000000038"], 0x40) 10:45:14 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x600000000000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:14 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x4000000000000000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:45:14 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0xe}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:14 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b3b, &(0x7f0000000180)) 10:45:14 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x500000000000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:14 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000800001b0000000000000000000000000038"], 0x40) 10:45:14 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x700000000000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) [ 1009.519925][ T2760] hfsplus: unable to find HFS+ superblock 10:45:14 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x10}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:14 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x4244000000000000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:45:14 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x600000000000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:14 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000900001b0000000000000000000000000038"], 0x40) 10:45:14 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b3c, &(0x7f0000000180)) 10:45:14 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x800000000000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:14 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) [ 1009.787735][ T2789] hfsplus: unable to find HFS+ superblock 10:45:14 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x700000000000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:14 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x300}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:14 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b3d, &(0x7f0000000180)) 10:45:14 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x482b000000000000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:45:14 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x900000000000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:14 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000a00001b0000000000000000000000000038"], 0x40) 10:45:14 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x500}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:14 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000c00001b0000000000000000000000000038"], 0x40) [ 1010.088021][ T2822] hfsplus: unable to find HFS+ superblock 10:45:14 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000d00001b0000000000000000000000000038"], 0x40) 10:45:14 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b40, &(0x7f0000000180)) 10:45:14 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x800000000000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:14 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x1000000000000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:15 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x4858000000000000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:45:15 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x543}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:15 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x2000000000000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) [ 1010.297460][ T2856] hfsplus: unable to find HFS+ superblock 10:45:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000e00001b0000000000000000000000000038"], 0x40) 10:45:15 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x600}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:15 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x900000000000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:15 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x4d50000000000000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:45:15 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x2010000000000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000f00001b0000000000000000000000000038"], 0x40) 10:45:15 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b41, &(0x7f0000000180)) 10:45:15 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x608}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:15 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x1000000000000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:15 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x3f00000000000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000001800001b0000000000000000000000000038"], 0x40) [ 1010.611408][ T2894] hfsplus: unable to find HFS+ superblock 10:45:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000001a00001b0000000000000000000000000038"], 0x40) 10:45:15 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b44, &(0x7f0000000180)) 10:45:15 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x689}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:15 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x2000000000000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:15 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x5354000000000000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:45:15 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x8000000000000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000001b00001b0000000000000000000000000038"], 0x40) 10:45:15 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x700}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:15 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b45, &(0x7f0000000180)) 10:45:15 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x8cffffff00000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) [ 1010.936841][ T2940] hfsplus: unable to find HFS+ superblock 10:45:15 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x2010000000000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000003e00001b0000000000000000000000000038"], 0x40) 10:45:15 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0xf6ffffff00000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:15 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x806}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:15 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x8cffffff00000000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:45:15 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b46, &(0x7f0000000180)) 10:45:16 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0xa00}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:16 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0xfeffffff00000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000009b00001b0000000000000000000000000038"], 0x40) 10:45:16 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000180)) 10:45:16 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x3f00000000000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:16 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0xc00}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d30000000f000001b0000000000000000000000000038"], 0x40) [ 1011.325282][ T2980] hfsplus: unable to find HFS+ superblock 10:45:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000008001001b0000000000000000000000000038"], 0x40) 10:45:16 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0xff00000000000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:16 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b48, &(0x7f0000000180)) 10:45:16 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x8000000000000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:16 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0xe00}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:16 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0xf5ffffff00000000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:45:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000007001b0000000000000000000000000038"], 0x40) 10:45:16 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0xffff000000000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:16 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x3580}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:16 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b49, &(0x7f0000000180)) 10:45:16 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0xffffff7f00000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:16 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x8cffffff00000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:16 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x2, r3}, 0x2c, {'wfdno', 0x3d, r0}}) [ 1011.738383][ T3026] hfsplus: unable to find HFS+ superblock 10:45:16 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x4000}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:16 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0xf6ffffff00000000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:45:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000009001b0000000000000000000000000038"], 0x40) 10:45:16 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0xf6ffffff00000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) [ 1011.892321][ T3060] 9pnet: Insufficient options for proto=fd 10:45:16 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4a, &(0x7f0000000180)) 10:45:16 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3, r3}, 0x2c, {'wfdno', 0x3d, r0}}) [ 1011.976056][ T3067] hfsplus: unable to find HFS+ superblock 10:45:16 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x4305}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d30000000000a001b0000000000000000000000000038"], 0x40) 10:45:16 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0xff00000000000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:16 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0xf9fdffff00000000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) [ 1012.113081][ T3089] 9pnet: Insufficient options for proto=fd 10:45:16 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4b, &(0x7f0000000180)) 10:45:16 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x4788}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:17 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x4, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:17 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d30000000000c001b0000000000000000000000000038"], 0x40) 10:45:17 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x4888}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:17 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0xffff000000000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) [ 1012.298073][ T3103] hfsplus: unable to find HFS+ superblock [ 1012.354602][ T3117] 9pnet: Insufficient options for proto=fd 10:45:17 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4c, &(0x7f0000000180)) 10:45:17 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0xff00000000000000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:45:17 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d30000000000d001b0000000000000000000000000038"], 0x40) 10:45:17 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x5865}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:17 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x5, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:17 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4d, &(0x7f0000000180)) 10:45:17 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x7, {'wfdno', 0x3d, r0}}) 10:45:17 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d30000000000e001b0000000000000000000000000038"], 0x40) [ 1012.557930][ T3141] 9pnet: Insufficient options for proto=fd 10:45:17 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x6000}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:17 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x6, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:17 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4e, &(0x7f0000000180)) [ 1012.689644][ T3147] hfsplus: unable to find HFS+ superblock [ 1012.712357][ T3156] 9pnet: Insufficient options for proto=fd [ 1012.748866][ T3163] 9pnet: Insufficient options for proto=fd 10:45:17 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x6488}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:17 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0xfffdffff00000000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:45:17 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d30000000000f001b0000000000000000000000000038"], 0x40) 10:45:17 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x3c, {'wfdno', 0x3d, r0}}) [ 1012.877280][ T3169] 9pnet: Insufficient options for proto=fd 10:45:17 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b52, &(0x7f0000000180)) 10:45:17 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x6558}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:17 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x7, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:17 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000018001b0000000000000000000000000038"], 0x40) 10:45:17 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x8035}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) [ 1013.049240][ T3188] 9pnet: Insufficient options for proto=fd [ 1013.066620][ T3193] 9pnet: Insufficient options for proto=fd [ 1013.073334][ T3187] hfsplus: unable to find HFS+ superblock 10:45:17 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x7}) 10:45:18 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b60, &(0x7f0000000180)) [ 1013.173448][ T3205] 9pnet: Insufficient options for proto=fd 10:45:18 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x8, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:18 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x8100}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:18 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0xffffff7f00000000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:45:18 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d30000000001a001b0000000000000000000000000038"], 0x40) [ 1013.330197][ T3217] 9pnet: Insufficient options for proto=fd [ 1013.354877][ T3225] 9pnet: Insufficient options for proto=fd 10:45:18 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x9, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:18 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b61, &(0x7f0000000180)) 10:45:18 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x8847}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) [ 1013.386678][ T3232] 9pnet: Insufficient options for proto=fd [ 1013.415645][ T3229] hfsplus: unable to find HFS+ superblock 10:45:18 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x3c}) 10:45:18 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d30000000001b001b0000000000000000000000000038"], 0x40) [ 1013.494072][ T3240] 9pnet: Insufficient options for proto=fd 10:45:18 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x8848}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:18 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0xa, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:18 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b62, &(0x7f0000000180)) 10:45:18 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffff0000, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) [ 1013.650279][ T3257] 9pnet: Insufficient options for proto=fd 10:45:18 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d30000000003e001b0000000000000000000000000038"], 0x40) [ 1013.703332][ T3258] 9pnet: Insufficient options for proto=fd [ 1013.729862][ T3260] 9pnet: Insufficient options for proto=fd 10:45:18 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x8864}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:18 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0xb, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:18 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) [ 1013.807239][ T3264] hfsplus: unable to find HFS+ superblock 10:45:18 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b63, &(0x7f0000000180)) 10:45:18 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x8906}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:18 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:45:18 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d30000000007f001b0000000000000000000000000038"], 0x40) [ 1013.967892][ T3285] 9pnet: Insufficient options for proto=fd 10:45:18 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x1000000}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:18 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0xc, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:18 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d30000000009b001b0000000000000000000000000038"], 0x40) 10:45:18 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b64, &(0x7f0000000180)) [ 1014.172542][ T3303] hfsplus: unable to find HFS+ superblock 10:45:19 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x2000000}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) [ 1014.233849][ T3312] 9pnet: Insufficient options for proto=fd 10:45:19 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0xd, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:19 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) [ 1014.407872][ T3333] 9pnet: Insufficient options for proto=fd [ 1014.432692][ T3332] hfsplus: unable to find HFS+ superblock 10:45:19 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [], 0x2}}) 10:45:19 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d3000000000f0001b0000000000000000000000000038"], 0x40) 10:45:19 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x3000000}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:19 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b65, &(0x7f0000000180)) 10:45:19 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0xe, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:19 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:45:19 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x4000000}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:19 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000000001f0000000000000000000000000038"], 0x40) 10:45:19 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b66, &(0x7f0000000180)) [ 1014.952360][ T3363] hfsplus: unable to find HFS+ superblock [ 1014.966081][ T3366] 9pnet: Insufficient options for proto=fd 10:45:19 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0xf, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:19 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x4, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:45:19 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x5000000}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) [ 1015.168448][ T3394] 9pnet: Insufficient options for proto=fd [ 1015.267684][ T3402] hfsplus: unable to find HFS+ superblock 10:45:20 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [], 0x3}}) 10:45:20 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d30000000000000200000000000000000000000000038"], 0x40) 10:45:20 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x10, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:20 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x6000000}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:20 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b67, &(0x7f0000000180)) 10:45:20 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x5, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:45:20 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x7000000}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:20 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000000007f0000000000000000000000000038"], 0x40) [ 1015.964992][ T3443] 9pnet: Insufficient options for proto=fd [ 1015.989675][ T3439] hfsplus: unable to find HFS+ superblock 10:45:20 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b68, &(0x7f0000000180)) 10:45:20 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x11, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:21 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x8000000}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:21 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x6, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) [ 1016.332600][ T3477] 9pnet: Insufficient options for proto=fd [ 1016.371455][ T3479] hfsplus: unable to find HFS+ superblock 10:45:21 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [], 0x4}}) 10:45:21 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000000009b0000000000000000000000000038"], 0x40) 10:45:21 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x8060000}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:21 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x12, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:21 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b69, &(0x7f0000000180)) 10:45:21 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x7, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:45:21 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000000ffff0000000000000000000000000038"], 0x40) 10:45:21 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0xa000000}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) [ 1016.986990][ T3507] 9pnet: Insufficient options for proto=fd [ 1017.024476][ T3510] hfsplus: unable to find HFS+ superblock 10:45:21 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x13, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:21 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b6a, &(0x7f0000000180)) 10:45:22 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x8, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:45:22 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0xc000000}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) [ 1017.274930][ T3542] 9pnet: Insufficient options for proto=fd [ 1017.382136][ T3550] hfsplus: unable to find HFS+ superblock 10:45:22 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [], 0x5}}) 10:45:22 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000002001b0000000000000000000000000038"], 0x40) 10:45:22 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x14, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:22 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b6b, &(0x7f0000000180)) 10:45:22 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0xe000000}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:22 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x9, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:45:22 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x10000000}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) [ 1018.020659][ T3576] 9pnet: Insufficient options for proto=fd 10:45:22 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000007001b0000000000000000000000000038"], 0x40) [ 1018.065366][ T3574] hfsplus: unable to find HFS+ superblock 10:45:22 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x15, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:22 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b6c, &(0x7f0000000180)) 10:45:22 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x40000000}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:23 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xa, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) [ 1018.277983][ T3611] 9pnet: Insufficient options for proto=fd [ 1018.368081][ T3623] hfsplus: unable to find HFS+ superblock 10:45:23 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [], 0x6}}) 10:45:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000008001b0000000000000000000000000038"], 0x40) 10:45:23 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x43050000}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:23 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b6d, &(0x7f0000000180)) 10:45:23 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x16, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:23 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xc, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:45:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000009001b0000000000000000000000000038"], 0x40) 10:45:23 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x60000000}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) [ 1019.088977][ T3644] 9pnet: Insufficient options for proto=fd 10:45:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d30000000000a001b0000000000000000000000000038"], 0x40) [ 1019.138711][ T3650] hfsplus: unable to find HFS+ superblock 10:45:23 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b70, &(0x7f0000000180)) 10:45:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d30000000000c001b0000000000000000000000000038"], 0x40) 10:45:24 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xd, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) [ 1019.338847][ T3691] hfsplus: unable to find HFS+ superblock 10:45:24 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [], 0x7}}) 10:45:24 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x17, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:24 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x60efff7f}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d30000000000d001b0000000000000000000000000038"], 0x40) 10:45:24 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b71, &(0x7f0000000180)) 10:45:24 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xe, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:45:24 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b72, &(0x7f0000000180)) [ 1020.052330][ T3715] 9pnet: Insufficient options for proto=fd 10:45:24 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x65580000}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d30000000000e001b0000000000000000000000000038"], 0x40) [ 1020.092774][ T3714] hfsplus: unable to find HFS+ superblock 10:45:24 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x7fffef60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:24 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4bfa, &(0x7f0000000180)) 10:45:24 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x18, r3}, 0x2c, {'wfdno', 0x3d, r0}}) [ 1020.335113][ T3752] 9pnet: Insufficient options for proto=fd 10:45:25 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [], 0x8}}) 10:45:25 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x10, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:45:25 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x80350000}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d30000000000f001b0000000000000000000000000038"], 0x40) 10:45:25 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4bfb, &(0x7f0000000180)) 10:45:25 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x19, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:25 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4c01, &(0x7f0000000180)) 10:45:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000018001b0000000000000000000000000038"], 0x40) [ 1021.048300][ T3765] 9pnet: Insufficient options for proto=fd [ 1021.054904][ T3766] hfsplus: unable to find HFS+ superblock 10:45:25 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x81000000}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:25 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x17, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:45:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d30000000001a001b0000000000000000000000000038"], 0x40) 10:45:26 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x1a, r3}, 0x2c, {'wfdno', 0x3d, r0}}) [ 1021.333835][ T3801] 9pnet: Insufficient options for proto=fd [ 1021.372784][ T3802] hfsplus: unable to find HFS+ superblock 10:45:26 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [], 0x9}}) 10:45:26 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x86ddffff}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:26 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5409, &(0x7f0000000180)) 10:45:26 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d30000000001b001b0000000000000000000000000038"], 0x40) 10:45:26 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x1b, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:26 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x18, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:45:26 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x88470000}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:26 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540b, &(0x7f0000000180)) 10:45:26 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d30000000003e001b0000000000000000000000000038"], 0x40) [ 1022.051639][ T3828] 9pnet: Insufficient options for proto=fd [ 1022.078570][ T3829] hfsplus: unable to find HFS+ superblock 10:45:26 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x88480000}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:26 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x1c, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:27 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x19, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) [ 1022.347237][ T3860] 9pnet: Insufficient options for proto=fd [ 1022.356640][ T3861] hfsplus: unable to find HFS+ superblock 10:45:27 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [], 0x10}}) 10:45:27 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x88640000}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:27 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d30000000009b001b0000000000000000000000000038"], 0x40) 10:45:27 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540c, &(0x7f0000000180)) 10:45:27 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x1d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:27 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x23, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:45:27 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x88a8ffff}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:27 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x88caffff}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:27 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540d, &(0x7f0000000180)) [ 1023.087099][ T3883] hfsplus: unable to find HFS+ superblock [ 1023.107640][ T3889] 9pnet: Insufficient options for proto=fd 10:45:27 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d3000000000f0001b0000000000000000000000000038"], 0x40) 10:45:28 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x1e, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:28 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x300, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) [ 1023.393989][ T3923] 9pnet: Insufficient options for proto=fd [ 1023.396413][ T3922] hfsplus: unable to find HFS+ superblock 10:45:28 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000080011b0000000000000000000000000038"], 0x40) 10:45:28 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x89060000}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:28 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540e, &(0x7f0000000180)) 10:45:28 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x21, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:28 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000040)) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000280)='9p\x00', 0x100074, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:28 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x500, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:45:28 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000000071b0000000000000000000000000038"], 0x40) [ 1024.046172][ T3944] 9pnet: Insufficient options for proto=fd 10:45:28 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0xa6ffffff}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:28 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x22, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:29 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540f, &(0x7f0000000180)) [ 1024.232885][ T3946] hfsplus: unable to find HFS+ superblock 10:45:29 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0xc3ffffff}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) [ 1024.306259][ T3967] 9pnet: Insufficient options for proto=fd 10:45:29 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5410, &(0x7f0000000180)) 10:45:29 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x23, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:29 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000000091b0000000000000000000000000038"], 0x40) 10:45:29 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000040)=0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x40, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}}, 0x2c}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x208826}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r7, 0x1, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004880}, 0x0) 10:45:29 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x600, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:45:29 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0xffffa888}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) [ 1024.547404][ T3991] 9pnet: Insufficient options for proto=fd 10:45:29 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d3000000000000a1b0000000000000000000000000038"], 0x40) 10:45:29 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0xffffca88}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:29 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5412, &(0x7f0000000180)) 10:45:29 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x24, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:29 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0xffffdd86}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) [ 1024.714546][ T4008] 9pnet: Insufficient options for proto=fd 10:45:29 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d3000000000000c1b0000000000000000000000000038"], 0x40) 10:45:29 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5413, &(0x7f0000000180)) 10:45:29 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0xffffffa6}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:29 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x25, r3}, 0x2c, {'wfdno', 0x3d, r0}}) [ 1024.796527][ T3997] hfsplus: unable to find HFS+ superblock [ 1025.014049][ T4048] 9pnet: Insufficient options for proto=fd 10:45:30 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0xffffffc3}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:30 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5414, &(0x7f0000000180)) 10:45:30 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d3000000000000d1b0000000000000000000000000038"], 0x40) 10:45:30 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x700, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:45:30 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x26, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:30 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000540)='/dev/usb/hiddev#\x00', 0x1, 0x180) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setuid(r3) syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xf32, 0x5, &(0x7f0000000400)=[{&(0x7f00000000c0)="092d502299ca336e7f29ac9837c4de417a6c508a0b5b8927d61322817bd070eb0a88189aab075111edbfa3537e1f69047d051eae31730e5364a9dc856cc3f899296e0a22bc33744e440812159569357187ed7a8dcbf8cb0392503dbfe525764ee36632d6bbf02f52fc0623d49ac65ae9b53ce07aebe90768d20b8104614b1c4f3ae902fd2a617ca29054317fb7d00d1079b42d016cc620bf0fee1400c07993f2c142852ce6212812cc7a8a20d9501467", 0xb0, 0x3}, {&(0x7f0000000180)="f25986a7fca8456ff1cda5e327a70bfa3ded0d587f91915ee191c3d93b38af613595160db2ac4ac4cd79ac79e3b60b44ebc1bc4636dc06c355643b3f32e918be6636ff94b25bbc1060cf3a9f08063dc37b4688249aca312f436b9408a62015b0922d52ee95e9e3166e1a2640b3b1a0e39e6473", 0x73, 0xa426}, {&(0x7f0000000200)="42317a1d1c2c0c42e3e4e645502b53b1efc4c836d7b728c07dbec222bd8873fc7fdac316e53e7e9e9a3c6d80979f3df7af81b0d52f39d22884cc50a347cf96b9c71d861b", 0x44, 0x1}, {&(0x7f00000002c0)="32f6e69991437594948798596a7e5899d415e86feafe8e0c88de74295f66f809127a5c392e4e909ea3f553e096df96df9af46cef", 0x34, 0x3ff}, {&(0x7f0000000300)="3a14d6a9a19e60f3abe43eb5e0a67dc49fe4b538b52105077439b4ad6d80d146cab88dddfe233122568fa048375781f35b4b9ae287bf57", 0x37, 0x6}], 0x3000, &(0x7f0000000480)={[{@unhide='unhide'}], [{@seclabel='seclabel'}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@uid_lt={'uid<', r3}}]}) r4 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r0}}) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21}) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r7 = dup(r6) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000040)=0x1) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r8, 0x100, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x840) r9 = accept$inet6(r7, 0x0, &(0x7f00000004c0)) ioctl$sock_inet6_udp_SIOCINQ(r9, 0x541b, &(0x7f0000000500)) 10:45:30 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x7ffffffff000}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) [ 1025.525634][ T4069] 9pnet: Insufficient options for proto=fd 10:45:30 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d3000000000000e1b0000000000000000000000000038"], 0x40) 10:45:30 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x27, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:30 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5415, &(0x7f0000000180)) 10:45:30 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r2, &(0x7f00000004c0)={{0x1b, 0x28, 0x7, 0x7, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000040)=0x1) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x8) dup2(r1, r2) r6 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0xb05040, 0x0) r7 = dup2(r6, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:30 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0xf0ffffff7f0000}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:30 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d3000000000000f1b0000000000000000000000000038"], 0x40) [ 1025.770399][ T4065] hfsplus: unable to find HFS+ superblock [ 1025.790397][ T4090] 9pnet: Insufficient options for proto=fd 10:45:30 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000000181b0000000000000000000000000038"], 0x40) 10:45:30 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x900, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:45:30 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x28, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:30 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5416, &(0x7f0000000180)) 10:45:30 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x100000000000000}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:30 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = accept$ax25(0xffffffffffffffff, &(0x7f0000000400)={{0x3, @null}, [@bcast, @null, @rose, @netrom, @null, @bcast, @remote, @rose]}, &(0x7f00000000c0)=0x4f) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000100)={'bond0\x00', {0x2, 0x4e21, @rand_addr=0x64010100}}) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r3 = dup2(r2, r1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB]) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="1b2807000000000000004000009300000000000000000200000000010000e0d4be1cde87df7f21c8000038000000f34c000000000000000000000000000000100000"], 0x40) ioctl$FIOCLEX(r4, 0x5451) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x5, 0x21, 0x584f802c3cd12a34, 0xffffffffffffffff}) r8 = dup(r7) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f0000000040)=0x1) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(r8, 0xc0585611, &(0x7f00000002c0)={0xffff, 0x7, 0x4, 0x4bdcd57dad5604e3, 0x2, {r9, r10/1000+60000}, {0x1, 0xe, 0x7, 0x4, 0x5, 0x18, "ad26de47"}, 0x6, 0x4, @offset=0x1000, 0x8}) r11 = dup(r6) ioctl$DMA_BUF_IOCTL_SYNC(r11, 0x40086200, &(0x7f0000000040)=0x1) ioctl$LOOP_SET_STATUS(r11, 0x4c02, &(0x7f0000000140)={0x0, {}, 0x0, {}, 0x4, 0x2, 0xd, 0x1, "08f3a57dfe5c8c1e657a509563f6fe4b9cdec938c8f4720e61a8b7b4a6d7bdaf59cd9cf2f8fb5aa4235e965ba65abd8b7c77f9d47eb5b0d908f0a5b3c2b00e72", "370c9156783dd81fdc1607b5e057ddfc540679ca14676867e1a0ba61ee8e7708", [0x401, 0x8]}) 10:45:30 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d3000000000001a1b0000000000000000000000000038"], 0x40) 10:45:30 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x200000000000000}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:30 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5418, &(0x7f0000000180)) [ 1026.108596][ T4128] 9pnet: Insufficient options for proto=fd [ 1026.158756][ T4128] 9pnet: Insufficient options for proto=fd 10:45:31 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x29, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:31 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x300000000000000}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:31 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541b, &(0x7f0000000180)) 10:45:31 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d3000000000001b1b0000000000000000000000000038"], 0x40) [ 1026.314789][ T4121] hfsplus: unable to find HFS+ superblock 10:45:31 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xa00, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:45:31 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x400000000000000}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:31 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d3000000000003e1b0000000000000000000000000038"], 0x40) [ 1026.421323][ T4160] 9pnet: Insufficient options for proto=fd 10:45:31 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541d, &(0x7f0000000180)) [ 1026.755436][ T4175] hfsplus: unable to find HFS+ superblock 10:45:31 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm_plock\x00', 0x200000, 0x0) faccessat(r0, &(0x7f00000002c0)='./file1\x00', 0x88, 0x800) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r3 = dup2(r2, r1) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r6 = dup(r5) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000040)=0x1) sendmsg$AUDIT_LIST_RULES(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)={0x10, 0x3f5, 0x1, 0x1070bd27, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x804) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7406000000", @ANYRESHEX=r3, @ANYBLOB="48d620d2b754690c3b5d761d0e611813506c38b6c476612825f51d14358f18c2213fd434d68223e771b81f4266f872e39a5d03223d405f5c880a5c1e6ae5430e8717a538bfa898841eff31d36331d8b7cf123cd7c7", @ANYRESHEX=r1, @ANYBLOB="10ed"]) 10:45:31 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x2a, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:31 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d3000000000007f1b0000000000000000000000000038"], 0x40) 10:45:31 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x500000000000000}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:31 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541e, &(0x7f0000000180)) 10:45:31 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xc00, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:45:31 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x600000000000000}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) [ 1026.999671][ T4200] 9pnet: Insufficient options for proto=fd 10:45:31 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541e, &(0x7f0000000180)) 10:45:31 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d3000000000009b1b0000000000000000000000000038"], 0x40) 10:45:31 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x2b, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:31 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x700000000000000}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:31 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r2, &(0x7f00000004c0)={{0x1b, 0x28, 0x7, 0x7, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) r3 = dup2(r1, r2) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:32 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x800000000000000}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:32 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5421, &(0x7f0000000180)) 10:45:32 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000000f01b0000000000000000000000000038"], 0x40) [ 1027.273018][ T4232] 9pnet: Insufficient options for proto=fd 10:45:32 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x2c, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:32 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x806000000000000}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) [ 1027.486833][ T4203] hfsplus: unable to find HFS+ superblock [ 1027.503303][ T4254] 9pnet: Insufficient options for proto=fd 10:45:32 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xd00, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:45:32 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d30000000000000070000000000000000000000000038"], 0x40) 10:45:32 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5422, &(0x7f0000000180)) 10:45:32 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0xa00000000000000}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:32 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x2d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:32 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d30000000000000090000000000000000000000000038"], 0x40) [ 1027.770509][ T4279] 9pnet: Insufficient options for proto=fd [ 1027.930199][ T4270] hfsplus: unable to find HFS+ superblock 10:45:32 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000040)=0x1) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000000040)=0xfffffe01) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r5 = dup2(r4, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB="2c776620000000a284a3554dbca9d87a9b3b5d00fb8e75988204b9d44b543f0c3f99840aa6d5d5d2dae5d86f04a518bf3573be4a0a0242649c9c8e7af409fe1222069e011e7d30394dca9429e1dfdfc1bd1c201ba4bfa60cfa39e03631ef097199207ddd11c118819eb8be3437d933962185992add48230dcf9257d121d685cdade81d68f7b22f4973fbcaf445303854b47c7aa71058da2af7b3582d6106de99f54775fca51e47d84c3ee4ec8b4696caa9c7123c9ae8744d15a452adf6ae75f0219a", @ANYRESHEX=r0, @ANYBLOB=',\x00']) 10:45:32 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0xc00000000000000}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:32 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5423, &(0x7f0000000180)) 10:45:32 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000000000a0000000000000000000000000038"], 0x40) 10:45:32 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x2e, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:32 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xe00, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:45:33 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0xe00000000000000}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) [ 1028.237858][ T4297] 9pnet: Insufficient options for proto=fd 10:45:33 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000000000c0000000000000000000000000038"], 0x40) 10:45:33 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5424, &(0x7f0000000180)) 10:45:33 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x2f, r3}, 0x2c, {'wfdno', 0x3d, r0}}) [ 1028.367185][ T4310] 9pnet: Insufficient options for proto=fd 10:45:33 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x1000000000000000}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:33 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000000000d0000000000000000000000000038"], 0x40) 10:45:33 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000040)=0x1) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44004}, 0x8000) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r8, 0x711, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x100000000000000}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000100), 0x4) accept$packet(r9, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000006c0)=0x14) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x64, r8, 0x100, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8000}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6a88}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x20}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000004}, 0x4001) r11 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r12 = dup2(r11, r4) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r12}, 0x2c, {'wfdno', 0x3d, r4}}) 10:45:33 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5425, &(0x7f0000000180)) 10:45:33 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x4000000000000000}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) [ 1028.581770][ T4326] 9pnet: Insufficient options for proto=fd 10:45:33 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x30, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:33 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000000000e0000000000000000000000000038"], 0x40) [ 1028.796378][ T4302] hfsplus: unable to find HFS+ superblock [ 1028.830635][ T4349] 9pnet: Insufficient options for proto=fd 10:45:33 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1020, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:45:33 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x4305000000000000}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:33 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5427, &(0x7f0000000180)) 10:45:33 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x31, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:33 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000000000f0000000000000000000000000038"], 0x40) 10:45:33 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x6000000000000000}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) [ 1029.011879][ T4369] 9pnet: Insufficient options for proto=fd 10:45:33 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5428, &(0x7f0000000180)) [ 1029.294480][ T4374] hfsplus: unable to find HFS+ superblock 10:45:34 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f1d01688d4eeec812f8e50bc315bd22ba2871116aca92b5eb4006b8bc3e125ae6f39a7d7d2015307ed2f095a9e2500355f43ac8bcc7ab76e0edfc3c85db18b14715d2777fd9c6", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) socket$nl_sock_diag(0x10, 0x3, 0x4) 10:45:34 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x32, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:34 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x60efff7f00000000}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:34 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d30000000000000180000000000000000000000000038"], 0x40) 10:45:34 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5429, &(0x7f0000000180)) 10:45:34 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1700, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:45:34 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x6558000000000000}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:34 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000000001a0000000000000000000000000038"], 0x40) [ 1029.694143][ T4407] 9pnet: Insufficient options for proto=fd 10:45:34 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x8035000000000000}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:34 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x33, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 10:45:34 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5437, &(0x7f0000000180)) [ 1029.774149][ T4419] 9pnet: Insufficient options for proto=fd [ 1029.833680][ T4425] 9pnet: Insufficient options for proto=fd 10:45:34 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b28070700000042000000003efccc9fddbb6d300000000000021b0000000000000000000000000038"], 0x40) 10:45:34 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x3) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = memfd_create(&(0x7f0000000100)='#\x00', 0x0) splice(r3, 0x0, r0, 0x0, 0x7, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r7 = dup(r6) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000040)=0x1) ioctl$KVM_DIRTY_TLB(r7, 0x4010aeaa, &(0x7f0000000180)={0x6, 0x2}) r8 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r9 = dup2(r8, r4) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='to=\x00'/15, @ANYRESHEX=r9, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r4, @ANYBLOB="2c0009ff8f5738bd789021471774cf0330673a96c9ef41f5c35f72772b3d8d5c5f53b3407192de7115993e82d2753b1abef04c713398893d41fd856aa4d96ecf0db1922531f6e6abb8222d394b8158237cdfef449c9d100b53385257595376f2da5d7635979eb563063d10f6efe693eb40ccdc494010e17aea7ecc789daa3d8a2da3146f6d32162ae425cd3c3a8ea4a45499ee74aaa761bbf7eabf1c7a1f4d6b558952e4e0d21589e1505c4057da0edef4855cdf2cb8cc8fc939d19a27f8f10d8de099e2808b2380f33bb93bcb51e399c4b3f462f01a831b96846fa25cf32373"]) 10:45:34 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x8100000000000000}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) [ 1029.965936][ T4431] 9pnet: Insufficient options for proto=fd 10:45:34 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5441, &(0x7f0000000180)) 10:45:34 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x86ddffff00000000}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:35 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5450, &(0x7f0000000180)) 10:45:35 executing program 1: r0 = socket$inet(0x10, 0x2000000002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0, 0x8847000000000000}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/119, 0x77}, {0x0, 0x60efff7f}], 0x5}}], 0x1, 0x0, 0x0) 10:45:35 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0xa922, 0x21, 0x0, 0xffffffffffffffff}) r4 = dup(r3) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000180)={0xfffffffb, 0x5, 0x4, 0x20, 0xffff, {r5, r6/1000+10000}, {0x5, 0x8, 0x6, 0x7, 0xff, 0x1f, "f356834a"}, 0x8, 0x1, @offset=0xbac0, 0x100, 0x0, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x18, r8, 0x1, 0x0, 0x0, {0x17}, [@TIPC_NLA_NODE={0x4, 0x6, 0x0, 0x0}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r7, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r8, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44881}, 0xc000) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000040)=0x1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x21a6) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0xffffff7f, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'caif0\x00', r10}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x70, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @multicast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @remote}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @multicast}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @dev={[], 0x3f}}, @NL80211_ATTR_MAC={0xa, 0x6, @local}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040090}, 0x50) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}}) 10:45:35 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1800, 0x0, 0x0, &(0x7f0000000980)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "b8b8ed56"}}]}) 10:45:35 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5451, &(0x7f0000000180)) [ 1030.656600][ T4476] 9pnet: Insufficient options for proto=fd [ 1030.680096][ T4474] BUG: unable to handle page fault for address: fffffffffffffe90 [ 1030.680105][ T4474] #PF: supervisor read access in kernel mode [ 1030.680110][ T4474] #PF: error_code(0x0000) - not-present page [ 1030.680113][ T4474] PGD 987c067 P4D 987c067 PUD 987e067 PMD 0 [ 1030.680130][ T4474] Oops: 0000 [#1] PREEMPT SMP KASAN [ 1030.680141][ T4474] CPU: 1 PID: 4474 Comm: syz-executor.2 Not tainted 5.7.0-rc6-syzkaller #0 [ 1030.680146][ T4474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1030.680166][ T4474] RIP: 0010:mm_update_next_owner+0x519/0x7a0 [ 1030.680175][ T4474] Code: 68 fa ff ff 49 39 c7 0f 84 eb fe ff ff e8 df 8f 2d 00 48 8d bd 28 04 00 00 48 89 f8 48 c1 e8 03 80 3c 18 00 0f 85 96 01 00 00 <4c> 8b b5 28 04 00 00 4d 39 e6 75 95 49 89 fd e9 61 fc ff ff e8 ae [ 1030.680179][ T4474] RSP: 0018:ffffc9001a297d20 EFLAGS: 00010246 [ 1030.680187][ T4474] RAX: 1fffffffffffffd2 RBX: dffffc0000000000 RCX: ffffffff8145a4a3 [ 1030.680192][ T4474] RDX: 0000000000000000 RSI: ffffffff8145a541 RDI: fffffffffffffe90 [ 1030.680198][ T4474] RBP: fffffffffffffa68 R08: ffff88804f314180 R09: fffffbfff1301219 [ 1030.680203][ T4474] R10: ffffffff898090c3 R11: fffffbfff1301218 R12: ffff888014f5efc0 [ 1030.680208][ T4474] R13: ffff888011852600 R14: 0000000000000000 R15: ffff8880001d61d0 [ 1030.680216][ T4474] FS: 0000000000000000(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 1030.680221][ T4474] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1030.680232][ T4474] CR2: fffffffffffffe90 CR3: 000000020a5f0000 CR4: 00000000001406e0 [ 1030.680260][ T4474] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1030.680265][ T4474] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1030.680268][ T4474] Call Trace: [ 1030.680281][ T4474] do_exit+0xa49/0x2dd0 [ 1030.680295][ T4474] ? find_held_lock+0x2d/0x110 [ 1030.680303][ T4474] ? do_group_exit+0x2c7/0x340 [ 1030.680312][ T4474] ? mm_update_next_owner+0x7a0/0x7a0 [ 1030.680321][ T4474] ? lock_downgrade+0x840/0x840 [ 1030.680331][ T4474] ? do_raw_spin_lock+0x129/0x2e0 [ 1030.680342][ T4474] ? kick_process+0xe4/0x170 [ 1030.680357][ T4474] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1030.680366][ T4474] do_group_exit+0x125/0x340 [ 1030.680375][ T4474] __x64_sys_exit_group+0x3a/0x50 [ 1030.680389][ T4474] do_syscall_64+0xf6/0x7d0 [ 1030.680399][ T4474] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1030.680407][ T4474] RIP: 0033:0x45ca29 [ 1030.680415][ T4474] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1030.680419][ T4474] RSP: 002b:00007ffc7ef5c278 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1030.680427][ T4474] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 000000000045ca29 [ 1030.680432][ T4474] RDX: 0000000000416621 RSI: fffffffffffffff7 RDI: 0000000000000000 [ 1030.680437][ T4474] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffc7ef5c2d0 [ 1030.680442][ T4474] R10: 00000000007902b0 R11: 0000000000000246 R12: 0000000000000001 [ 1030.680446][ T4474] R13: 00007ffc7ef5c2d0 R14: 0000000000000000 R15: 00007ffc7ef5c2e0 [ 1030.680454][ T4474] Modules linked in: [ 1030.680462][ T4474] CR2: fffffffffffffe90 [ 1030.680474][ T4474] ---[ end trace 2dce2378761423d6 ]--- [ 1030.680482][ T4474] RIP: 0010:mm_update_next_owner+0x519/0x7a0 [ 1030.680490][ T4474] Code: 68 fa ff ff 49 39 c7 0f 84 eb fe ff ff e8 df 8f 2d 00 48 8d bd 28 04 00 00 48 89 f8 48 c1 e8 03 80 3c 18 00 0f 85 96 01 00 00 <4c> 8b b5 28 04 00 00 4d 39 e6 75 95 49 89 fd e9 61 fc ff ff e8 ae [ 1030.680494][ T4474] RSP: 0018:ffffc9001a297d20 EFLAGS: 00010246 [ 1030.680501][ T4474] RAX: 1fffffffffffffd2 RBX: dffffc0000000000 RCX: ffffffff8145a4a3 [ 1030.680506][ T4474] RDX: 0000000000000000 RSI: ffffffff8145a541 RDI: fffffffffffffe90 [ 1030.680511][ T4474] RBP: fffffffffffffa68 R08: ffff88804f314180 R09: fffffbfff1301219 [ 1030.680517][ T4474] R10: ffffffff898090c3 R11: fffffbfff1301218 R12: ffff888014f5efc0 [ 1030.680522][ T4474] R13: ffff888011852600 R14: 0000000000000000 R15: ffff8880001d61d0 [ 1030.680528][ T4474] FS: 0000000000000000(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 1030.680534][ T4474] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1030.680539][ T4474] CR2: fffffffffffffe90 CR3: 000000020a5f0000 CR4: 00000000001406e0 [ 1030.680544][ T4474] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1030.680548][ T4474] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1030.680553][ T4474] Kernel panic - not syncing: Fatal exception [ 1031.832801][ T4474] Shutting down cpus with NMI [ 1031.834978][ T4474] Kernel Offset: disabled