)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r8, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:38:55 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ocfs2_control\x00', 0x404800, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x24, r4, 0x511, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x24}}, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x11c, r4, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x108, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2958}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4001}, 0x40000)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
fcntl$setpipe(r6, 0x407, 0x0)
write(r6, &(0x7f0000000340), 0x41395527)
vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r7 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r8 = memfd_create(&(0x7f00000000c0)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x2)
pwritev(r8, &(0x7f0000000140)=[{&(0x7f0000000100)="e80e9e27", 0x4}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r7, 0x4c00, r8)
sendfile(r7, r8, 0x0, 0x20000102000003)

00:38:55 executing program 3:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:38:55 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$bfs(&(0x7f0000000200)='bfs\x00', &(0x7f00000003c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r2, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r2, 0x0)
r3 = socket$inet(0x2, 0x4000000805, 0x9)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
r5 = dup3(r3, r4, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, <r6=>0x0]}, &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0xe, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b38b)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000000)={r6, 0x1}, 0x8)

[  921.374848] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000)
00:38:55 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r4, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)

00:38:55 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r8, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:38:55 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local}, 0x1c)
listen(r1, 0x1)
r2 = gettid()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_udp_int(r3, 0x11, 0xa, &(0x7f0000000140)=0x9, 0x4)
tkill(r2, 0x1000000000016)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=<r4=>0x0)
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={r2, r4, r5}, 0xc)
r6 = dup(r0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge0\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00')
pipe(&(0x7f0000000ac0)={<r9=>0xffffffffffffffff})
vmsplice(r9, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
accept4$packet(r9, &(0x7f0000002940)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002980)=0x14, 0x80000)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000002a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002a40)={&(0x7f00000029c0)={0x5c, r8, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x80)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000940)={@multicast2, @remote, <r11=>0x0}, &(0x7f0000000980)=0xc)
r12 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00')
pipe(&(0x7f0000000ac0)={<r13=>0xffffffffffffffff})
vmsplice(r13, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
accept4$packet(r13, &(0x7f0000002940)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002980)=0x14, 0x80000)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000002a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002a40)={&(0x7f00000029c0)={0x5c, r12, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r14}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x80)
r15 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00')
pipe(&(0x7f0000000ac0)={<r16=>0xffffffffffffffff})
vmsplice(r16, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
accept4$packet(r16, &(0x7f0000002940)={0x11, 0x0, <r17=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002980)=0x14, 0x80000)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000002a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002a40)={&(0x7f00000029c0)={0x5c, r15, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r17}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x80)
r18 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r18, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r18, 0x1)
r19 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00')
pipe(&(0x7f0000000ac0)={<r20=>0xffffffffffffffff})
vmsplice(r20, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
accept4$packet(r20, &(0x7f0000002940)={0x11, 0x0, <r21=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002980)=0x14, 0x80000)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000002a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002a40)={&(0x7f00000029c0)={0x5c, r19, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r21}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x80)
ioctl$sock_SIOCDELRT(r18, 0x890c, &(0x7f0000000a00)={0x0, @hci={0x1f, 0x0, 0xb4ff923577466b78}, @can={0x1d, <r22=>r21}, @rc={0x1f, @fixed={[], 0x10}, 0x5}, 0x20, 0x0, 0x0, 0x0, 0xff, &(0x7f00000009c0)='veth0_to_team\x00', 0x0, 0xfffffffffffffffb, 0x200})
r23 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00')
pipe(&(0x7f0000000ac0)={<r24=>0xffffffffffffffff})
vmsplice(r24, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
accept4$packet(r24, &(0x7f0000002940)={0x11, 0x0, <r25=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002980)=0x14, 0x80000)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000002a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002a40)={&(0x7f00000029c0)={0x5c, r23, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r25}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x80)
r26 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00')
pipe(&(0x7f0000000ac0)={<r27=>0xffffffffffffffff})
vmsplice(r27, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
accept4$packet(r27, &(0x7f0000002940)={0x11, 0x0, <r28=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002980)=0x14, 0x80000)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000002a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002a40)={&(0x7f00000029c0)={0x5c, r26, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r28}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x80)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000e00)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r29=>0x0}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000f00)=0xe8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r30=>0xffffffffffffffff})
r31 = dup(r30)
ioctl$PERF_EVENT_IOC_ENABLE(r31, 0x8912, 0x400200)
recvmsg$can_raw(r31, &(0x7f0000003c40)={&(0x7f0000002980)=@ll={0x11, 0x0, <r32=>0x0}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000002a00)=""/80, 0x50}, {&(0x7f0000002a80)=""/177, 0xb1}, {&(0x7f0000002b40)=""/55, 0x37}, {&(0x7f0000002b80)=""/4096, 0x1000}], 0x4, &(0x7f0000003bc0)=""/119, 0x77}, 0x20)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r6, &(0x7f0000003f40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003f00)={&(0x7f0000003c80)={0x244, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKSTATE_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r22}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r25}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r28}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r29}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x4}, @ETHTOOL_A_LINKSTATE_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r32}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x81}, 0x20000800)
r33 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x2, 0x0)
ioctl$SNDCTL_DSP_GETIPTR(r33, 0x800c5011, &(0x7f00000001c0))
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
syz_mount_image$bfs(&(0x7f0000000200)='bfs\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

00:38:56 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:38:56 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x2c2, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = dup(0xffffffffffffffff)
getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = dup(r8)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12)
ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f0000000240)={@dev, @ipv4={[0x0, 0x0, 0x8], [], @loopback}, @initdev={0xfe, 0x88, [0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11})
r12 = dup(0xffffffffffffffff)
getpeername$packet(r12, &(0x7f0000000000)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@dev, @ipv4={[0x0, 0x0, 0x8], [], @broadcast}, @mcast1, 0x0, 0x0, 0x0, 0x700, 0x0, 0x20c200a2, r13})
getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12)
r15 = dup(0xffffffffffffffff)
getpeername$packet(r15, &(0x7f0000000000)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12)
r17 = socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r18=>0xffffffffffffffff})
r19 = dup(r18)
getpeername$packet(r19, &(0x7f0000000000)={0x11, 0x0, <r20=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12)
ioctl$sock_inet6_SIOCADDRT(r17, 0x890b, &(0x7f0000000240)={@dev, @ipv4={[0x0, 0x0, 0x8], [], @loopback}, @initdev={0xfe, 0x88, [0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r20})
r21 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r21, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r21, 0x0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=ANY=[@ANYPTR, @ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR, @ANYPTR, @ANYPTR], @ANYPTR], @ANYRES64, @ANYRESHEX, @ANYPTR64=&(0x7f0000000580)=ANY=[@ANYPTR=&(0x7f0000000300)=ANY=[@ANYRES16=r9], @ANYRESOCT, @ANYRES64, @ANYBLOB="c83aef2eb43abf6eb75350f46a642a9c01424584bc4a824b4c4ca845a3526a8824004d9f3db4a62ffa5e0c36e809e39f8397996672fe13c9fe45bc0e3539e61ff3c862af351965befae8f2b3aed2c46a910794faaae7fd429eef274a1dfc47cdf025a4618df6d673853c5703520d9cc545da91368dc542ed09f518bddb9e1263ee20f4c5a56293ac4806379c3276", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRESHEX, @ANYRES16, @ANYRESOCT, @ANYRES16, @ANYRES32=0x0, @ANYRES16=r10, @ANYBLOB="a025db6d5e89f6376ea25e2f9107a507ba7c7a18523d476c6f230a4f3a3d9a473f041bc67c35c8f318bae21d54ed4fb3bf06b7022cd1aa703bdce8fc9e0127cfbd5c810d74484966728c1830d0b149c7863d926c31a9fe01d512f3b3732589fb684b56b140fed627", @ANYRESDEC=0x0], @ANYRESOCT=r13, @ANYRESOCT=r21, @ANYRESOCT], @ANYRESHEX, @ANYPTR=&(0x7f0000000340)=ANY=[@ANYRES16=r14, @ANYRES16, @ANYRES32], @ANYRES32, @ANYPTR64=&(0x7f0000000140)=ANY=[@ANYRESDEC, @ANYRES16, @ANYRES64=r16, @ANYRES64, @ANYRESOCT=r17], @ANYRESOCT], 0xa, 0x0)
setsockopt$inet_tcp_int(r7, 0x6, 0xa, &(0x7f0000000080)=0xfd1, 0x4)
r22 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00')
getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r23=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@dev, @ipv4={[0x0, 0x0, 0x8], [], @broadcast}, @mcast1, 0x0, 0x0, 0x0, 0x700, 0x0, 0x20c200a2, r23})
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r7, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r22, @ANYBLOB="00042dbd7000fedbdf2502000000380001800800030001000000080003000200000008000100", @ANYRES32=r23, @ANYBLOB="0800030091f9120fbb2ccf1be0e399d56470210000001400020069703667726530000000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040000)
sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x100, r22, 0x319, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xa0, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x4}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4810}, 0x20000000)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:38:56 executing program 3:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:38:56 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:38:56 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r4, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)

00:38:57 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x2c2, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = dup(0xffffffffffffffff)
getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = dup(r8)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12)
ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f0000000240)={@dev, @ipv4={[0x0, 0x0, 0x8], [], @loopback}, @initdev={0xfe, 0x88, [0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11})
r12 = dup(0xffffffffffffffff)
getpeername$packet(r12, &(0x7f0000000000)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@dev, @ipv4={[0x0, 0x0, 0x8], [], @broadcast}, @mcast1, 0x0, 0x0, 0x0, 0x700, 0x0, 0x20c200a2, r13})
getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12)
r15 = dup(0xffffffffffffffff)
getpeername$packet(r15, &(0x7f0000000000)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12)
r17 = socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r18=>0xffffffffffffffff})
r19 = dup(r18)
getpeername$packet(r19, &(0x7f0000000000)={0x11, 0x0, <r20=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12)
ioctl$sock_inet6_SIOCADDRT(r17, 0x890b, &(0x7f0000000240)={@dev, @ipv4={[0x0, 0x0, 0x8], [], @loopback}, @initdev={0xfe, 0x88, [0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r20})
r21 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r21, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r21, 0x0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=ANY=[@ANYPTR, @ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR, @ANYPTR, @ANYPTR], @ANYPTR], @ANYRES64, @ANYRESHEX, @ANYPTR64=&(0x7f0000000580)=ANY=[@ANYPTR=&(0x7f0000000300)=ANY=[@ANYRES16=r9], @ANYRESOCT, @ANYRES64, @ANYBLOB="c83aef2eb43abf6eb75350f46a642a9c01424584bc4a824b4c4ca845a3526a8824004d9f3db4a62ffa5e0c36e809e39f8397996672fe13c9fe45bc0e3539e61ff3c862af351965befae8f2b3aed2c46a910794faaae7fd429eef274a1dfc47cdf025a4618df6d673853c5703520d9cc545da91368dc542ed09f518bddb9e1263ee20f4c5a56293ac4806379c3276", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRESHEX, @ANYRES16, @ANYRESOCT, @ANYRES16, @ANYRES32=0x0, @ANYRES16=r10, @ANYBLOB="a025db6d5e89f6376ea25e2f9107a507ba7c7a18523d476c6f230a4f3a3d9a473f041bc67c35c8f318bae21d54ed4fb3bf06b7022cd1aa703bdce8fc9e0127cfbd5c810d74484966728c1830d0b149c7863d926c31a9fe01d512f3b3732589fb684b56b140fed627", @ANYRESDEC=0x0], @ANYRESOCT=r13, @ANYRESOCT=r21, @ANYRESOCT], @ANYRESHEX, @ANYPTR=&(0x7f0000000340)=ANY=[@ANYRES16=r14, @ANYRES16, @ANYRES32], @ANYRES32, @ANYPTR64=&(0x7f0000000140)=ANY=[@ANYRESDEC, @ANYRES16, @ANYRES64=r16, @ANYRES64, @ANYRESOCT=r17], @ANYRESOCT], 0xa, 0x0)
setsockopt$inet_tcp_int(r7, 0x6, 0xa, &(0x7f0000000080)=0xfd1, 0x4)
r22 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00')
getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r23=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@dev, @ipv4={[0x0, 0x0, 0x8], [], @broadcast}, @mcast1, 0x0, 0x0, 0x0, 0x700, 0x0, 0x20c200a2, r23})
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r7, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r22, @ANYBLOB="00042dbd7000fedbdf2502000000380001800800030001000000080003000200000008000100", @ANYRES32=r23, @ANYBLOB="0800030091f9120fbb2ccf1be0e399d56470210000001400020069703667726530000000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040000)
sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x100, r22, 0x319, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xa0, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x4}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4810}, 0x20000000)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:38:57 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')

00:38:57 executing program 3:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:38:57 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:38:57 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r4, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r4, 0x0)
ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
r5 = gettid()
tkill(r5, 0x1000000000016)
sched_setattr(r5, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8000}, 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r7 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r7, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7)
sendfile(r6, r7, 0x0, 0x20000102000003)

00:38:57 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:38:59 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1409, 0x400, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4024}, 0x1)
syz_mount_image$bfs(&(0x7f0000000200)='bfs\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

00:38:59 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')

00:38:59 executing program 3:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:38:59 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:38:59 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

[  925.162250] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000)
[  925.216704] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000)
00:38:59 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$bfs(&(0x7f0000000200)='bfs\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = getegid()
statx(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x80, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setresgid(r2, r3, r4)

[  925.579319] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000)
00:38:59 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0x40084146, &(0x7f00000000c0)=0xfff)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
r8 = dup3(r6, r7, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r8, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="83eda6ee0ebcb006781bd87ecec19b4c52e342f7da191b965e8c5a1ba70e2fb17ad5e324126d35f20823b85b50dc3e87f0c628352394ad936e21", @ANYRES32=0x0, @ANYRES32=<r9=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0xe, &(0x7f000059aff8)={<r10=>r9}, &(0x7f000034f000)=0x2059b38b)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f00000002c0)=ANY=[@ANYRES32=<r11=>r9, @ANYBLOB="2f0000005bcadc926445ad2be0f74d7e74617c2f536e345eb406198d235f16e839b808790c20451522dbf4bf2febbb601978f51d1475e1be59d90ecc05535a4db072994ca47f2da4e8f35b10c0999edf1fef44aa523dc4bed97cb6e0"], &(0x7f0000000100)=0x37)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r12, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r12, 0x0)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r12, 0x84, 0x1, &(0x7f0000000240)={r10, 0x38, 0x2, 0x7fff, 0x4, 0x100}, 0x14)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={r11, @in6={{0xa, 0x4e20, 0x80000000, @ipv4={[], [], @rand_addr=0xfffff1db}, 0xd62}}, 0x6, 0x101, 0x1000, 0x6, 0x24, 0x52b, 0x3f}, 0x9c)
r13 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x20000, 0x0)
write$ppp(r13, &(0x7f0000000040)="3f89768779bd0548c72a631515f63ca408f6b6d28e5d7abea75febeb764e36d47e199cc08c273233a502dae59ca364e89de454a3f82c9327b2d1c5206845f50847fba5c753a11e3f63e71af22b785ddb677fa6ede8", 0x55)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$bfs(&(0x7f0000000200)='bfs\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

00:38:59 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r2, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r2, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0xf68754ba2b061247)
fsetxattr$trusted_overlay_origin(r3, &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x2)
ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000000)=0x3)
syz_mount_image$bfs(&(0x7f0000000200)='bfs\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

00:38:59 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540))
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x4, 0x5, 0x1})
socket$phonet(0x23, 0x2, 0x1)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r0, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r0, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r1, 0x0, 0x0)
r2 = dup(r1)
r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0)
ioctl$SIOCX25SDTEFACILITIES(r3, 0x89eb, &(0x7f0000000040)={0xfffe, 0x1e, 0x8000, 0xf2, 0x5, 0x5, 0x5, "79a0aae8dc8f1b3abfc9333f3a0264396bc728bb", "2f6599c992b30ca9e07ae20b78fbaeda230ef8d8"})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_mount_image$bfs(&(0x7f0000000200)='bfs\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

00:39:00 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

[  926.219447] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000)
[  926.241533] print_req_error: I/O error, dev loop0, sector 0
[  926.247376] Buffer I/O error on dev loop0, logical block 0, lost async page write
[  926.256068] print_req_error: I/O error, dev loop0, sector 8
[  926.262064] Buffer I/O error on dev loop0, logical block 1, lost async page write
00:39:00 executing program 3:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:39:00 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')

00:39:00 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:39:00 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
r1 = gettid()
tkill(r1, 0x1000000000016)
capget(&(0x7f00000000c0)={0x20080522, r1}, &(0x7f0000000100)={0x11a7, 0x100, 0x4, 0x68, 0x2, 0xa3})
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x10000003, 0x5, 0x5, 0x80000, 0x0, 0xfffffffffffffffe, 0x600, 0x4000008}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioprio_get$pid(0x2, r0)
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
eventfd(0x8000)

00:39:00 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:39:01 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540))
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x10100, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x8100, 0x0)
ioctl$SNDRV_PCM_IOCTL_REWIND(r1, 0x40084146, &(0x7f0000000080)=0xffffffff80000000)
r2 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_mount_image$bfs(&(0x7f0000000200)='bfs\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x1208000, 0x0)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x20000, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000100)={<r6=>0x0, 0x5, 0x20, 0x56, 0xffffffffffffe6c1}, &(0x7f0000000140)=0x18)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000240)={r6, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0xfffd}, &(0x7f0000000180)=0x90)

00:39:01 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
dup(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x200200400200)
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
shmget(0x1, 0x2000, 0x1000, &(0x7f0000ffe000/0x2000)=nil)
syz_mount_image$bfs(&(0x7f0000000200)='bfs\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

00:39:01 executing program 3:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

[  927.392561] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000)
00:39:01 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:39:01 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r4, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)

[  927.463679] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000)
00:39:01 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540))
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x10100, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x8100, 0x0)
ioctl$SNDRV_PCM_IOCTL_REWIND(r1, 0x40084146, &(0x7f0000000080)=0xffffffff80000000)
r2 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_mount_image$bfs(&(0x7f0000000200)='bfs\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x1208000, 0x0)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x20000, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000100)={<r6=>0x0, 0x5, 0x20, 0x56, 0xffffffffffffe6c1}, &(0x7f0000000140)=0x18)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000240)={r6, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0xfffd}, &(0x7f0000000180)=0x90)

00:39:01 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540))
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x4, 0x5, 0x1})
socket$phonet(0x23, 0x2, 0x1)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r0, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r0, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r1, 0x0, 0x0)
r2 = dup(r1)
r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0)
ioctl$SIOCX25SDTEFACILITIES(r3, 0x89eb, &(0x7f0000000040)={0xfffe, 0x1e, 0x8000, 0xf2, 0x5, 0x5, 0x5, "79a0aae8dc8f1b3abfc9333f3a0264396bc728bb", "2f6599c992b30ca9e07ae20b78fbaeda230ef8d8"})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_mount_image$bfs(&(0x7f0000000200)='bfs\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

00:39:01 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:39:02 executing program 3:
r0 = socket$inet(0x15, 0x5, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000080)=@srh={0x3c, 0x2, 0x4, 0x1, 0xd1, 0x68, 0x4, [@mcast2]}, 0x18)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r3, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00')
sendmsg$IPVS_CMD_SET_SERVICE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r5, 0x301, 0x0, 0x0, {0x4}}, 0x14}}, 0x0)
sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, r5, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x840}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendto$inet(r0, &(0x7f0000000000)="b9", 0xff97, 0x0, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10)

[  928.271301] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000)
00:39:02 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:39:03 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000100))
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GET_UNIQUE(r5, 0xc0106401, &(0x7f0000000140)={0x0, &(0x7f0000000100)})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r7 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r7, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7)
sendfile(r6, r7, 0x0, 0x20000102000003)

00:39:03 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r4, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)

00:39:03 executing program 3:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r4, &(0x7f00000000c0), 0xe)
setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000040)=0x1, 0x4)
getsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f0000000140)=0x1000, &(0x7f0000000180)=0x2)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
write$FUSE_STATFS(r2, &(0x7f00000000c0)={0x60, 0x0, 0x6, {{0xf0a, 0x9, 0x2, 0x8, 0x4, 0x0, 0xffffd96d, 0x100}}}, 0x60)

00:39:03 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r4, &(0x7f00000000c0), 0xe)
setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000040)=0x1, 0x4)
getsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f0000000140)=0x1000, &(0x7f0000000180)=0x2)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
write$FUSE_STATFS(r2, &(0x7f00000000c0)={0x60, 0x0, 0x6, {{0xf0a, 0x9, 0x2, 0x8, 0x4, 0x0, 0xffffd96d, 0x100}}}, 0x60)

00:39:03 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
ioctl$USBDEVFS_CONNECTINFO(r3, 0x40085511, &(0x7f0000000140))
sendfile(r4, r5, 0x0, 0x20000102000003)
r6 = open(&(0x7f00000000c0)='./file0\x00', 0x103080, 0x0)
ioctl$RNDADDTOENTCNT(r6, 0x40045201, &(0x7f0000000100)=0x9)

00:39:03 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:39:04 executing program 3:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r4, &(0x7f00000000c0), 0xe)
setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000040)=0x1, 0x4)
getsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f0000000140)=0x1000, &(0x7f0000000180)=0x2)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
write$FUSE_STATFS(r2, &(0x7f00000000c0)={0x60, 0x0, 0x6, {{0xf0a, 0x9, 0x2, 0x8, 0x4, 0x0, 0xffffd96d, 0x100}}}, 0x60)

00:39:04 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
ioctl$USBDEVFS_CONNECTINFO(r3, 0x40085511, &(0x7f0000000140))
sendfile(r4, r5, 0x0, 0x20000102000003)
r6 = open(&(0x7f00000000c0)='./file0\x00', 0x103080, 0x0)
ioctl$RNDADDTOENTCNT(r6, 0x40045201, &(0x7f0000000100)=0x9)

00:39:04 executing program 2:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:39:04 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r4, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)

00:39:04 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r8, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:39:04 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x60, 0x8, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x0, 0x10000, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r4, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r4, 0x0)
ioctl$PPPIOCCONNECT(r4, 0x4004743a, &(0x7f00000000c0)=0x1)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)

00:39:05 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r0, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r0, 0x0)
socketpair(0x2b, 0x1, 0x90, &(0x7f00000001c0)={<r1=>0xffffffffffffffff})
recvfrom$l2tp6(r1, &(0x7f0000000480)=""/115, 0x73, 0x0, 0x0, 0x0)
socket$bt_bnep(0x1f, 0x3, 0x4)
recvfrom$netrom(r0, &(0x7f00000000c0)=""/90, 0x5a, 0x0, &(0x7f0000000140)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000300)={0x8, 0x4, 0x4, 0x38820, 0x7, {0x77359400}, {0x1, 0x2, 0x7, 0x0, 0x6, 0xe, "d483ffe3"}, 0x10000, 0x1, @offset=0xc00, 0x401, 0x0, <r6=>0xffffffffffffffff})
ioctl$VIDIOC_G_JPEGCOMP(r6, 0x808c563d, &(0x7f00000003c0))
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r7 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r8 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r8, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r7, 0x4c00, r8)
sendfile(r7, r8, 0x0, 0x20000102000003)

00:39:05 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
ioctl$USBDEVFS_CONNECTINFO(r3, 0x40085511, &(0x7f0000000140))
sendfile(r4, r5, 0x0, 0x20000102000003)
r6 = open(&(0x7f00000000c0)='./file0\x00', 0x103080, 0x0)
ioctl$RNDADDTOENTCNT(r6, 0x40045201, &(0x7f0000000100)=0x9)

00:39:05 executing program 2:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:39:05 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r4, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)

00:39:05 executing program 3:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r4, &(0x7f00000000c0), 0xe)
setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000040)=0x1, 0x4)
getsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f0000000140)=0x1000, &(0x7f0000000180)=0x2)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
write$FUSE_STATFS(r2, &(0x7f00000000c0)={0x60, 0x0, 0x6, {{0xf0a, 0x9, 0x2, 0x8, 0x4, 0x0, 0xffffd96d, 0x100}}}, 0x60)

00:39:05 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r8, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:39:06 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$VIDIOC_G_AUDOUT(r5, 0x80345631, &(0x7f00000000c0))
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r7 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r7, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7)
sendfile(r6, r7, 0x0, 0x20000102000003)

00:39:06 executing program 2:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:39:06 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r4, 0x1)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0)=0xa04, 0x4)
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)

00:39:06 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
dup(r0)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@nobarrier='nobarrier'}]})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r1, 0x0, 0x0)
fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="00fb8a0001412dba2d3b54cbb3d7732cf79b6b71ad5e01ad4cee838589821211f9fffced00312eeef59f3ccd599505156e9d3518d63cb70f01f39067988c4895254546270aaac615e8929834b035e1b02dc6b1c64b70e179070000f9581d143c091f12b63062cb4a602cda2b0cd2a03e8878f5b01a5c9ec82afa0f99163532cf49a8d9f87e81b59b9163"], 0x8a, 0x2)

00:39:06 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r8, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:39:06 executing program 3:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
r4 = msgget$private(0x0, 0x400)
msgrcv(r4, &(0x7f0000000500)=ANY=[], 0x0, 0x3, 0x1000)
msgctl$MSG_STAT(r4, 0xb, &(0x7f00000000c0)=""/132)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x501800, 0x0)
ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f00000003c0)={0x0, 0x0, 0x1, 0x0, [], [{0x6, 0xfffffc00, 0xa7, 0x4, 0xc0, 0x9d}, {0xffff, 0x8, 0xfffffffffffff800, 0x6, 0x734, 0x2}], [[]]})
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r7 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r7, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7)
sendfile(r6, r7, 0x0, 0x20000102000003)

00:39:06 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r4, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)

00:39:07 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
getpeername$netrom(r2, &(0x7f00000000c0)={{0x3, @bcast}, [@bcast, @netrom, @remote, @default, @netrom, @default, @rose, @null]}, &(0x7f0000000140)=0x48)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:39:07 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@nobarrier='nobarrier'}], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}]})
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff}, 0x0)
read$eventfd(r0, &(0x7f0000000040), 0x8)

[  933.218865] hfsplus: unable to parse mount options
00:39:07 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r6, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r6, 0x0)
ioctl$EVIOCGABS2F(r6, 0x8018456f, &(0x7f00000000c0)=""/13)

00:39:07 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r4, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)

00:39:07 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r8, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:39:07 executing program 3:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
r4 = msgget$private(0x0, 0x400)
msgrcv(r4, &(0x7f0000000500)=ANY=[], 0x0, 0x3, 0x1000)
msgctl$MSG_STAT(r4, 0xb, &(0x7f00000000c0)=""/132)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x501800, 0x0)
ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f00000003c0)={0x0, 0x0, 0x1, 0x0, [], [{0x6, 0xfffffc00, 0xa7, 0x4, 0xc0, 0x9d}, {0xffff, 0x8, 0xfffffffffffff800, 0x6, 0x734, 0x2}], [[]]})
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r7 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r7, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7)
sendfile(r6, r7, 0x0, 0x20000102000003)

00:39:08 executing program 2:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r8, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:39:08 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
setsockopt$netrom_NETROM_IDLE(r3, 0x103, 0x7, &(0x7f00000000c0)=0x88cf, 0x4)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r6, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r6, 0x0)
ioctl$EVIOCGSW(r6, 0x8040451b, &(0x7f0000000100)=""/102)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:39:08 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r6, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r6, 0x0)
ioctl$EVIOCGABS2F(r6, 0x8018456f, &(0x7f00000000c0)=""/13)

00:39:08 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r8, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:39:08 executing program 3:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
r4 = msgget$private(0x0, 0x400)
msgrcv(r4, &(0x7f0000000500)=ANY=[], 0x0, 0x3, 0x1000)
msgctl$MSG_STAT(r4, 0xb, &(0x7f00000000c0)=""/132)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x501800, 0x0)
ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f00000003c0)={0x0, 0x0, 0x1, 0x0, [], [{0x6, 0xfffffc00, 0xa7, 0x4, 0xc0, 0x9d}, {0xffff, 0x8, 0xfffffffffffff800, 0x6, 0x734, 0x2}], [[]]})
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r7 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r7, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7)
sendfile(r6, r7, 0x0, 0x20000102000003)

00:39:08 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:39:09 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
getpeername$netrom(r2, &(0x7f00000000c0)={{0x3, @bcast}, [@bcast, @netrom, @remote, @default, @netrom, @default, @rose, @null]}, &(0x7f0000000140)=0x48)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:39:09 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
fcntl$setpipe(r4, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x55f}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)

00:39:09 executing program 3:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
getpeername$netrom(r2, &(0x7f00000000c0)={{0x3, @bcast}, [@bcast, @netrom, @remote, @default, @netrom, @default, @rose, @null]}, &(0x7f0000000140)=0x48)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:39:09 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r8, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:39:09 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r6, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r6, 0x0)
ioctl$EVIOCGABS2F(r6, 0x8018456f, &(0x7f00000000c0)=""/13)

00:39:09 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:39:09 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
getpeername$netrom(r2, &(0x7f00000000c0)={{0x3, @bcast}, [@bcast, @netrom, @remote, @default, @netrom, @default, @rose, @null]}, &(0x7f0000000140)=0x48)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:39:09 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r2, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r2, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r3, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r3, 0x0, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000140)={0xa10000, 0x40000, 0x3f, <r4=>r3, 0x0, &(0x7f0000000100)={0x990a71, 0x3, [], @p_u32=&(0x7f00000000c0)}})
write$eventfd(r4, &(0x7f0000000180)=0x7, 0x8)
pipe(&(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
fcntl$setpipe(r6, 0x407, 0x0)
write(r6, &(0x7f0000000340), 0x41395527)
vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r7 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r8 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r8, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r7, 0x4c00, r8)
sendfile(r7, r8, 0x0, 0x20000102000003)

00:39:10 executing program 3:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
getpeername$netrom(r2, &(0x7f00000000c0)={{0x3, @bcast}, [@bcast, @netrom, @remote, @default, @netrom, @default, @rose, @null]}, &(0x7f0000000140)=0x48)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:39:10 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r6, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r6, 0x0)
ioctl$EVIOCGABS2F(r6, 0x8018456f, &(0x7f00000000c0)=""/13)

00:39:10 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
writev(0xffffffffffffffff, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r7, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:39:10 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:39:10 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
getpeername$netrom(r2, &(0x7f00000000c0)={{0x3, @bcast}, [@bcast, @netrom, @remote, @default, @netrom, @default, @rose, @null]}, &(0x7f0000000140)=0x48)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:39:10 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r0, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r0, 0x0, 0x0)
r1 = dup(r0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
getsockopt$inet_tcp_buf(r1, 0x6, 0x21, &(0x7f0000000100)=""/213, &(0x7f0000000240)=0xd5)
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f00000003c0)="9f274b8b99a6f334c4f161af26fd9db11287c877fd9d0d270b61d3e89045a0ad90c5a893bc50a40d50554eaebe4f5357d839f45cdd8e9b5d34e47a70cc14a116d441d9133aa8da277cf3c48e6d4a4e5ef6ce6932534ba2ae55ab0a4ca0ad9e9ab6369c1e045447ffcaec91246d4a3454f77e5446a272d7f941ec51fb2485d8a44da375374cd14527d9bcce5dec5f95a71a8c09c14622d1d8a3115e8d9262aeebb1bee65d22269a8c24a588d627b58dc60cf7af636b9a01e3ce8fa4323facb3f7c00862c47c5648a94d0ecc8b4088b9ae6887857aabcbd8ce226492d9", 0xdc}], 0x1, 0x3)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r7 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r7, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = dup(r8)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
ioctl$KVM_XEN_HVM_CONFIG(r9, 0x4038ae7a, &(0x7f0000000340)={0x400, 0xa6e, &(0x7f0000000300)="992545fec5c82758783622d56fddef81da3702325bbba75ad96a9fef333d44ccfcde47b1936efb780835cc59effec953467557", &(0x7f00000004c0)="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", 0x33, 0xff})
ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7)
sendfile(r6, r7, 0x0, 0x20000102000003)

00:39:11 executing program 3:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
getpeername$netrom(r2, &(0x7f00000000c0)={{0x3, @bcast}, [@bcast, @netrom, @remote, @default, @netrom, @default, @rose, @null]}, &(0x7f0000000140)=0x48)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:39:11 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
writev(0xffffffffffffffff, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r7, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:39:11 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r6, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r6, 0x0)
ioctl$EVIOCGABS2F(r6, 0x8018456f, &(0x7f00000000c0)=""/13)

00:39:11 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:39:11 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = openat$selinux_context(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/context\x00', 0x2, 0x0)
write(r5, &(0x7f0000000100)="280bb21fb7b5e1e1fa9b1789d9059174d415358837b8fcca9ee461fd95ca55a0837b241d738f51079ce5d4a813a4cdf0b594fc96a377b7f69f316b1f7c873d25ad7bf2d2b6470374ce07fdf8cdce467dc45c95659226a53aa53588e8ffeb11113dff6efb99fbcd4e8e83c69bc48b89638e17da526b8c2195da5fab3ba77cdf779b3d", 0x82)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r6)
sendfile(r4, r6, 0x0, 0x20000102000003)

00:39:11 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r0, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r0, 0x0, 0x0)
r1 = dup(r0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
getsockopt$inet_tcp_buf(r1, 0x6, 0x21, &(0x7f0000000100)=""/213, &(0x7f0000000240)=0xd5)
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f00000003c0)="9f274b8b99a6f334c4f161af26fd9db11287c877fd9d0d270b61d3e89045a0ad90c5a893bc50a40d50554eaebe4f5357d839f45cdd8e9b5d34e47a70cc14a116d441d9133aa8da277cf3c48e6d4a4e5ef6ce6932534ba2ae55ab0a4ca0ad9e9ab6369c1e045447ffcaec91246d4a3454f77e5446a272d7f941ec51fb2485d8a44da375374cd14527d9bcce5dec5f95a71a8c09c14622d1d8a3115e8d9262aeebb1bee65d22269a8c24a588d627b58dc60cf7af636b9a01e3ce8fa4323facb3f7c00862c47c5648a94d0ecc8b4088b9ae6887857aabcbd8ce226492d9", 0xdc}], 0x1, 0x3)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r7 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r7, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = dup(r8)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
ioctl$KVM_XEN_HVM_CONFIG(r9, 0x4038ae7a, &(0x7f0000000340)={0x400, 0xa6e, &(0x7f0000000300)="992545fec5c82758783622d56fddef81da3702325bbba75ad96a9fef333d44ccfcde47b1936efb780835cc59effec953467557", &(0x7f00000004c0)="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", 0x33, 0xff})
ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7)
sendfile(r6, r7, 0x0, 0x20000102000003)

00:39:12 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r6, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r6, 0x0)
ioctl$EVIOCGABS2F(r6, 0x8018456f, &(0x7f00000000c0)=""/13)

00:39:12 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, <r2=>0x0}, &(0x7f0000000380)=0xc)
r3 = getgid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, <r4=>0x0}, &(0x7f0000000400)=0xc)
setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="7b0000588df464447114d3afaf22521692", @ANYRES32=r2, @ANYBLOB='\b\x00', @ANYRES32=r3, @ANYBLOB="080002", @ANYRES32=r4, @ANYBLOB="10000500000000002000060000000000"], 0x9, 0x3)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x10, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}, {@barrier='barrier'}]})
pipe2(&(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x4000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000540)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000440)="8b7470d541afea61e1616861e4fb72b7d065db8235f23eb32acdabdcfedc0384a07cc30e687d35488b0b8ecaea694c41d0ae46f1033b8003386173ab1cfe32feb35f79ffffcd5992b92edb97e20f4d0dfa2e0223bbb4a910d9065977cd32aff938a12c32459b6c4d8d0d91ef74793b5f765c2652dfb53abec190a8cec7007c38582a0ad21cdd682774f200a30abdb07f230bbaf51a1378fb4da444d898a5239ea1b37b401421a31ea0135a3506c73433d7dff08f9dca07f8df78c9a575ce3e99bfa0cec3171be6d8d4553e0fcbeae375aceb49f1d196b5", 0xd7, r5}, 0x68)
r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
fallocate(r6, 0x1, 0x0, 0x369e5d84)
r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000f00)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICLIST(r6, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4814fd3fb8993d746528c284395c7268a97e2055b8d7a4bf1ea506ea052f803d0bdac71fcde8a970bff01ef16d8cb5433e48523021b9c0d8cbb2ae35f70a2a5f5b4eb0e1645a17aa1e8bfcea10dae23364f47ec2f6922d1e8d70b280236b72d687efa73816df2be306ae787ce87b90f0b95df56200b982901c44e91c26a6f560b65408b81b4a0b7c1b41a0c2e542082cb2bc1c3e946d428762d19d9fd718a5954e86ebe02218ad8512cae20c015a000000000000", @ANYRES16=r7, @ANYBLOB="000127bd7000fddbdf250500000014000200fe8000000000000000000000000000aa"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20008000)
sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80202108}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r7, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x10004005)

00:39:12 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
writev(0xffffffffffffffff, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r7, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:39:12 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

[  938.213175] hfsplus: invalid session number or type of track
[  938.219545] hfsplus: unable to find HFS+ superblock
00:39:12 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, <r2=>0x0}, &(0x7f0000000380)=0xc)
r3 = getgid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, <r4=>0x0}, &(0x7f0000000400)=0xc)
setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="7b0000588df464447114d3afaf22521692", @ANYRES32=r2, @ANYBLOB='\b\x00', @ANYRES32=r3, @ANYBLOB="080002", @ANYRES32=r4, @ANYBLOB="10000500000000002000060000000000"], 0x9, 0x3)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x10, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}, {@barrier='barrier'}]})
pipe2(&(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x4000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000540)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000440)="8b7470d541afea61e1616861e4fb72b7d065db8235f23eb32acdabdcfedc0384a07cc30e687d35488b0b8ecaea694c41d0ae46f1033b8003386173ab1cfe32feb35f79ffffcd5992b92edb97e20f4d0dfa2e0223bbb4a910d9065977cd32aff938a12c32459b6c4d8d0d91ef74793b5f765c2652dfb53abec190a8cec7007c38582a0ad21cdd682774f200a30abdb07f230bbaf51a1378fb4da444d898a5239ea1b37b401421a31ea0135a3506c73433d7dff08f9dca07f8df78c9a575ce3e99bfa0cec3171be6d8d4553e0fcbeae375aceb49f1d196b5", 0xd7, r5}, 0x68)
r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
fallocate(r6, 0x1, 0x0, 0x369e5d84)
r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000f00)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICLIST(r6, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4814fd3fb8993d746528c284395c7268a97e2055b8d7a4bf1ea506ea052f803d0bdac71fcde8a970bff01ef16d8cb5433e48523021b9c0d8cbb2ae35f70a2a5f5b4eb0e1645a17aa1e8bfcea10dae23364f47ec2f6922d1e8d70b280236b72d687efa73816df2be306ae787ce87b90f0b95df56200b982901c44e91c26a6f560b65408b81b4a0b7c1b41a0c2e542082cb2bc1c3e946d428762d19d9fd718a5954e86ebe02218ad8512cae20c015a000000000000", @ANYRES16=r7, @ANYBLOB="000127bd7000fddbdf250500000014000200fe8000000000000000000000000000aa"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20008000)
sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80202108}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r7, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x10004005)

00:39:12 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:39:12 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
unshare(0x20000000)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
write$P9_RATTACH(r3, &(0x7f00000000c0)={0x14, 0x69, 0x1, {0x2, 0x0, 0x7}}, 0x14)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
socketpair(0x1d, 0xa, 0x7, &(0x7f0000000140))
sendfile(r4, r5, 0x0, 0x20000102000003)
ioctl$VIDIOC_OVERLAY(r3, 0x4004560e, &(0x7f0000000100)=0x100)

00:39:12 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f00000000c0)={@fixed={[], 0x12}, 0x6, 0x1, 0x5ca6})
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:39:12 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, <r2=>0x0}, &(0x7f0000000380)=0xc)
r3 = getgid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, <r4=>0x0}, &(0x7f0000000400)=0xc)
setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="7b0000588df464447114d3afaf22521692", @ANYRES32=r2, @ANYBLOB='\b\x00', @ANYRES32=r3, @ANYBLOB="080002", @ANYRES32=r4, @ANYBLOB="10000500000000002000060000000000"], 0x9, 0x3)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x10, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}, {@barrier='barrier'}]})
pipe2(&(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x4000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000540)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000440)="8b7470d541afea61e1616861e4fb72b7d065db8235f23eb32acdabdcfedc0384a07cc30e687d35488b0b8ecaea694c41d0ae46f1033b8003386173ab1cfe32feb35f79ffffcd5992b92edb97e20f4d0dfa2e0223bbb4a910d9065977cd32aff938a12c32459b6c4d8d0d91ef74793b5f765c2652dfb53abec190a8cec7007c38582a0ad21cdd682774f200a30abdb07f230bbaf51a1378fb4da444d898a5239ea1b37b401421a31ea0135a3506c73433d7dff08f9dca07f8df78c9a575ce3e99bfa0cec3171be6d8d4553e0fcbeae375aceb49f1d196b5", 0xd7, r5}, 0x68)
r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
fallocate(r6, 0x1, 0x0, 0x369e5d84)
r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000f00)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICLIST(r6, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4814fd3fb8993d746528c284395c7268a97e2055b8d7a4bf1ea506ea052f803d0bdac71fcde8a970bff01ef16d8cb5433e48523021b9c0d8cbb2ae35f70a2a5f5b4eb0e1645a17aa1e8bfcea10dae23364f47ec2f6922d1e8d70b280236b72d687efa73816df2be306ae787ce87b90f0b95df56200b982901c44e91c26a6f560b65408b81b4a0b7c1b41a0c2e542082cb2bc1c3e946d428762d19d9fd718a5954e86ebe02218ad8512cae20c015a000000000000", @ANYRES16=r7, @ANYBLOB="000127bd7000fddbdf250500000014000200fe8000000000000000000000000000aa"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20008000)
sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80202108}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r7, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x10004005)

[  938.694710] hfsplus: invalid session number or type of track
[  938.700829] hfsplus: unable to find HFS+ superblock
[  938.765166] hfsplus: invalid session number or type of track
[  938.772433] hfsplus: unable to find HFS+ superblock
00:39:13 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = openat$selinux_context(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/context\x00', 0x2, 0x0)
write(r5, &(0x7f0000000100)="280bb21fb7b5e1e1fa9b1789d9059174d415358837b8fcca9ee461fd95ca55a0837b241d738f51079ce5d4a813a4cdf0b594fc96a377b7f69f316b1f7c873d25ad7bf2d2b6470374ce07fdf8cdce467dc45c95659226a53aa53588e8ffeb11113dff6efb99fbcd4e8e83c69bc48b89638e17da526b8c2195da5fab3ba77cdf779b3d", 0x82)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r6)
sendfile(r4, r6, 0x0, 0x20000102000003)

00:39:13 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
sendfile(r5, r6, 0x0, 0x20000102000003)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r8, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:39:13 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, <r2=>0x0}, &(0x7f0000000380)=0xc)
r3 = getgid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, <r4=>0x0}, &(0x7f0000000400)=0xc)
setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="7b0000588df464447114d3afaf22521692", @ANYRES32=r2, @ANYBLOB='\b\x00', @ANYRES32=r3, @ANYBLOB="080002", @ANYRES32=r4, @ANYBLOB="10000500000000002000060000000000"], 0x9, 0x3)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x10, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}, {@barrier='barrier'}]})
pipe2(&(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x4000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000540)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000440)="8b7470d541afea61e1616861e4fb72b7d065db8235f23eb32acdabdcfedc0384a07cc30e687d35488b0b8ecaea694c41d0ae46f1033b8003386173ab1cfe32feb35f79ffffcd5992b92edb97e20f4d0dfa2e0223bbb4a910d9065977cd32aff938a12c32459b6c4d8d0d91ef74793b5f765c2652dfb53abec190a8cec7007c38582a0ad21cdd682774f200a30abdb07f230bbaf51a1378fb4da444d898a5239ea1b37b401421a31ea0135a3506c73433d7dff08f9dca07f8df78c9a575ce3e99bfa0cec3171be6d8d4553e0fcbeae375aceb49f1d196b5", 0xd7, r5}, 0x68)
r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
fallocate(r6, 0x1, 0x0, 0x369e5d84)
r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000f00)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICLIST(r6, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4814fd3fb8993d746528c284395c7268a97e2055b8d7a4bf1ea506ea052f803d0bdac71fcde8a970bff01ef16d8cb5433e48523021b9c0d8cbb2ae35f70a2a5f5b4eb0e1645a17aa1e8bfcea10dae23364f47ec2f6922d1e8d70b280236b72d687efa73816df2be306ae787ce87b90f0b95df56200b982901c44e91c26a6f560b65408b81b4a0b7c1b41a0c2e542082cb2bc1c3e946d428762d19d9fd718a5954e86ebe02218ad8512cae20c015a000000000000", @ANYRES16=r7, @ANYBLOB="000127bd7000fddbdf250500000014000200fe8000000000000000000000000000aa"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20008000)

00:39:13 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, <r2=>0x0}, &(0x7f0000000380)=0xc)
r3 = getgid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, <r4=>0x0}, &(0x7f0000000400)=0xc)
setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="7b0000588df464447114d3afaf22521692", @ANYRES32=r2, @ANYBLOB='\b\x00', @ANYRES32=r3, @ANYBLOB="080002", @ANYRES32=r4, @ANYBLOB="10000500000000002000060000000000"], 0x9, 0x3)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x10, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}, {@barrier='barrier'}]})
pipe2(&(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x4000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000540)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000440)="8b7470d541afea61e1616861e4fb72b7d065db8235f23eb32acdabdcfedc0384a07cc30e687d35488b0b8ecaea694c41d0ae46f1033b8003386173ab1cfe32feb35f79ffffcd5992b92edb97e20f4d0dfa2e0223bbb4a910d9065977cd32aff938a12c32459b6c4d8d0d91ef74793b5f765c2652dfb53abec190a8cec7007c38582a0ad21cdd682774f200a30abdb07f230bbaf51a1378fb4da444d898a5239ea1b37b401421a31ea0135a3506c73433d7dff08f9dca07f8df78c9a575ce3e99bfa0cec3171be6d8d4553e0fcbeae375aceb49f1d196b5", 0xd7, r5}, 0x68)
r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
fallocate(r6, 0x1, 0x0, 0x369e5d84)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000f00)='NLBL_UNLBL\x00')

[  939.143885] hfsplus: invalid session number or type of track
[  939.151004] hfsplus: unable to find HFS+ superblock
[  939.390771] hfsplus: invalid session number or type of track
[  939.396900] hfsplus: unable to find HFS+ superblock
00:39:13 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, <r2=>0x0}, &(0x7f0000000380)=0xc)
r3 = getgid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, <r4=>0x0}, &(0x7f0000000400)=0xc)
setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="7b0000588df464447114d3afaf22521692", @ANYRES32=r2, @ANYBLOB='\b\x00', @ANYRES32=r3, @ANYBLOB="080002", @ANYRES32=r4, @ANYBLOB="10000500000000002000060000000000"], 0x9, 0x3)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x10, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}, {@barrier='barrier'}]})
pipe2(&(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x4000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000540)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000440)="8b7470d541afea61e1616861e4fb72b7d065db8235f23eb32acdabdcfedc0384a07cc30e687d35488b0b8ecaea694c41d0ae46f1033b8003386173ab1cfe32feb35f79ffffcd5992b92edb97e20f4d0dfa2e0223bbb4a910d9065977cd32aff938a12c32459b6c4d8d0d91ef74793b5f765c2652dfb53abec190a8cec7007c38582a0ad21cdd682774f200a30abdb07f230bbaf51a1378fb4da444d898a5239ea1b37b401421a31ea0135a3506c73433d7dff08f9dca07f8df78c9a575ce3e99bfa0cec3171be6d8d4553e0fcbeae375aceb49f1d196b5", 0xd7, r5}, 0x68)
r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
fallocate(r6, 0x1, 0x0, 0x369e5d84)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000f00)='NLBL_UNLBL\x00')

00:39:13 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
unshare(0x20000000)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
write$P9_RATTACH(r3, &(0x7f00000000c0)={0x14, 0x69, 0x1, {0x2, 0x0, 0x7}}, 0x14)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
socketpair(0x1d, 0xa, 0x7, &(0x7f0000000140))
sendfile(r4, r5, 0x0, 0x20000102000003)
ioctl$VIDIOC_OVERLAY(r3, 0x4004560e, &(0x7f0000000100)=0x100)

00:39:13 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r4 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r4, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
sendfile(r3, r4, 0x0, 0x20000102000003)

[  939.535861] hfsplus: invalid session number or type of track
[  939.544316] hfsplus: unable to find HFS+ superblock
00:39:13 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, <r2=>0x0}, &(0x7f0000000380)=0xc)
r3 = getgid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, <r4=>0x0}, &(0x7f0000000400)=0xc)
setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="7b0000588df464447114d3afaf22521692", @ANYRES32=r2, @ANYBLOB='\b\x00', @ANYRES32=r3, @ANYBLOB="080002", @ANYRES32=r4, @ANYBLOB="10000500000000002000060000000000"], 0x9, 0x3)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x10, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}, {@barrier='barrier'}]})
pipe2(&(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x4000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000540)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000440)="8b7470d541afea61e1616861e4fb72b7d065db8235f23eb32acdabdcfedc0384a07cc30e687d35488b0b8ecaea694c41d0ae46f1033b8003386173ab1cfe32feb35f79ffffcd5992b92edb97e20f4d0dfa2e0223bbb4a910d9065977cd32aff938a12c32459b6c4d8d0d91ef74793b5f765c2652dfb53abec190a8cec7007c38582a0ad21cdd682774f200a30abdb07f230bbaf51a1378fb4da444d898a5239ea1b37b401421a31ea0135a3506c73433d7dff08f9dca07f8df78c9a575ce3e99bfa0cec3171be6d8d4553e0fcbeae375aceb49f1d196b5", 0xd7, r5}, 0x68)
r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
fallocate(r6, 0x1, 0x0, 0x369e5d84)

00:39:13 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r2, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r2, 0x0, 0x0)
r3 = syz_open_pts(r2, 0x614080)
ioctl$VT_RELDISP(r3, 0x5605)
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x3}, 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x72)
getsockopt$inet6_udp_int(r5, 0x11, 0x66, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r7, 0x1)
getsockopt$bt_hci(r7, 0x0, 0x2, &(0x7f00000003c0)=""/180, &(0x7f0000000180)=0xb4)
r8 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r8, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$KVM_S390_INTERRUPT_CPU(r10, 0x4010ae94, &(0x7f0000000140)={0x1, 0x8, 0x9})
sendfile(r6, r8, 0x0, 0x20000102000003)

[  939.877354] hfsplus: invalid session number or type of track
[  939.894907] hfsplus: unable to find HFS+ superblock
00:39:14 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = openat$selinux_context(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/context\x00', 0x2, 0x0)
write(r5, &(0x7f0000000100)="280bb21fb7b5e1e1fa9b1789d9059174d415358837b8fcca9ee461fd95ca55a0837b241d738f51079ce5d4a813a4cdf0b594fc96a377b7f69f316b1f7c873d25ad7bf2d2b6470374ce07fdf8cdce467dc45c95659226a53aa53588e8ffeb11113dff6efb99fbcd4e8e83c69bc48b89638e17da526b8c2195da5fab3ba77cdf779b3d", 0x82)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r6)
sendfile(r4, r6, 0x0, 0x20000102000003)

00:39:14 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, <r2=>0x0}, &(0x7f0000000380)=0xc)
r3 = getgid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, <r4=>0x0}, &(0x7f0000000400)=0xc)
setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="7b0000588df464447114d3afaf22521692", @ANYRES32=r2, @ANYBLOB='\b\x00', @ANYRES32=r3, @ANYBLOB="080002", @ANYRES32=r4, @ANYBLOB="10000500000000002000060000000000"], 0x9, 0x3)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x10, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}, {@barrier='barrier'}]})
pipe2(&(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x4000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000540)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000440)="8b7470d541afea61e1616861e4fb72b7d065db8235f23eb32acdabdcfedc0384a07cc30e687d35488b0b8ecaea694c41d0ae46f1033b8003386173ab1cfe32feb35f79ffffcd5992b92edb97e20f4d0dfa2e0223bbb4a910d9065977cd32aff938a12c32459b6c4d8d0d91ef74793b5f765c2652dfb53abec190a8cec7007c38582a0ad21cdd682774f200a30abdb07f230bbaf51a1378fb4da444d898a5239ea1b37b401421a31ea0135a3506c73433d7dff08f9dca07f8df78c9a575ce3e99bfa0cec3171be6d8d4553e0fcbeae375aceb49f1d196b5", 0xd7, r5}, 0x68)
r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
fallocate(r6, 0x1, 0x0, 0x369e5d84)

00:39:14 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
sendfile(r5, r6, 0x0, 0x20000102000003)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r8, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

[  940.067200] hfsplus: invalid session number or type of track
[  940.075730] hfsplus: unable to find HFS+ superblock
00:39:14 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
unshare(0x20000000)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
write$P9_RATTACH(r3, &(0x7f00000000c0)={0x14, 0x69, 0x1, {0x2, 0x0, 0x7}}, 0x14)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
socketpair(0x1d, 0xa, 0x7, &(0x7f0000000140))
sendfile(r4, r5, 0x0, 0x20000102000003)
ioctl$VIDIOC_OVERLAY(r3, 0x4004560e, &(0x7f0000000100)=0x100)

00:39:14 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, <r2=>0x0}, &(0x7f0000000380)=0xc)
r3 = getgid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, <r4=>0x0}, &(0x7f0000000400)=0xc)
setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="7b0000588df464447114d3afaf22521692", @ANYRES32=r2, @ANYBLOB='\b\x00', @ANYRES32=r3, @ANYBLOB="080002", @ANYRES32=r4, @ANYBLOB="10000500000000002000060000000000"], 0x9, 0x3)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x10, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}, {@barrier='barrier'}]})
pipe2(&(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x4000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000540)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000440)="8b7470d541afea61e1616861e4fb72b7d065db8235f23eb32acdabdcfedc0384a07cc30e687d35488b0b8ecaea694c41d0ae46f1033b8003386173ab1cfe32feb35f79ffffcd5992b92edb97e20f4d0dfa2e0223bbb4a910d9065977cd32aff938a12c32459b6c4d8d0d91ef74793b5f765c2652dfb53abec190a8cec7007c38582a0ad21cdd682774f200a30abdb07f230bbaf51a1378fb4da444d898a5239ea1b37b401421a31ea0135a3506c73433d7dff08f9dca07f8df78c9a575ce3e99bfa0cec3171be6d8d4553e0fcbeae375aceb49f1d196b5", 0xd7, r5}, 0x68)
creat(&(0x7f0000000080)='./file0\x00', 0x0)

00:39:14 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r4 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r4, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
sendfile(r3, r4, 0x0, 0x20000102000003)

[  940.579822] hfsplus: invalid session number or type of track
[  940.673546] hfsplus: unable to find HFS+ superblock
00:39:14 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = openat$selinux_context(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/context\x00', 0x2, 0x0)
write(r5, &(0x7f0000000100)="280bb21fb7b5e1e1fa9b1789d9059174d415358837b8fcca9ee461fd95ca55a0837b241d738f51079ce5d4a813a4cdf0b594fc96a377b7f69f316b1f7c873d25ad7bf2d2b6470374ce07fdf8cdce467dc45c95659226a53aa53588e8ffeb11113dff6efb99fbcd4e8e83c69bc48b89638e17da526b8c2195da5fab3ba77cdf779b3d", 0x82)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r6)
sendfile(r4, r6, 0x0, 0x20000102000003)

00:39:14 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
sendfile(r5, r6, 0x0, 0x20000102000003)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r8, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:39:15 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, <r2=>0x0}, &(0x7f0000000380)=0xc)
r3 = getgid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, <r4=>0x0}, &(0x7f0000000400)=0xc)
setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="7b0000588df464447114d3afaf22521692", @ANYRES32=r2, @ANYBLOB='\b\x00', @ANYRES32=r3, @ANYBLOB="080002", @ANYRES32=r4, @ANYBLOB="10000500000000002000060000000000"], 0x9, 0x3)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x10, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}, {@barrier='barrier'}]})
pipe2(&(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x4000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000540)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000440)="8b7470d541afea61e1616861e4fb72b7d065db8235f23eb32acdabdcfedc0384a07cc30e687d35488b0b8ecaea694c41d0ae46f1033b8003386173ab1cfe32feb35f79ffffcd5992b92edb97e20f4d0dfa2e0223bbb4a910d9065977cd32aff938a12c32459b6c4d8d0d91ef74793b5f765c2652dfb53abec190a8cec7007c38582a0ad21cdd682774f200a30abdb07f230bbaf51a1378fb4da444d898a5239ea1b37b401421a31ea0135a3506c73433d7dff08f9dca07f8df78c9a575ce3e99bfa0cec3171be6d8d4553e0fcbeae375aceb49f1d196b5", 0xd7, r5}, 0x68)

[  941.233169] hfsplus: invalid session number or type of track
[  941.251313] hfsplus: unable to find HFS+ superblock
00:39:15 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, <r2=>0x0}, &(0x7f0000000380)=0xc)
r3 = getgid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, <r4=>0x0}, &(0x7f0000000400)=0xc)
setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="7b0000588df464447114d3afaf22521692", @ANYRES32=r2, @ANYBLOB='\b\x00', @ANYRES32=r3, @ANYBLOB="080002", @ANYRES32=r4, @ANYBLOB="10000500000000002000060000000000"], 0x9, 0x3)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x10, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}, {@barrier='barrier'}]})
pipe2(&(0x7f00000002c0), 0x4000)

00:39:15 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r4 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r4, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
sendfile(r3, r4, 0x0, 0x20000102000003)

00:39:15 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r4 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r4, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
sendfile(r3, r4, 0x0, 0x20000102000003)

[  941.467279] hfsplus: invalid session number or type of track
[  941.483231] hfsplus: unable to find HFS+ superblock
00:39:15 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, <r2=>0x0}, &(0x7f0000000380)=0xc)
r3 = getgid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, <r4=>0x0}, &(0x7f0000000400)=0xc)
setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="7b0000588df464447114d3afaf22521692", @ANYRES32=r2, @ANYBLOB='\b\x00', @ANYRES32=r3, @ANYBLOB="080002", @ANYRES32=r4, @ANYBLOB="10000500000000002000060000000000"], 0x9, 0x3)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x10, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}, {@barrier='barrier'}]})

[  941.682667] hfsplus: invalid session number or type of track
[  941.696376] hfsplus: unable to find HFS+ superblock
00:39:15 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f0000000380)=0xc)
getgid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x10, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}, {@barrier='barrier'}]})

00:39:15 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r4 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r4, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
sendfile(r3, r4, 0x0, 0x20000102000003)

00:39:15 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r8, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

[  941.862268] hfsplus: invalid session number or type of track
[  941.876260] hfsplus: unable to find HFS+ superblock
00:39:16 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f0000000380)=0xc)
getgid()
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x10, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}, {@barrier='barrier'}]})

00:39:16 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = dup(r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00')
sendmsg$DEVLINK_CMD_PORT_SET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002700)={0x14, r9, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)
sendmsg$DEVLINK_CMD_PORT_SET(r7, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x124, r9, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}]}, 0x124}, 0x1, 0x0, 0x0, 0x40000}, 0x2000080)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

[  942.212183] hfsplus: invalid session number or type of track
[  942.227574] hfsplus: unable to find HFS+ superblock
00:39:16 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f0000000380)=0xc)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x10, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}, {@barrier='barrier'}]})

00:39:16 executing program 2:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
sendfile(r5, r6, 0x0, 0x20000102000003)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r8, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:39:16 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r4, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)

[  942.630498] hfsplus: invalid session number or type of track
[  942.646957] hfsplus: unable to find HFS+ superblock
00:39:16 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, <r2=>0x0}, &(0x7f0000000380)=0xc)
r3 = getgid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, <r4=>0x0}, &(0x7f0000000400)=0xc)
setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="7b0000588df464447114d3afaf22521692", @ANYRES32=r2, @ANYBLOB='\b\x00', @ANYRES32=r3, @ANYBLOB="080002", @ANYRES32=r4, @ANYBLOB="10000500000000002000060000000000"], 0x9, 0x3)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x10, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}, {@barrier='barrier'}]})
pipe2(&(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x4000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000540)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000440)="8b7470d541afea61e1616861e4fb72b7d065db8235f23eb32acdabdcfedc0384a07cc30e687d35488b0b8ecaea694c41d0ae46f1033b8003386173ab1cfe32feb35f79ffffcd5992b92edb97e20f4d0dfa2e0223bbb4a910d9065977cd32aff938a12c32459b6c4d8d0d91ef74793b5f765c2652dfb53abec190a8cec7007c38582a0ad21cdd682774f200a30abdb07f230bbaf51a1378fb4da444d898a5239ea1b37b401421a31ea0135a3506c73433d7dff08f9dca07f8df78c9a575ce3e99bfa0cec3171be6d8d4553e0fcbeae375aceb49f1d196b5", 0xd7, r5}, 0x68)
r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
fallocate(r6, 0x1, 0x0, 0x369e5d84)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000f00)='NLBL_UNLBL\x00')

00:39:16 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r8, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:39:16 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f0000000380)=0xc)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x10, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}, {@barrier='barrier'}]})

00:39:17 executing program 0:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r8, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

[  943.006580] hfsplus: invalid session number or type of track
[  943.035330] hfsplus: unable to find HFS+ superblock
00:39:17 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x10, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}, {@barrier='barrier'}]})

00:39:17 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r0 = gettid()
tkill(r0, 0x1000000000016)
r1 = getpgid(r0)
prlimit64(r1, 0xf, &(0x7f0000000100)={0x8000000004, 0x5ab}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)="372887abf140d5b19e70065c084d5547c24b9ea30cb297b1690a429c0fa672e255dfbdb4e5a608990db8aa5938e9f803eac95053fb883c5113b916e419f53744faf754ecf94d7b7905c23ec209e18123070a40d3c9424d2e8deb761c3b72b2f1f893e833ad2801b6df300de8877b5567a647ac781ea64a51020e8de0bde3ebb88830f5dc8a898650126f9392d2e7e2603593dadecdf7cb0ff42ac8fcc4a492d2346bacc05ee9cfc971cae733dda5da0eafc6fd80831c93f24fea4d4875f88ea28f3ae2f421a9b9f87c43baafc9f1da840e85807b86", 0xd5)
write$P9_RREADLINK(r7, 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000000c0)=0x60010)
r8 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r8, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r8)
sendfile(r6, r8, 0x0, 0x20000102000003)

00:39:17 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = dup(r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00')
sendmsg$DEVLINK_CMD_PORT_SET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002700)={0x14, r9, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)
sendmsg$DEVLINK_CMD_PORT_SET(r7, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x124, r9, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}]}, 0x124}, 0x1, 0x0, 0x0, 0x40000}, 0x2000080)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

[  943.410574] hfsplus: invalid session number or type of track
[  943.417048] hfsplus: unable to find HFS+ superblock
00:39:17 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
dup(r0)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x10, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}, {@barrier='barrier'}]})

00:39:17 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r4, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)

[  943.535406] hfsplus: invalid session number or type of track
[  943.546230] hfsplus: unable to find HFS+ superblock
00:39:17 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
dup(r0)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x10, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}, {@barrier='barrier'}]})

00:39:17 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r8, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:39:17 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = openat$selinux_context(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/context\x00', 0x2, 0x0)
write(r5, &(0x7f0000000100)="280bb21fb7b5e1e1fa9b1789d9059174d415358837b8fcca9ee461fd95ca55a0837b241d738f51079ce5d4a813a4cdf0b594fc96a377b7f69f316b1f7c873d25ad7bf2d2b6470374ce07fdf8cdce467dc45c95659226a53aa53588e8ffeb11113dff6efb99fbcd4e8e83c69bc48b89638e17da526b8c2195da5fab3ba77cdf779b3d", 0x82)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r6)
sendfile(r4, r6, 0x0, 0x20000102000003)

[  943.901210] hfsplus: invalid session number or type of track
[  943.907190] hfsplus: unable to find HFS+ superblock
00:39:18 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
dup(r0)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x10, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}, {@barrier='barrier'}]})

[  944.178723] hfsplus: invalid session number or type of track
[  944.196727] hfsplus: unable to find HFS+ superblock
00:39:18 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x10, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}, {@barrier='barrier'}]})

00:39:18 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = dup(r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00')
sendmsg$DEVLINK_CMD_PORT_SET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002700)={0x14, r9, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)
sendmsg$DEVLINK_CMD_PORT_SET(r7, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x124, r9, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}]}, 0x124}, 0x1, 0x0, 0x0, 0x40000}, 0x2000080)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

[  944.269062] hfsplus: invalid session number or type of track
[  944.277143] hfsplus: unable to find HFS+ superblock
00:39:18 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x10, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}, {@barrier='barrier'}]})

00:39:18 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r4, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)

[  944.391737] hfsplus: invalid session number or type of track
[  944.397617] hfsplus: unable to find HFS+ superblock
00:39:20 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
pwritev(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, 0xffffffffffffffff)
sendfile(r5, 0xffffffffffffffff, 0x0, 0x20000102000003)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r6, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r6, 0x0)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r7, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:39:20 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x10, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}, {@barrier='barrier'}]})

00:39:20 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x10, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}, {@barrier='barrier'}]})

00:39:20 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = dup(r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00')
sendmsg$DEVLINK_CMD_PORT_SET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002700)={0x14, r9, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)
sendmsg$DEVLINK_CMD_PORT_SET(r7, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x124, r9, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}]}, 0x124}, 0x1, 0x0, 0x0, 0x40000}, 0x2000080)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:39:20 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:39:20 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
setsockopt$sock_void(r0, 0x1, 0x0, 0x0, 0x0)
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x80000000000003, 0x0, 0x0, 0x4000000}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r6=>0x0}, &(0x7f0000cab000)=0xc)
setuid(r6)
r7 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r8=>0x0}, &(0x7f0000cab000)=0xc)
setuid(r8)
syz_mount_image$f2fs(&(0x7f00000000c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x100, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="3a349fd0bd05ad9fbe01cf59bc266a83c07ea560ab0d59f8b1fcfd690756a7d4d8ccaaba0c0fe21c90601379bbd62d1dce034488941dfd97a94b39ba29ffd770c071776db3ad8145e150cf147ff0b7faa5467332d66f8e6280631710dfd98d5e75d7c76092443dd1b58f4eeb6985ee2f4885fd5e6c5a35abf63ea0359e96ae42f639b1b031a606535f68d34985a1f6cc65412034b8ce4af56f5dccfc7dd13f21472015b06c7e4d0660d656aedca8d8539b768e6d22b75268854fd8ebfa0bf7fd88871b3d303d8dc1b518666be8cd82c4", 0xd0}], 0x11, &(0x7f00000004c0)={[{@noquota='noquota'}, {@background_gc_sync='background_gc=sync'}], [{@subj_user={'subj_user'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/loop#\x00'}}, {@fowner_lt={'fowner<', r6}}, {@fowner_eq={'fowner', 0x3d, r8}}, {@context={'context', 0x3d, 'user_u'}}, {@appraise_type='appraise_type=imasig'}, {@fsmagic={'fsmagic', 0x3d, 0x29b}}]})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r9 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
open(&(0x7f0000000180)='./file0/file0\x00', 0x40, 0x12)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r10, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r10, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, 0x2, 0x3, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x18}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x20}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x15}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r11 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r11, &(0x7f0000000140), 0x0, 0x4)
ioctl$LOOP_CHANGE_FD(r9, 0x4c00, r11)
sendfile(r9, r11, 0x0, 0x20000102000003)

00:39:20 executing program 3:
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x10, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}, {@barrier='barrier'}]})

[  946.428548] hfsplus: invalid session number or type of track
[  946.436598] hfsplus: invalid session number or type of track
[  946.443539] hfsplus: unable to find HFS+ superblock
[  946.449739] hfsplus: unable to find HFS+ superblock
00:39:20 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x10, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}, {@barrier='barrier'}]})

[  946.704115] hfsplus: invalid session number or type of track
[  946.710299] hfsplus: unable to find HFS+ superblock
00:39:20 executing program 3:
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x10, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}, {@barrier='barrier'}]})

00:39:20 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r4, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)

[  946.872283] hfsplus: invalid session number or type of track
[  946.898583] hfsplus: unable to find HFS+ superblock
00:39:21 executing program 3:
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x10, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}, {@barrier='barrier'}]})

00:39:21 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
pwritev(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, 0xffffffffffffffff)
sendfile(r5, 0xffffffffffffffff, 0x0, 0x20000102000003)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r6, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r6, 0x0)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r7, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:39:21 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = openat$selinux_context(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/context\x00', 0x2, 0x0)
write(r5, &(0x7f0000000100)="280bb21fb7b5e1e1fa9b1789d9059174d415358837b8fcca9ee461fd95ca55a0837b241d738f51079ce5d4a813a4cdf0b594fc96a377b7f69f316b1f7c873d25ad7bf2d2b6470374ce07fdf8cdce467dc45c95659226a53aa53588e8ffeb11113dff6efb99fbcd4e8e83c69bc48b89638e17da526b8c2195da5fab3ba77cdf779b3d", 0x82)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r6)
sendfile(r4, r6, 0x0, 0x20000102000003)

00:39:21 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

[  947.271131] hfsplus: invalid session number or type of track
[  947.296327] hfsplus: unable to find HFS+ superblock
00:39:21 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xa, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:39:21 executing program 3:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x10, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}, {@barrier='barrier'}]})

[  947.445786] hfsplus: invalid session number or type of track
[  947.452821] hfsplus: unable to find HFS+ superblock
00:39:21 executing program 3:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x10, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}, {@barrier='barrier'}]})

00:39:21 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

[  947.774603] hfsplus: invalid session number or type of track
[  947.802129] hfsplus: unable to find HFS+ superblock
00:39:21 executing program 3:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x10, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}, {@barrier='barrier'}]})

[  947.952785] hfsplus: invalid session number or type of track
[  947.985150] hfsplus: unable to find HFS+ superblock
00:39:22 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x10, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}, {@barrier='barrier'}]})

00:39:22 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
pwritev(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, 0xffffffffffffffff)
sendfile(r5, 0xffffffffffffffff, 0x0, 0x20000102000003)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r6, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r6, 0x0)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r7, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:39:22 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = openat$selinux_context(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/context\x00', 0x2, 0x0)
write(r5, &(0x7f0000000100)="280bb21fb7b5e1e1fa9b1789d9059174d415358837b8fcca9ee461fd95ca55a0837b241d738f51079ce5d4a813a4cdf0b594fc96a377b7f69f316b1f7c873d25ad7bf2d2b6470374ce07fdf8cdce467dc45c95659226a53aa53588e8ffeb11113dff6efb99fbcd4e8e83c69bc48b89638e17da526b8c2195da5fab3ba77cdf779b3d", 0x82)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r6)
sendfile(r4, r6, 0x0, 0x20000102000003)

00:39:22 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

[  948.302576] hfsplus: invalid session number or type of track
[  948.440989] hfsplus: unable to find HFS+ superblock
00:39:22 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x21, 0x8, 0x5, 0x0, 0x0, 0x0, 0x7ff}, 0x0)
r2 = syz_open_procfs(r1, &(0x7f0000000540)='net/dev_mcast\x00')
r3 = openat(r2, &(0x7f0000000500)='./file0\x00', 0x200000, 0xe5)
setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000000300)={0xf240, 0x6, 0x1ca5}, 0xc)
r4 = socket$inet6(0xa, 0x1, 0x3)
recvmmsg(r4, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ftruncate(r5, 0x1f)
fcntl$setpipe(r6, 0x407, 0x0)
r7 = socket$tipc(0x1e, 0x5, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r7, 0x800c6613, &(0x7f00000000c0)=@v1={0x0, @aes256, 0x8, "142fea93c1614c54"})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = dup(r8)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
ioctl$IMGETCOUNT(r9, 0x80044943, &(0x7f0000000100))
ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)=0x1)
write(r6, &(0x7f0000000340), 0x41395527)
vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
r10 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm-control\x00', 0x1e5983, 0x0)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r11, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r11, 0x0)
ioctl$NS_GET_OWNER_UID(r11, 0xb704, &(0x7f00000003c0)=<r12=>0x0)
r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r13, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r13, 0x0, 0x0)
fstat(r13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0})
write$FUSE_ATTR(r10, &(0x7f0000000480)={0x78, 0xfffffffffffffffe, 0x4, {0x5, 0x5, 0x0, {0x5, 0x4, 0x8, 0xd4, 0x8000, 0x2, 0x0, 0x40000000, 0xfffffff8, 0xffff31e3, 0x8, r12, r14, 0x401, 0x7}}}, 0x78)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r15 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r16 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)
pwritev(r16, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r15, 0x4c00, r16)
sendfile(r15, r16, 0x0, 0x20000102000003)

00:39:22 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x10, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}, {@barrier='barrier'}]})

00:39:22 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
unshare(0x20000000)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
write$P9_RATTACH(r3, &(0x7f00000000c0)={0x14, 0x69, 0x1, {0x2, 0x0, 0x7}}, 0x14)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
socketpair(0x1d, 0xa, 0x7, &(0x7f0000000140))
sendfile(r4, r5, 0x0, 0x20000102000003)
ioctl$VIDIOC_OVERLAY(r3, 0x4004560e, &(0x7f0000000100)=0x100)

[  948.756871] hfsplus: invalid session number or type of track
[  948.767939] hfsplus: unable to find HFS+ superblock
00:39:22 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x10, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}, {@barrier='barrier'}]})

00:39:23 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r5)
sendfile(0xffffffffffffffff, r5, 0x0, 0x20000102000003)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r6, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r6, 0x0)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r7, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:39:23 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = socket$inet(0x2, 0x4000000805, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
r7 = dup3(r5, r6, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, <r8=>0x0]}, &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0xe, &(0x7f000059aff8)={r8}, &(0x7f000034f000)=0x2059b38b)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000000c0)={<r9=>r8, 0xa7, "a609e513ed922aa90eb0703b0679134571dd0dd98f7ed8d6d00f2dc506fd16902110ba605c9e2acdab3f1cd8ba3e3d0ae760d0c09c2039ad480370d8facbd497d88d070365d2796394e857b9c96bbf3cf40ea66c02a9d8e5905dacf53156551e6303bfc860bdb22f030f49c421a8f24e8d5a79283db175100c24f5f2ec254c528ce4c6e75988baa6b0d8adc6ae9694ebb31d34f70d1ed7b33259fe20b08480237e69b1caf0213f"}, &(0x7f0000000180)=0xaf)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000001c0)={r9, 0x8001}, 0x8)
r10 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r10, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r10)
sendfile(r4, r10, 0x0, 0x20000102000003)

00:39:23 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = openat$selinux_context(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/context\x00', 0x2, 0x0)
write(r5, &(0x7f0000000100)="280bb21fb7b5e1e1fa9b1789d9059174d415358837b8fcca9ee461fd95ca55a0837b241d738f51079ce5d4a813a4cdf0b594fc96a377b7f69f316b1f7c873d25ad7bf2d2b6470374ce07fdf8cdce467dc45c95659226a53aa53588e8ffeb11113dff6efb99fbcd4e8e83c69bc48b89638e17da526b8c2195da5fab3ba77cdf779b3d", 0x82)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r6)
sendfile(r4, r6, 0x0, 0x20000102000003)

[  949.152156] hfsplus: invalid session number or type of track
[  949.163377] hfsplus: unable to find HFS+ superblock
00:39:23 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:39:23 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540))
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x10, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}, {@barrier='barrier'}]})

[  949.285089] hfsplus: invalid session number or type of track
[  949.293222] hfsplus: unable to find HFS+ superblock
00:39:23 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540))
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x10, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}, {@barrier='barrier'}]})

00:39:23 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

[  949.615680] hfsplus: invalid session number or type of track
[  949.621995] hfsplus: unable to find HFS+ superblock
00:39:23 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540))
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x10, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}, {@barrier='barrier'}]})

[  949.763601] hfsplus: invalid session number or type of track
[  949.781262] hfsplus: unable to find HFS+ superblock
00:39:23 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x10, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}, {@barrier='barrier'}]})

[  949.947290] hfsplus: invalid session number or type of track
[  949.981519] hfsplus: unable to find HFS+ superblock
00:39:24 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r5)
sendfile(0xffffffffffffffff, r5, 0x0, 0x20000102000003)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r6, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r6, 0x0)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r7, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:39:24 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540))
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x10, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}, {@barrier='barrier'}]})

00:39:24 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x10, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}, {@barrier='barrier'}]})

00:39:24 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:39:24 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f00000003c0)={0x0, [[0xa8, 0x6a88d3fb, 0x401, 0x3, 0x92, 0x0, 0x78, 0x20], [0x8, 0x5, 0x0, 0x100, 0x1f, 0x3, 0x9, 0x4], [0xfff, 0x1, 0x0, 0x2, 0x726, 0x1, 0xbf6]], [], [{0x3, 0xc9a, 0x0, 0x1, 0x0, 0x1}, {0xab2, 0x7, 0x1, 0x1, 0x1}, {0x7, 0x5, 0x1, 0x0, 0x0, 0x1}, {0x9, 0x100, 0x0, 0x1, 0x1, 0x1}, {0x4c, 0x1000, 0x1, 0x0, 0x0, 0x1}, {0x6, 0x7ff, 0x0, 0x1, 0x0, 0x1}, {0xffff, 0x10000}, {0x72, 0x100, 0x1, 0x1, 0x1, 0x1}, {0x3, 0x51d3, 0x1, 0x1, 0x1, 0x1}, {0x20, 0x3ff, 0x1, 0x0, 0x1}, {0x30, 0x3, 0x0, 0x0, 0x1, 0x1}, {0xfffffffe, 0x2d34, 0x0, 0x0, 0x1}], [], 0xfff})
pipe(&(0x7f0000000780)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x100, 0x0)
ioctl$TUNGETSNDBUF(r6, 0x800454d3, &(0x7f0000000180))
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r7 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r8 = memfd_create(&(0x7f0000000380)='\x06\x01\x00\x01\x00\x00\x00\x00\x00\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r9, 0x1)
accept$inet6(r9, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000300)=0x1c)
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x4000)
write$P9_RREADLINK(r10, &(0x7f0000000200)=ANY=[@ANYBLOB="10005d0000000100fb9228b5058ca36e836fea7f00000000696c6530"], 0x10)
pwritev(r8, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r7, 0x4c00, r8)
openat$cgroup_procs(r3, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0)
sendfile(r7, r8, 0x0, 0x20000102000003)

[  950.231390] hfsplus: invalid session number or type of track
[  950.251817] hfsplus: invalid session number or type of track
[  950.257650] hfsplus: unable to find HFS+ superblock
[  950.267506] hfsplus: unable to find HFS+ superblock
00:39:24 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f00000003c0)={{0x9, 0x6}, 'port1\x00', 0x50, 0xa0000, 0x8, 0x7fff, 0x80, 0x7ff, 0x7ff, 0x0, 0x6})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
read$midi(r4, &(0x7f00000000c0)=""/139, 0x8b)
pipe(&(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
fcntl$setpipe(r6, 0x407, 0x0)
write(r6, &(0x7f0000000340), 0x41395527)
vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r7 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r8 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r8, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r7, 0x4c00, r8)
sendfile(r7, r8, 0x0, 0x20000102000003)

00:39:24 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x10, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}, {@barrier='barrier'}]})

00:39:24 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540))
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x10, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}, {@barrier='barrier'}]})

[  950.560325] hfsplus: invalid session number or type of track
[  950.592802] hfsplus: unable to find HFS+ superblock
[  950.625703] hfsplus: invalid session number or type of track
[  950.656054] hfsplus: unable to find HFS+ superblock
00:39:24 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0x1, &(0x7f0000000280)={0xc, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r5, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r5, 0x0)
read$snddsp(r5, &(0x7f00000003c0)=""/4096, 0x1000)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r6)
r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$UI_GET_VERSION(r7, 0x8004552d, 0xfffffffffffffffd)
sendfile(r4, r6, 0x0, 0x20000102000003)

00:39:24 executing program 0:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
pwritev(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, 0xffffffffffffffff)
sendfile(r5, 0xffffffffffffffff, 0x0, 0x20000102000003)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r6, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r6, 0x0)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r7, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:39:24 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x10, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}, {@barrier='barrier'}]})

00:39:24 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540))
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x10, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}, {@barrier='barrier'}]})

[  950.860842] hfsplus: invalid session number or type of track
[  950.876741] hfsplus: invalid session number or type of track
[  950.902924] hfsplus: unable to find HFS+ superblock
[  950.908820] hfsplus: unable to find HFS+ superblock
00:39:25 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x10, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}, {@barrier='barrier'}]})

00:39:25 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r5)
sendfile(0xffffffffffffffff, r5, 0x0, 0x20000102000003)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r6, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r6, 0x0)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r7, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:39:25 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540))
dup(0xffffffffffffffff)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x10, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}, {@barrier='barrier'}]})

00:39:25 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r4 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r4, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
sendfile(r3, r4, 0x0, 0x20000102000003)

00:39:25 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
ioctl$SIOCAX25ADDFWD(r3, 0x89ea, &(0x7f00000000c0)={@bcast, @default})
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000100)={0x1e, 0x37, 0x2, {0x2, 0x100, 0x7, 0xffffffffffffffff}}, 0x1e)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r6, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r6, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r6, 0x2405, r8)
sendfile(r4, r5, 0x0, 0x20000102000003)

[  951.242229] hfsplus: invalid session number or type of track
[  951.249945] hfsplus: unable to find HFS+ superblock
00:39:25 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540))
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x10, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}, {@barrier='barrier'}]})

[  951.287841] hfsplus: invalid session number or type of track
[  951.315836] hfsplus: unable to find HFS+ superblock
00:39:25 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x10, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}, {@barrier='barrier'}]})

[  951.583834] hfsplus: invalid session number or type of track
[  951.602643] hfsplus: unable to find HFS+ superblock
00:39:25 executing program 0:
r0 = socket$inet(0x15, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
sendto$inet(r0, &(0x7f0000000000)="b9", 0xff97, 0x0, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10)

[  951.628888] hfsplus: invalid session number or type of track
00:39:25 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x10, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}, {@barrier='barrier'}]})

[  951.697646] hfsplus: unable to find HFS+ superblock
00:39:25 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x10, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}, {@barrier='barrier'}]})

00:39:25 executing program 0:
r0 = socket$inet(0x15, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
sendto$inet(r0, &(0x7f0000000000)="b9", 0xff97, 0x0, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10)

[  951.746326] hfsplus: invalid session number or type of track
[  951.755523] hfsplus: unable to find HFS+ superblock
00:39:25 executing program 2:
syz_mount_image$hfsplus(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x10, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}, {@barrier='barrier'}]})

00:39:25 executing program 0:
r0 = socket$inet(0x15, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
sendto$inet(r0, &(0x7f0000000000)="b9", 0xff97, 0x0, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10)

00:39:26 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r8, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:39:26 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x10, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}, {@barrier='barrier'}]})

00:39:26 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r4 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r4, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
sendfile(r3, r4, 0x0, 0x20000102000003)

00:39:26 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x10, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}, {@barrier='barrier'}]})

00:39:26 executing program 0:
socket$inet(0x15, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)

00:39:26 executing program 2:
syz_mount_image$hfsplus(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x10, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}, {@barrier='barrier'}]})

00:39:26 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
getpid()
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:39:26 executing program 0:
socket$inet(0x15, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)

00:39:26 executing program 0:
socket$inet(0x15, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
dup(r3)

00:39:26 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', 0x0, 0x7, 0x0, 0x0, 0x10, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}, {@barrier='barrier'}]})

00:39:26 executing program 2:
syz_mount_image$hfsplus(0x0, &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x10, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}, {@barrier='barrier'}]})

00:39:26 executing program 0:
socket$inet(0x15, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540))

00:39:26 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', 0x0, 0x7, 0x0, 0x0, 0x10, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}, {@barrier='barrier'}]})

00:39:26 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', 0x0, 0x7, 0x0, 0x0, 0x10, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}, {@barrier='barrier'}]})

00:39:27 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r8, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:39:27 executing program 0:
socket$inet(0x15, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

00:39:27 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', 0x0, 0x7, 0x0, 0x0, 0x10, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}, {@barrier='barrier'}]})

00:39:27 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r4 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r4, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
sendfile(r3, r4, 0x0, 0x20000102000003)

00:39:27 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r3, &(0x7f00000000c0)="f38bb195c6c9e4fd0d6dd8eca05a1ee726fa9feac16c7f10ef9a794fcbae45719cba8d48173f2c3d42fa4f44cf91f8c649ff93715c60528cbc5bdd0d9ad5976ea1ac19cd8070"}, 0x20)
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000000140), 0x0, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:39:27 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', 0x0, 0x7, 0x0, 0x0, 0x10, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}, {@barrier='barrier'}]})

00:39:27 executing program 0:
socket$inet(0x15, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

00:39:27 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', 0x0, 0x7, 0x0, 0x0, 0x10, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}, {@barrier='barrier'}]})

00:39:27 executing program 0:
socket$inet(0x15, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

00:39:27 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x10, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}, {@barrier='barrier'}]})

00:39:27 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x10, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}, {@barrier='barrier'}]})

00:39:27 executing program 0:
socket$inet(0x15, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

[  953.793351] hfsplus: invalid session number or type of track
[  953.812336] hfsplus: invalid session number or type of track
[  953.828675] hfsplus: unable to find HFS+ superblock
[  953.831102] hfsplus: unable to find HFS+ superblock
00:39:28 executing program 0:
socket$inet(0x15, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
dup(r0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

00:39:28 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}, {@barrier='barrier'}]})

00:39:28 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r4 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r4, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
sendfile(r3, r4, 0x0, 0x20000102000003)

00:39:28 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r8, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

[  954.067707] hfsplus: invalid session number or type of track
[  954.106983] hfsplus: unable to find HFS+ superblock
00:39:28 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}, {@barrier='barrier'}]})

00:39:28 executing program 0:
socket$inet(0x15, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
dup(r0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

00:39:28 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

[  954.207764] hfsplus: invalid session number or type of track
[  954.232945] hfsplus: unable to find HFS+ superblock
00:39:28 executing program 0:
socket$inet(0x15, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
dup(r0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

[  954.456826] hfsplus: unable to find HFS+ superblock
00:39:28 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

00:39:28 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

00:39:28 executing program 0:
socket$inet(0x15, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

[  954.600484] hfsplus: unable to find HFS+ superblock
00:39:28 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

00:39:28 executing program 0:
socket$inet(0x15, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

[  954.680195] hfsplus: unable to find HFS+ superblock
[  954.721647] hfsplus: unable to find HFS+ superblock
00:39:28 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

[  954.865222] hfsplus: unable to find HFS+ superblock
00:39:29 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r4 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r4, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
sendfile(r3, r4, 0x0, 0x20000102000003)

00:39:29 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

00:39:29 executing program 0:
socket$inet(0x15, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

00:39:29 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}]})

00:39:29 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r6, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r6, 0x0)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r7, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:39:29 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000000d40)=[{{&(0x7f00000003c0)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000440), 0x0, &(0x7f0000000480)=""/85, 0x55}, 0x1}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000500)=""/146, 0x92}, {&(0x7f00000005c0)=""/162, 0xa2}], 0x2, &(0x7f00000006c0)=""/178, 0xb2}, 0xfff}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000000780)=""/217, 0xd9}, {&(0x7f0000000880)=""/109, 0x6d}, {&(0x7f0000000900)=""/115, 0x73}, {&(0x7f0000000980)=""/167, 0xa7}, {&(0x7f0000000a40)=""/58, 0x3a}, {&(0x7f0000000a80)=""/234, 0xea}, {&(0x7f0000000b80)=""/90, 0x5a}, {&(0x7f0000000c00)=""/102, 0x66}], 0x9}, 0x4}], 0x3, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = gettid()
tkill(r3, 0x1000000000016)
sched_setaffinity(r3, 0x8, &(0x7f00000000c0)=0xc000000000000)
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r4, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r4, 0x0, 0x0)
ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000300)=<r5=>0x0)
sched_setattr(r5, &(0x7f0000000080)={0x38, 0x2, 0x44, 0x9, 0x3, 0x0, 0x0, 0x0, 0xfffffffc, 0xffff}, 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r7 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r7, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x32, @loopback, 0x4e20, 0x1, 'ovf\x00', 0x12, 0x9, 0x59}, 0x2c)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r9, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r9, 0x0, 0x0)
writev(r9, &(0x7f0000000480), 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r8, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0)='gtp\x00')
sendmsg$GTP_CMD_NEWPDP(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r11, 0x1, 0x0, 0x0, {0x2}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0)
r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r12, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r12, 0x0, 0x0)
sendmsg$GTP_CMD_DELPDP(r8, &(0x7f0000000180)={0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000010}, 0x4001)
ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7)
sendfile(r6, r7, 0x0, 0x20000102000003)

00:39:29 executing program 0:
socket$inet(0x15, 0x5, 0x0)
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

[  955.089006] hfsplus: unable to find HFS+ superblock
00:39:29 executing program 0:
socket$inet(0x15, 0x5, 0x0)
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

[  955.110684] hfsplus: invalid session number or type of track
[  955.128000] hfsplus: unable to find HFS+ superblock
00:39:29 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}]})

00:39:29 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}]})

00:39:29 executing program 0:
socket$inet(0x15, 0x5, 0x0)
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

[  955.276884] hfsplus: invalid session number or type of track
[  955.287082] hfsplus: unable to find HFS+ superblock
[  955.298649] hfsplus: unable to find HFS+ superblock
00:39:29 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}]})

[  955.423211] hfsplus: unable to find HFS+ superblock
00:39:29 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r4 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r4, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
sendfile(r3, r4, 0x0, 0x20000102000003)

00:39:29 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

00:39:29 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}]})

00:39:29 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}]})

[  955.653884] hfsplus: unable to find HFS+ superblock
[  955.691940] hfsplus: unable to find HFS+ superblock
00:39:29 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r6, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r6, 0x0)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r7, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:39:32 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x203, 0x0)
sendmsg$nfc_llcp(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x27, 0x0, 0x1, 0x6, 0x2b, 0x5, "45eb851fe47c9b82966c93d9b623f9bfffc41eed0c763dd583763261a8a8f0f1323eebce6b5b15bbb61cc42b64c92743f8ead099cff5b4aeb25e5c45f5e557", 0x1b}, 0x60, &(0x7f0000000300)=[{&(0x7f00000003c0)="94a1c0db1160b13992be710ff6c4efc6fe2842de0c49a295b00187b4855ff25d938c6fd74d0b1b772201ea44bcb558d7c4f06103f11320c064e54a975e73f9cc0059df995f8e1b66c7d278b70ae108ba1b41721fc89fd461b5a2500351a37b43b3bc7ab7a810c5e8f98a68d0e9a5b38e328d9884c00d0d43eb6d741dbf5eb00a72c1e273690a9bb190be98cb798ca860f48c4cf083294b9e00455d244cee5ba7b6a3c42c812c1fc6b03c1e6ffa8e930387b017d5519987fa7c79b552165d7e8e2815cb43dab0fbe7f59a7de3a12e2076d971fbb84364f6b845db313caa457d5b0816e406f7cce9687f24c67224f94ea81a30aa0811f649b3", 0xf8}, {&(0x7f00000004c0)="fb4893a4a6495e1cb893b9006fa3d9d3cee5eed670ded5a0a152633279622643cdd2c53ce0ab2d21d63394b7801c34149ecd26f7364c0f2de8543805dbecd03533340df9848e0ab464dc0cc6387287a2e514b4c68b06183367d233f4644cc2e9e510367a601de3cd52b51c2a79ba6edd586c6951702d6dc5dfd7b730d2743692aa1da79d29a16030e2466e46c5624b7acacc1c8aecf075a98814fbd67553e715247ebfa2aed127c94a05ab25300df46a3697a15c38", 0xb5}, {&(0x7f0000000180)="a9d34e885a4f3d264ccb55ef9d698f5eae133cefafab173826db12c5c6c425a6e1a70ac755a64c5e287c7e2742530df7a982ddd529515705c53e5531879911faf916a5b3da65ef1693a8515fe73920530bfd670a3a2c74f4afc299f8082ce15b66", 0x61}, {&(0x7f0000000580)="858e88566f517b5a694a95f99960522751666f9c81a2553b6e4153d612c865d2a34e888f2a598442bb62b0d8552c4d23d674bbc6e9e2e76b55ca84f00ba057ce3a9bb49ddff623ad5a2dc6f445c7846d8623bdd1dfaa00fd788860c2da9c57b1db7a412263b85fc7e4fc9d4512ebf22f53d45e7b4f60757f611a036422f5672fabaaace3d83dc6e88a46d00e09162f629d48cc9f1f05867abeef434692ead90cdbd25ef8bc", 0xa5}, {&(0x7f0000000640)="10f4afe10aba983681e4b70e0ff17fe3212b02141fbc217fdb1d2035f8848b1d3888a6980fec42bc57133e17d8b525df1ccea0fe7bd2ce7bd56faf7b51b49afde72b5e3d7b26356c6316845f10223b55e69851f5a5a4846286b3e2c70a0d4027211ef724361695bf9a1f0b6bf79d71f234db464e3dfe560a6c2c97ab47c620b043852659cddeb1ce52c715fbb424a72c5ceb0cb9ea4c7600d74e2ab60e7d878db5b4e63d83c5a1c671146e8383cdcd948b30cd6847a9fafdcfac678aa4a4e6e0a8a6aa36f56e53d8ce0f8fdff089af9614f42a859a4af1ce1b240a92af5c5afa0e6cce6841", 0xe5}, {&(0x7f0000000740)="a1324d92f78d0452eea37937e13c0a94ae6031b2af567fe697a1bd96fbae1452c749b0b664252c83127eba8fb9c1eb6babb777622bb78fa985825ce45b8e03e6e12797ea01140e780dad312fac0bc2b7103f2862959858d4b04498eb0326f7fe88cad9e513f311d231118c0811caae90bca13cd02b6611d9bf76f7ff09e294330d9eec08a21dd307ec46c4d9cb41ddea66e67e34e876c5b44642d2efd01ad3", 0x9f}], 0x6, &(0x7f0000000980)=ANY=[@ANYBLOB="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"/349], 0x88, 0x20000481}, 0x4048000)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3ff}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
waitid(0x2, 0x0, &(0x7f0000000800), 0x20000000, &(0x7f0000000880))
sendfile(r5, r6, 0x0, 0x20000102000003)

00:39:32 executing program 0:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

00:39:32 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}]})

00:39:32 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}]})

00:39:32 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:39:32 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r6, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r6, 0x0)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r7, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:39:32 executing program 0:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

00:39:32 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}]})

[  958.092795] hfsplus: unable to find HFS+ superblock
[  958.110250] hfsplus: unable to find HFS+ superblock
00:39:32 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}]})

[  958.366245] hfsplus: unable to find HFS+ superblock
00:39:32 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}]})

00:39:32 executing program 0:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

[  958.497858] hfsplus: unable to find HFS+ superblock
00:39:32 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

[  958.613120] hfsplus: unable to find HFS+ superblock
00:39:32 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={<r1=>0x0, 0x98, &(0x7f0000000100)=[@in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e20, 0x5b3, @mcast1, 0x9}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e20, 0x5, @mcast1}]}, &(0x7f0000000240)=0x10)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000300)=ANY=[@ANYRES32=r1, @ANYBLOB="060004808139d32da6f5f579"], 0x10)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
ioctl$RTC_WIE_OFF(r4, 0x7010)
r6 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r7 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r7, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7)
sendfile(r6, r7, 0x0, 0x20000102000003)

00:39:32 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}]})

00:39:32 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

00:39:32 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}]})

00:39:32 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:39:32 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r8, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:39:33 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

[  959.009850] hfsplus: unable to find HFS+ superblock
[  959.014916] hfsplus: unable to find HFS+ superblock
00:39:33 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}]})

00:39:33 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540))
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

00:39:33 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}]})

[  959.338121] hfsplus: unable to find HFS+ superblock
00:39:33 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540))
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

[  959.368949] hfsplus: unable to find HFS+ superblock
00:39:33 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@nodecompose='nodecompose'}]})

[  959.515322] hfsplus: unable to find HFS+ superblock
00:39:33 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
ioctl$EXT4_IOC_MIGRATE(r2, 0x6609)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:39:33 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@type={'type', 0x3d, "29d59191"}}]})

00:39:33 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540))
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

00:39:33 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nodecompose='nodecompose'}]})

00:39:33 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:39:33 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r8, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:39:33 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

00:39:33 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@nodecompose='nodecompose'}]})

[  959.892457] hfsplus: unable to find HFS+ superblock
[  959.911223] hfsplus: unable to find HFS+ superblock
00:39:34 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@type={'type', 0x3d, "29d59191"}}]})

00:39:34 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

[  960.226626] hfsplus: unable to find HFS+ superblock
00:39:34 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@nodecompose='nodecompose'}]})

[  960.281481] hfsplus: unable to find HFS+ superblock
00:39:34 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@type={'type', 0x3d, "29d59191"}}]})

[  960.376981] hfsplus: unable to find HFS+ superblock
[  960.437143] hfsplus: unable to find HFS+ superblock
00:39:34 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r6, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r6, 0x0)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r7, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:39:34 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@nodecompose='nodecompose'}]})

00:39:34 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

00:39:34 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@type={'type', 0x3d, "29d59191"}}]})

00:39:34 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

[  960.802834] hfsplus: unable to find HFS+ superblock
00:39:34 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

[  960.825114] hfsplus: unable to find HFS+ superblock
00:39:34 executing program 2:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r8, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:39:34 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@type={'type', 0x3d, "29d59191"}}]})

00:39:35 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

00:39:35 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

[  961.033029] hfsplus: unable to find HFS+ superblock
00:39:35 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@type={'type', 0x3d, "29d59191"}}]})

00:39:35 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_sctp(0x2, 0x0, 0x84)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

[  961.200449] hfsplus: unable to find HFS+ superblock
00:39:35 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r6, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r6, 0x0)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r7, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:39:35 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_sctp(0x2, 0x0, 0x84)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

00:39:35 executing program 3:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r8, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:39:35 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:39:35 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r0, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r0, 0x0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
fallocate(r1, 0x1, 0x0, 0x369e5d84)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000f00)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICLIST(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r2, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20008000)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r2, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4004090)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r3 = getpid()
sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r4, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
fcntl$setpipe(r6, 0x407, 0x0)
write(r6, &(0x7f0000000340), 0x41395527)
vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r7 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r8 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r8, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r7, 0x4c00, r8)
sendfile(r7, r8, 0x0, 0x20000102000003)

00:39:35 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_sctp(0x2, 0x0, 0x84)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

00:39:35 executing program 2:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r8, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:39:35 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

00:39:35 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

00:39:35 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

00:39:36 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r2, 0x0, 0x0)

00:39:36 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r2, 0x0, 0x0)

00:39:36 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r2, 0x0, 0x0)

00:39:36 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:39:36 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r6, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r6, 0x0)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r7, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:39:36 executing program 3:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r8, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:39:36 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$isdn(0x22, 0x3, 0xea305a32d959e440)
fcntl$getown(r1, 0x9)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
accept4$rose(r8, 0x0, &(0x7f00000001c0), 0x80800)
ioctl$VIDIOC_G_PARM(r3, 0xc0cc5615, &(0x7f00000000c0)={0x13, @raw_data="f4f89e1214bdcd10c6a949fe8958cbb7974c1c66db29fb55651d927eca77e15c3a5617142e54c708b5c2d6fb57c974eb9c5adfe9c3f0c368aa353dbb47e926f6759404078884433bba1703611fd999de6c7c380e29a34dda0ef42f9d1e5782c62772057d22aa98bb5c9de3b47586e12050626a56c82f2bfb3a9a0ed0b6338349c44c7f426d921dc1067a155cfa548270a05b7eb7b0036de94c1f369923d74da4f154e7345e4f451ff9978c58887f5b5c874a7f16c04638a1fcdf8a06718c6bf9c4ffd70ce0129126"})
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)

00:39:36 executing program 0:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r8, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:39:36 executing program 2:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r8, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:39:37 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:39:37 executing program 3:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r8, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:39:37 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:39:37 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r4 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r4, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
sendfile(r3, r4, 0x0, 0x20000102000003)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r5, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r5, 0x0)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r6, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:39:37 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
clock_gettime(0x0, &(0x7f00000000c0)={<r3=>0x0, <r4=>0x0})
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r5, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r5, 0x0, 0x0)
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000100)={0x6, 0x1, 0x4, 0x2020, 0x4, {r3, r4/1000+10000}, {0x4, 0x0, 0x20, 0x81, 0x6e, 0x5, "6af97996"}, 0x4, 0x3, @offset=0x8, 0x5, 0x0, <r6=>r5})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r6, &(0x7f0000000180)={0x80000000})
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r9 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r10 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r10, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r9, 0x4c00, r10)
sendfile(r9, r10, 0x0, 0x20000102000003)

00:39:37 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:39:37 executing program 2:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r6, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r6, 0x0)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r7, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:39:37 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r6, 0x1)
sendmmsg(r6, &(0x7f00000009c0)=[{{&(0x7f00000000c0)=@llc={0x1a, 0x201, 0x6, 0x0, 0x90, 0x1f, @remote}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000140)="a35de362979c9fa125d940d1a32add702c794504215689b9a4dfebaaa12f72b49317fcef533e6bc2656638bc4a8e84845dfb0f6e9ae66c22fcf2745828cf19051e71b0943665e29324d167dc613affaff23793", 0x53}, {&(0x7f00000001c0)}, {&(0x7f00000003c0)="c7fa370bfec25aca68595562305e20120cbda8d5ec39299866379808dd518381c4697f1644cc0f2bd44451934834a46c632b839699c4eb34aafdad7548f191ef828486e67740bb2a718afda18a7a94d994e27aa7df754e3f5721d71102354041a353d7424d3d3756748ddb682180c4d1259a216523bebd268daf0a1aa49b19edda3d6c6077bf75d0f56d4e9a6f3493b52c86b04a5c691da0c47c742b2af6943608ecd542149731466236ea2821432b0dd8e991c5e7bd156a8c145f4d0cbc79b8deb06c", 0xc3}, {&(0x7f0000000300)="a8d05de0f2249d23de266466007f4184c918e99eded07da67a47f01d782b90c8c7e3fcc98b833bd87a15bbffba564c9e6a947a90adeb3f0f574c5c07a132a9c3274ac62010878dd0236148731d76fdf381d09621ea8e49e0dbcf048fe625d66c702734807871666e245490bb", 0x6c}, {&(0x7f00000004c0)="8a4c007b97a458adda2f94a631a95d3b51f79c16ce4ede6742be8730bea6fa1ec637bfc359264a3ab15279e30663949e26b08e466f1a55d0e23d5c325e628de26875fc41d300f1bb36363348d0927771166776d3389f2c8d9dae0402fb2c884238dbd815e67403bf629e8c57c3bb95fa2702ff3a6aa78788d104fb6d0aa36904120a1e78b1e20da9bf7e192fc74b18f63ce13f0daa3abaaa2bea8231e2b6d4a0b01600b44e2b808b20eb69b862b658c32bd2d89003970d2f7e76be5dbe58f7189767085a70a6994731c1d52683a6", 0xce}], 0x5, &(0x7f0000001440)=[{0x1010, 0x105, 0x8, "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"}, {0xb8, 0x102, 0x11e, "b1aa37e0889db235fadfb01a4b182cf8f8b0614b86f83eca6a49ea9d63abd22510769462a7102e22a9d05ba4b290ddb99b0ec883c42e569b53aa17c3b5e8bd4b095358393a2b970865ae8180d88d0856d6a7e773d2bcc4eef186be190eb52a88cb01ea4d6bf5e17363602a3169a21fb895269ff017457e6467f76e1910d27959b34e9dd6e7b41131191aa69ff0749edb865a478fc08a8910c19203ed5bf5a96e8371d4832ab3ae"}, {0xf8, 0x107, 0x20, "85c78716e5f4143a282a04672a4439d9bd384b43bd49e2b5f7f2db87d8487d7979f7f4eedbeeb8d42a9439be2d082b124dfdf4f2b5c59b7cb677244cd8c5b599c0a6b45eee4d78b09c38cf0f84352e6da96809cb552a38bf29ccd178e4c15b9f7423647248d7846cb5fb1c652a16040645db838a5afada9fe703ddfa1fef7a6635288e789aa5ca0b32cc4bb6a8ecefdf466e794c4cf586466bcd77785bfc51b842f10e25c15b74bd3a0ae5ed4f69e97a1f035247c94c8ccdb8cd2a0eecc64fbae9961f56e5d66424ac066f6e859307086db40642df4fe7adc01cffb29c5dbc82e0"}], 0x11c0}}, {{&(0x7f0000000640)=@sco={0x1f, @fixed={[], 0x12}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000006c0)="9575e311abb722478567d9126f815d233f63a392c8212fc7befd9a27a6c3218d85b44188068066ca65190d935ebd032f99dadb1fe3acdbb6177647e5aadcc7fc3f", 0x41}], 0x1, &(0x7f0000000740)=[{0x60, 0x111, 0x7, "963330d8dc226eb7a69b3b32692b4530428dc325934eb8dd01399fdc76937b03275cade639818ddfeaa29ba611f9e3786862baf1eff5aa35f515072706effd25483b5721a405293b18"}, {0xe0, 0x0, 0x0, "06b1c6c3636054019824ad64600a65e16c5e58fec8d58c1e2a05333140dfa44420a00b8e095237dee600cb350018421cb112372a3063a0501f625bb261f9c542ffb53208d63de42809945b8bcc9c0aa1958967ab63a8d94abbf0b5f6bc0b806323dcda4ac6fdb039d2b62e1a068b482f86fba12bb96d4cd05168c360db773e97a2c4cdc432c44f7f53233a18be09a0f2edabb0a11753df231967aa6a45721561b2f482bfd42079919ed18e756b67510c00322c73ff5d895e5122bad3d7fc4529fc5acfe705c672ba88034bb0"}, {0x78, 0x10d, 0xffffffff, "e3155050b44f6b1af6c9ee787fbb717be4248b73db6d573ea9a9c4203f6fb3421052193dfb1a3af01cbd20bca15f647e19de3cd21b1e9743197f6262fc336fd836c69156cc6ad5bb0ca41d81cb9a4d70df85a4a855a552ec1ba40cc08a25b861f4ea0610"}, {0x40, 0xc27d3c8416d9a94b, 0x8, "0e5ebf3f99c990daf07260e7cac064d421f38c14f874a1f946e857961ccfd278da2034460ca9f8e7cb3141be97"}, {0x50, 0x1, 0x2, "96a122acf6fbcd236e06e87acba132d5125b2ca8ccc44c7f41d55970bd16067c81d5ea8a53a03043b97be2f267b71c89d845045df9acfcc7ef"}], 0x248}}], 0x2, 0x1)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:39:38 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003bc0)=[{{&(0x7f0000000100)=@xdp, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/205, 0xcd}, {&(0x7f00000004c0)=""/215, 0xd7}, {&(0x7f00000002c0)=""/155, 0x9b}, {&(0x7f0000000180)=""/68, 0x44}], 0x4}}, {{&(0x7f00000005c0)=@caif=@rfm, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000640)=""/66, 0x42}, {&(0x7f00000006c0)=""/41, 0x29}, {&(0x7f0000000700)=""/244, 0xf4}, {&(0x7f0000000800)=""/252, 0xfc}, {&(0x7f0000000900)=""/54, 0x36}, {&(0x7f0000000940)=""/217, 0xd9}, {&(0x7f0000000a40)=""/16, 0x10}], 0x7, &(0x7f0000000b00)=""/220, 0xdc}, 0xfffffff9}, {{&(0x7f0000000c00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000002280)=[{&(0x7f0000000c80)=""/195, 0xc3}, {&(0x7f0000000d80)=""/182, 0xb6}, {&(0x7f0000000e40)=""/211, 0xd3}, {&(0x7f0000000f40)=""/98, 0x62}, {&(0x7f0000000fc0)}, {&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000002000)}, {&(0x7f0000002040)=""/197, 0xc5}, {&(0x7f0000002140)=""/139, 0x8b}, {&(0x7f0000002200)=""/93, 0x5d}], 0xa}, 0x2}, {{&(0x7f0000002340)=@isdn, 0x80, &(0x7f00000027c0)=[{&(0x7f00000023c0)=""/74, 0x4a}, {&(0x7f0000002440)=""/62, 0x3e}, {&(0x7f0000002480)=""/140, 0x8c}, {&(0x7f0000002540)=""/226, 0xe2}, {&(0x7f0000002640)=""/163, 0xa3}, {&(0x7f0000002700)=""/138, 0x8a}], 0x6, &(0x7f0000002840)=""/240, 0xf0}, 0x2}, {{&(0x7f0000002940)=@sco={0x1f, @none}, 0x80, &(0x7f0000003a80)=[{&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f00000039c0)=""/132, 0x84}], 0x2, &(0x7f0000003ac0)=""/205, 0xcd}, 0x5}], 0x5, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x45, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r3 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r3, &(0x7f0000001400), 0x0, 0x8180a)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3)
sendfile(r2, r3, 0x0, 0x20000102000003)

00:39:38 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:39:38 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:39:38 executing program 3:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r6, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r6, 0x0)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r7, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:39:38 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r4 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r4, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
sendfile(r3, r4, 0x0, 0x20000102000003)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r5, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r5, 0x0)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r6, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:39:38 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}]})

[  964.698115] hfsplus: unable to find HFS+ superblock
00:39:38 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r4 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r4, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
sendfile(r3, r4, 0x0, 0x20000102000003)

00:39:38 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
r4 = gettid()
tkill(r4, 0x1000000000016)
sched_setattr(r4, &(0x7f0000000080)={0x38, 0x3, 0x22, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)

00:39:38 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r4 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r4, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
sendfile(r3, r4, 0x0, 0x20000102000003)

00:39:38 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:39:39 executing program 3:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r6, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r6, 0x0)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r7, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:39:39 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r4 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r4, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
sendfile(r3, r4, 0x0, 0x20000102000003)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r5, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r5, 0x0)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r6, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:39:39 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r4 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r4, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
sendfile(r3, r4, 0x0, 0x20000102000003)

00:39:39 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r4 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r4, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
sendfile(r3, r4, 0x0, 0x20000102000003)

00:39:39 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:39:40 executing program 3:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r6, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r6, 0x0)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r7, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:39:40 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r8, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:39:40 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:39:40 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r4 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r4, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
sendfile(r3, r4, 0x0, 0x20000102000003)

00:39:41 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x20, 0x0, 0x3, 0x7ff}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:39:41 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:39:41 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:39:41 executing program 3:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}, {@barrier='barrier'}]})

00:39:41 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r8, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:39:41 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r4 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r4, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
sendfile(r3, r4, 0x0, 0x20000102000003)

00:39:42 executing program 3:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r4 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r4, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
sendfile(r3, r4, 0x0, 0x20000102000003)

[  967.907673] hfsplus: invalid session number or type of track
[  967.913784] hfsplus: unable to find HFS+ superblock
00:39:42 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r8, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:39:42 executing program 1:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', 0x0, 0x7, 0x0, 0x0, 0x10, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}, {@barrier='barrier'}, {@nls={'nls', 0x3d, 'iso8859-4'}}, {@part={'part', 0x3d, 0x4}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}, {@nodecompose='nodecompose'}, {@type={'type', 0x3d, "29d59191"}}, {@session={'session'}}, {@barrier='barrier'}]})

00:39:42 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:39:43 executing program 3:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r4 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r4, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
sendfile(r3, r4, 0x0, 0x20000102000003)

00:39:43 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r4 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r4, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
sendfile(r3, r4, 0x0, 0x20000102000003)

00:39:43 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:39:43 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:39:43 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r6, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r6, 0x0)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r7, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:39:43 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:39:44 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r4 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r4, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
sendfile(r3, r4, 0x0, 0x20000102000003)

00:39:44 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:39:44 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r4 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r4, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
sendfile(r3, r4, 0x0, 0x20000102000003)

00:39:44 executing program 3:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r4 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r4, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
sendfile(r3, r4, 0x0, 0x20000102000003)

00:39:44 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r6, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r6, 0x0)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r7, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:39:44 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:39:45 executing program 0:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, &(0x7f0000000000)=0xfff)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0))

00:39:45 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540))
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r0, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r0, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r1, 0x0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r2, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r2, 0x0, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r3, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r3, 0x0, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0x980000, 0x5, 0x0, <r4=>0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x990afc, 0x14f1, [], @string=&(0x7f0000000000)=0x8}})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@nobarrier='nobarrier'}]})

00:39:45 executing program 1:
r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0)
r1 = socket$inet(0x15, 0x5, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendto$inet(r1, &(0x7f0000000000)="b9", 0xff97, 0x0, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10)

00:39:45 executing program 3:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000080)={[{@nobarrier='nobarrier'}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'hfsplus\x00'}}]})

00:39:45 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='nobarrier,mask=MAY_EXEFv\x00'])
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r1, 0x0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)={'syz1', "3947e9ee57f5cac7827b17f038d8dfb39e7708b5f1625bbd460e0dac059313681318666b817eac523a5167f8968a6e25c527fafc"}, 0x38)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x8, &(0x7f0000000180)=[{0x852, 0x6}, {0x1ff, 0x2, 0x8, 0x2}, {0x7, 0x8, 0x86, 0xffffff80}, {0x1, 0x7f, 0x5, 0x80000001}, {0x0, 0x6, 0x18}, {0x4, 0x7, 0x1f, 0x9}, {0xfff, 0x9, 0x1f, 0x8}, {0x1, 0x1f, 0x5, 0x7fb}]})
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080))
write(r0, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r0, 0x0, 0x0)
lseek(r0, 0x1, 0x0)

[  971.358993] hfsplus: unable to parse mount options
[  971.376386] hfsplus: unable to parse mount options
00:39:45 executing program 3 (fault-call:4 fault-nth:0):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

[  971.595088] FAULT_INJECTION: forcing a failure.
[  971.595088] name failslab, interval 1, probability 0, space 0, times 0
[  971.606767] CPU: 0 PID: 10778 Comm: syz-executor.3 Not tainted 4.14.171-syzkaller #0
[  971.614656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  971.624964] Call Trace:
[  971.627565]  dump_stack+0x142/0x197
[  971.631218]  should_fail.cold+0x10f/0x159
[  971.635385]  should_failslab+0xdb/0x130
[  971.639378]  kmem_cache_alloc+0x47/0x780
[  971.643528]  sctp_get_port_local+0x352/0x1100
[  971.648037]  ? sctp_unhash+0x10/0x10
[  971.651763]  sctp_do_bind+0x1df/0x550
[  971.655576]  sctp_bind+0x8b/0xc0
[  971.658948]  ? sctp_autobind+0x1c0/0x1c0
[  971.663016]  inet_bind+0xa5/0x990
[  971.666479]  ? security_socket_bind+0x89/0xb0
[  971.670982]  SYSC_bind+0x1d3/0x220
[  971.674529]  ? move_addr_to_kernel.part.0+0x100/0x100
[  971.679723]  ? fput+0xd4/0x150
[  971.682920]  ? SyS_write+0x15e/0x230
[  971.686643]  SyS_bind+0x24/0x30
[  971.689927]  ? SyS_socketpair+0x4d0/0x4d0
[  971.694080]  do_syscall_64+0x1e8/0x640
[  971.697977]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  971.702832]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  971.708026] RIP: 0033:0x45c429
[  971.711219] RSP: 002b:00007fe15b4aec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  971.718927] RAX: ffffffffffffffda RBX: 00007fe15b4af6d4 RCX: 000000000045c429
[  971.726200] RDX: 0000000000000010 RSI: 0000000020000040 RDI: 0000000000000006
[  971.733471] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000
00:39:45 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r6, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r6, 0x0)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r7, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

[  971.740746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007
[  971.748026] R13: 0000000000000032 R14: 00000000004c28fa R15: 0000000000000000
00:39:45 executing program 0 (fault-call:3 fault-nth:0):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@type={'type', 0x3d, "29d59191"}}]})

00:39:45 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:39:45 executing program 3 (fault-call:4 fault-nth:1):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

[  971.967279] FAULT_INJECTION: forcing a failure.
[  971.967279] name failslab, interval 1, probability 0, space 0, times 0
[  971.975442] FAULT_INJECTION: forcing a failure.
[  971.975442] name failslab, interval 1, probability 0, space 0, times 0
[  971.978978] CPU: 0 PID: 10799 Comm: syz-executor.3 Not tainted 4.14.171-syzkaller #0
[  971.997650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  972.007007] Call Trace:
[  972.009606]  dump_stack+0x142/0x197
[  972.013249]  should_fail.cold+0x10f/0x159
[  972.017410]  should_failslab+0xdb/0x130
[  972.021395]  kmem_cache_alloc_trace+0x4b/0x790
[  972.026086]  ? sctp_unhash+0x10/0x10
[  972.029811]  sctp_add_bind_addr+0x6d/0x360
[  972.034058]  sctp_do_bind+0x2b2/0x550
[  972.037939]  sctp_bind+0x8b/0xc0
[  972.041327]  ? sctp_autobind+0x1c0/0x1c0
[  972.045392]  inet_bind+0xa5/0x990
[  972.048847]  ? security_socket_bind+0x89/0xb0
[  972.053350]  SYSC_bind+0x1d3/0x220
[  972.056901]  ? move_addr_to_kernel.part.0+0x100/0x100
[  972.062103]  ? fput+0xd4/0x150
[  972.065300]  ? SyS_write+0x15e/0x230
[  972.069113]  SyS_bind+0x24/0x30
[  972.072393]  ? SyS_socketpair+0x4d0/0x4d0
[  972.076547]  do_syscall_64+0x1e8/0x640
[  972.080443]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  972.085302]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  972.090498] RIP: 0033:0x45c429
[  972.093691] RSP: 002b:00007fe15b4aec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  972.101410] RAX: ffffffffffffffda RBX: 00007fe15b4af6d4 RCX: 000000000045c429
[  972.108691] RDX: 0000000000000010 RSI: 0000000020000040 RDI: 0000000000000006
00:39:46 executing program 2 (fault-call:0 fault-nth:0):
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@nodecompose='nodecompose'}]})

[  972.115972] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000
[  972.123246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007
[  972.130516] R13: 0000000000000032 R14: 00000000004c28fa R15: 0000000000000001
[  972.137807] CPU: 1 PID: 10798 Comm: syz-executor.0 Not tainted 4.14.171-syzkaller #0
[  972.145704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  972.155066] Call Trace:
[  972.157668]  dump_stack+0x142/0x197
[  972.161329]  should_fail.cold+0x10f/0x159
[  972.165491]  should_failslab+0xdb/0x130
[  972.169476]  __kmalloc+0x2f0/0x7a0
[  972.173055]  ? __sb_end_write+0xc1/0x100
[  972.176367] FAULT_INJECTION: forcing a failure.
[  972.176367] name failslab, interval 1, probability 0, space 0, times 0
[  972.177132]  ? strnlen_user+0x12f/0x1a0
[  972.177145]  ? SyS_memfd_create+0xba/0x3a0
[  972.177161]  SyS_memfd_create+0xba/0x3a0
[  972.177178]  ? shmem_fcntl+0x130/0x130
[  972.204468]  ? do_syscall_64+0x53/0x640
[  972.208467]  ? shmem_fcntl+0x130/0x130
[  972.212360]  do_syscall_64+0x1e8/0x640
[  972.216249]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  972.221113]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  972.226311] RIP: 0033:0x45c429
[  972.229502] RSP: 002b:00007fc291a4ca68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[  972.237216] RAX: ffffffffffffffda RBX: 00007fc291a4d6d4 RCX: 000000000045c429
[  972.244498] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c14d8
[  972.251772] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000001
[  972.259046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[  972.266318] R13: 0000000000000bdd R14: 00000000004cdb93 R15: 0000000000000000
[  972.273611] CPU: 0 PID: 10802 Comm: syz-executor.2 Not tainted 4.14.171-syzkaller #0
[  972.282984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  972.292337] Call Trace:
[  972.294935]  dump_stack+0x142/0x197
[  972.298579]  should_fail.cold+0x10f/0x159
[  972.302745]  should_failslab+0xdb/0x130
[  972.306727]  __kmalloc+0x2f0/0x7a0
[  972.310272]  ? __sb_end_write+0xc1/0x100
[  972.314341]  ? strnlen_user+0x12f/0x1a0
[  972.318319]  ? SyS_memfd_create+0xba/0x3a0
[  972.322567]  SyS_memfd_create+0xba/0x3a0
[  972.326640]  ? shmem_fcntl+0x130/0x130
[  972.330540]  ? do_syscall_64+0x53/0x640
[  972.334519]  ? shmem_fcntl+0x130/0x130
[  972.338413]  do_syscall_64+0x1e8/0x640
[  972.342307]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  972.347162]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  972.352354] RIP: 0033:0x45c429
[  972.355550] RSP: 002b:00007fc35dc6fa68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
00:39:46 executing program 1 (fault-call:3 fault-nth:0):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)

00:39:46 executing program 0 (fault-call:3 fault-nth:1):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@type={'type', 0x3d, "29d59191"}}]})

[  972.363262] RAX: ffffffffffffffda RBX: 00007fc35dc706d4 RCX: 000000000045c429
[  972.370536] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c14d8
[  972.377811] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000001
[  972.385174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[  972.392449] R13: 0000000000000bdd R14: 00000000004cdb93 R15: 0000000000000000
[  972.424417] FAULT_INJECTION: forcing a failure.
[  972.424417] name failslab, interval 1, probability 0, space 0, times 0
[  972.436040] CPU: 0 PID: 10808 Comm: syz-executor.1 Not tainted 4.14.171-syzkaller #0
[  972.444042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  972.453399] Call Trace:
[  972.456004]  dump_stack+0x142/0x197
[  972.459650]  should_fail.cold+0x10f/0x159
[  972.463823]  should_failslab+0xdb/0x130
[  972.467816]  __kmalloc+0x2f0/0x7a0
[  972.471361]  ? __sb_end_write+0xc1/0x100
[  972.475426]  ? strnlen_user+0x12f/0x1a0
[  972.479401]  ? SyS_memfd_create+0xba/0x3a0
[  972.483644]  SyS_memfd_create+0xba/0x3a0
[  972.487711]  ? shmem_fcntl+0x130/0x130
[  972.491606]  ? do_syscall_64+0x53/0x640
[  972.495587]  ? shmem_fcntl+0x130/0x130
[  972.499486]  do_syscall_64+0x1e8/0x640
[  972.503376]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  972.508229]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  972.513430] RIP: 0033:0x45c429
[  972.514964] FAULT_INJECTION: forcing a failure.
00:39:46 executing program 2 (fault-call:0 fault-nth:1):
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@nodecompose='nodecompose'}]})

00:39:46 executing program 1 (fault-call:3 fault-nth:1):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)

[  972.514964] name failslab, interval 1, probability 0, space 0, times 0
[  972.516620] RSP: 002b:00007f429bd33a68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[  972.516632] RAX: ffffffffffffffda RBX: 00007f429bd346d4 RCX: 000000000045c429
[  972.516638] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c14d8
[  972.516644] RBP: 000000000076bf20 R08: 0000000000829050 R09: 0000000000000001
[  972.516650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[  972.516656] R13: 0000000000000bd3 R14: 00000000004cdac0 R15: 0000000000000000
00:39:46 executing program 3 (fault-call:4 fault-nth:2):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

[  972.590745] FAULT_INJECTION: forcing a failure.
[  972.590745] name failslab, interval 1, probability 0, space 0, times 0
[  972.603351] FAULT_INJECTION: forcing a failure.
[  972.603351] name failslab, interval 1, probability 0, space 0, times 0
[  972.619030] CPU: 1 PID: 10814 Comm: syz-executor.1 Not tainted 4.14.171-syzkaller #0
[  972.626957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  972.636319] Call Trace:
[  972.638927]  dump_stack+0x142/0x197
[  972.642572]  should_fail.cold+0x10f/0x159
[  972.646741]  should_failslab+0xdb/0x130
[  972.650727]  kmem_cache_alloc+0x2d7/0x780
[  972.654899]  ? __alloc_fd+0x1d4/0x4a0
[  972.658718]  __d_alloc+0x2d/0x9f0
[  972.662183]  ? lock_downgrade+0x740/0x740
[  972.666349]  d_alloc_pseudo+0x1e/0x30
[  972.670161]  __shmem_file_setup.part.0+0xd8/0x400
[  972.675002]  ? __alloc_fd+0x1d4/0x4a0
[  972.678808]  ? shmem_fill_super+0x8c0/0x8c0
[  972.683140]  SyS_memfd_create+0x1f9/0x3a0
[  972.687287]  ? shmem_fcntl+0x130/0x130
00:39:46 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xfffffffffffffe00)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

[  972.691179]  ? do_syscall_64+0x53/0x640
[  972.695158]  ? shmem_fcntl+0x130/0x130
[  972.699052]  do_syscall_64+0x1e8/0x640
[  972.702947]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  972.707807]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  972.712998] RIP: 0033:0x45c429
[  972.716191] RSP: 002b:00007f429bd33a68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[  972.723911] RAX: ffffffffffffffda RBX: 00007f429bd346d4 RCX: 000000000045c429
[  972.731186] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c14d8
[  972.738462] RBP: 000000000076bf20 R08: 0000000000829050 R09: 0000000000000001
[  972.745728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[  972.745735] R13: 0000000000000bd3 R14: 00000000004cdac0 R15: 0000000000000001
[  972.761906] CPU: 1 PID: 10815 Comm: syz-executor.2 Not tainted 4.14.171-syzkaller #0
[  972.769807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  972.779159] Call Trace:
[  972.781765]  dump_stack+0x142/0x197
[  972.785414]  should_fail.cold+0x10f/0x159
00:39:46 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = open(&(0x7f0000000000)='./file0\x00', 0x20000, 0x0)
ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000080))
ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000180)=""/154)
r3 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
dup2(r0, r3)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

[  972.789582]  should_failslab+0xdb/0x130
[  972.793567]  kmem_cache_alloc+0x2d7/0x780
[  972.797721]  ? __alloc_fd+0x1d4/0x4a0
[  972.801543]  __d_alloc+0x2d/0x9f0
[  972.805002]  ? lock_downgrade+0x740/0x740
[  972.809165]  d_alloc_pseudo+0x1e/0x30
[  972.812987]  __shmem_file_setup.part.0+0xd8/0x400
[  972.817832]  ? __alloc_fd+0x1d4/0x4a0
[  972.821635]  ? shmem_fill_super+0x8c0/0x8c0
[  972.825983]  SyS_memfd_create+0x1f9/0x3a0
[  972.830130]  ? shmem_fcntl+0x130/0x130
[  972.834004]  ? do_syscall_64+0x53/0x640
[  972.837981]  ? shmem_fcntl+0x130/0x130
[  972.841876]  do_syscall_64+0x1e8/0x640
[  972.845759]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  972.850609]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  972.855792] RIP: 0033:0x45c429
[  972.858977] RSP: 002b:00007fc35dc6fa68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[  972.866680] RAX: ffffffffffffffda RBX: 00007fc35dc706d4 RCX: 000000000045c429
[  972.873940] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c14d8
[  972.881216] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000001
[  972.888474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[  972.895735] R13: 0000000000000bdd R14: 00000000004cdb93 R15: 0000000000000001
[  972.903021] CPU: 0 PID: 10810 Comm: syz-executor.0 Not tainted 4.14.171-syzkaller #0
[  972.910911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  972.920258] Call Trace:
[  972.922859]  dump_stack+0x142/0x197
[  972.926657]  should_fail.cold+0x10f/0x159
[  972.930818]  should_failslab+0xdb/0x130
[  972.934802]  kmem_cache_alloc+0x2d7/0x780
[  972.938962]  ? __alloc_fd+0x1d4/0x4a0
[  972.942779]  __d_alloc+0x2d/0x9f0
[  972.946237]  ? lock_downgrade+0x740/0x740
[  972.950401]  d_alloc_pseudo+0x1e/0x30
[  972.954209]  __shmem_file_setup.part.0+0xd8/0x400
[  972.959054]  ? __alloc_fd+0x1d4/0x4a0
[  972.962860]  ? shmem_fill_super+0x8c0/0x8c0
[  972.967194]  SyS_memfd_create+0x1f9/0x3a0
[  972.971350]  ? shmem_fcntl+0x130/0x130
[  972.975248]  ? do_syscall_64+0x53/0x640
[  972.979227]  ? shmem_fcntl+0x130/0x130
[  972.983122]  do_syscall_64+0x1e8/0x640
[  972.987002]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  972.991835]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  972.997010] RIP: 0033:0x45c429
[  973.000183] RSP: 002b:00007fc291a2ba68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[  973.007910] RAX: ffffffffffffffda RBX: 00007fc291a2c6d4 RCX: 000000000045c429
[  973.015195] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c14d8
[  973.022477] RBP: 000000000076bfc0 R08: 0000000000000000 R09: 0000000000000001
[  973.029732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
00:39:47 executing program 1 (fault-call:3 fault-nth:2):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)

00:39:47 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x680002, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r4, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r4, 0x0)
r5 = accept$nfc_llcp(r4, &(0x7f0000000100), &(0x7f0000000000)=0x60)
write(r5, &(0x7f0000c34fff), 0x0)
write$P9_RREADLINK(r3, 0x0, 0x0)
fchmod(r3, 0x9)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

[  973.036997] R13: 0000000000000bdd R14: 00000000004cdb93 R15: 0000000000000001
00:39:47 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:39:47 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r6, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r6, 0x0)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r7, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:39:47 executing program 2 (fault-call:0 fault-nth:2):
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@nodecompose='nodecompose'}]})

00:39:47 executing program 0 (fault-call:3 fault-nth:2):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@type={'type', 0x3d, "29d59191"}}]})

[  973.107473] FAULT_INJECTION: forcing a failure.
[  973.107473] name failslab, interval 1, probability 0, space 0, times 0
00:39:47 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x5)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

[  973.165906] FAULT_INJECTION: forcing a failure.
[  973.165906] name failslab, interval 1, probability 0, space 0, times 0
[  973.170985] FAULT_INJECTION: forcing a failure.
[  973.170985] name failslab, interval 1, probability 0, space 0, times 0
[  973.194439] CPU: 1 PID: 10832 Comm: syz-executor.1 Not tainted 4.14.171-syzkaller #0
[  973.202341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  973.211698] Call Trace:
[  973.214312]  dump_stack+0x142/0x197
[  973.217996]  should_fail.cold+0x10f/0x159
[  973.222150]  should_failslab+0xdb/0x130
[  973.226128]  kmem_cache_alloc+0x2d7/0x780
[  973.230320]  ? rcu_lockdep_current_cpu_online+0xf2/0x140
[  973.235766]  ? rcu_read_lock_sched_held+0x110/0x130
[  973.240824]  ? shmem_destroy_callback+0xa0/0xa0
[  973.245515]  shmem_alloc_inode+0x1c/0x50
[  973.249603]  alloc_inode+0x64/0x180
[  973.253249]  new_inode_pseudo+0x19/0xf0
[  973.257222]  new_inode+0x1f/0x40
[  973.260583]  shmem_get_inode+0x75/0x750
[  973.264555]  __shmem_file_setup.part.0+0x111/0x400
[  973.269486]  ? __alloc_fd+0x1d4/0x4a0
[  973.273316]  ? shmem_fill_super+0x8c0/0x8c0
[  973.277650]  SyS_memfd_create+0x1f9/0x3a0
[  973.281819]  ? shmem_fcntl+0x130/0x130
[  973.285737]  ? do_syscall_64+0x53/0x640
[  973.289729]  ? shmem_fcntl+0x130/0x130
[  973.293620]  do_syscall_64+0x1e8/0x640
[  973.297508]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  973.302358]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  973.307544] RIP: 0033:0x45c429
[  973.310726] RSP: 002b:00007f429bd33a68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[  973.318443] RAX: ffffffffffffffda RBX: 00007f429bd346d4 RCX: 000000000045c429
[  973.325720] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c14d8
[  973.332995] RBP: 000000000076bf20 R08: 0000000000829050 R09: 0000000000000001
[  973.340272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[  973.347544] R13: 0000000000000bd3 R14: 00000000004cdac0 R15: 0000000000000002
[  973.354857] CPU: 0 PID: 10843 Comm: syz-executor.2 Not tainted 4.14.171-syzkaller #0
[  973.362760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  973.372115] Call Trace:
[  973.374708]  dump_stack+0x142/0x197
[  973.378343]  should_fail.cold+0x10f/0x159
[  973.382494]  should_failslab+0xdb/0x130
[  973.386469]  kmem_cache_alloc+0x2d7/0x780
[  973.390617]  ? rcu_lockdep_current_cpu_online+0xf2/0x140
[  973.396066]  ? rcu_read_lock_sched_held+0x110/0x130
[  973.401084]  ? shmem_destroy_callback+0xa0/0xa0
[  973.405757]  shmem_alloc_inode+0x1c/0x50
[  973.409816]  alloc_inode+0x64/0x180
[  973.413492]  new_inode_pseudo+0x19/0xf0
[  973.417468]  new_inode+0x1f/0x40
[  973.420829]  shmem_get_inode+0x75/0x750
[  973.424804]  __shmem_file_setup.part.0+0x111/0x400
[  973.429754]  ? __alloc_fd+0x1d4/0x4a0
[  973.433553]  ? shmem_fill_super+0x8c0/0x8c0
[  973.437873]  SyS_memfd_create+0x1f9/0x3a0
[  973.442033]  ? shmem_fcntl+0x130/0x130
[  973.445914]  ? do_syscall_64+0x53/0x640
[  973.449894]  ? shmem_fcntl+0x130/0x130
[  973.453784]  do_syscall_64+0x1e8/0x640
[  973.457665]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  973.462515]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  973.467697] RIP: 0033:0x45c429
[  973.470888] RSP: 002b:00007fc35dc6fa68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[  973.478592] RAX: ffffffffffffffda RBX: 00007fc35dc706d4 RCX: 000000000045c429
[  973.485855] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c14d8
[  973.493146] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000001
[  973.500416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[  973.507701] R13: 0000000000000bdd R14: 00000000004cdb93 R15: 0000000000000002
00:39:47 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540))
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0xc)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r0, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r0, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r1, 0x0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r2, &(0x7f0000c34fff), 0xffffff0b)
fcntl$setpipe(r2, 0x407, 0xffffffff7fffffff)
write$P9_RREADLINK(r2, 0x0, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r3, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r3, 0x0, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r4, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r4, 0x0, 0x0)
r5 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r6, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

[  973.515002] CPU: 1 PID: 10841 Comm: syz-executor.0 Not tainted 4.14.171-syzkaller #0
[  973.522898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  973.532249] Call Trace:
[  973.534848]  dump_stack+0x142/0x197
[  973.538487]  should_fail.cold+0x10f/0x159
[  973.542647]  should_failslab+0xdb/0x130
[  973.546719]  kmem_cache_alloc+0x2d7/0x780
[  973.550875]  ? rcu_lockdep_current_cpu_online+0xf2/0x140
[  973.556358]  ? rcu_read_lock_sched_held+0x110/0x130
[  973.561383]  ? shmem_destroy_callback+0xa0/0xa0
[  973.566064]  shmem_alloc_inode+0x1c/0x50
[  973.570133]  alloc_inode+0x64/0x180
[  973.573772]  new_inode_pseudo+0x19/0xf0
[  973.577844]  new_inode+0x1f/0x40
[  973.581222]  shmem_get_inode+0x75/0x750
[  973.585212]  __shmem_file_setup.part.0+0x111/0x400
[  973.590150]  ? __alloc_fd+0x1d4/0x4a0
[  973.593955]  ? shmem_fill_super+0x8c0/0x8c0
[  973.598292]  SyS_memfd_create+0x1f9/0x3a0
[  973.602450]  ? shmem_fcntl+0x130/0x130
[  973.606341]  ? do_syscall_64+0x53/0x640
[  973.610322]  ? shmem_fcntl+0x130/0x130
[  973.614229]  do_syscall_64+0x1e8/0x640
[  973.618121]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  973.623001]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  973.628193] RIP: 0033:0x45c429
[  973.631383] RSP: 002b:00007fc291a4ca68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[  973.639198] RAX: ffffffffffffffda RBX: 00007fc291a4d6d4 RCX: 000000000045c429
[  973.646471] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c14d8
[  973.653741] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000001
[  973.661013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
00:39:47 executing program 1 (fault-call:3 fault-nth:3):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)

[  973.668287] R13: 0000000000000bdd R14: 00000000004cdb93 R15: 0000000000000002
00:39:47 executing program 0 (fault-call:3 fault-nth:3):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@type={'type', 0x3d, "29d59191"}}]})

[  973.775883] FAULT_INJECTION: forcing a failure.
[  973.775883] name failslab, interval 1, probability 0, space 0, times 0
[  973.796086] FAULT_INJECTION: forcing a failure.
[  973.796086] name failslab, interval 1, probability 0, space 0, times 0
[  973.813457] CPU: 0 PID: 10865 Comm: syz-executor.0 Not tainted 4.14.171-syzkaller #0
[  973.821360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  973.830716] Call Trace:
[  973.833307]  dump_stack+0x142/0x197
[  973.836954]  should_fail.cold+0x10f/0x159
[  973.841114]  should_failslab+0xdb/0x130
[  973.845094]  kmem_cache_alloc+0x2d7/0x780
[  973.849244]  ? shmem_alloc_inode+0x1c/0x50
[  973.853489]  ? rcu_lockdep_current_cpu_online+0xf2/0x140
[  973.858951]  selinux_inode_alloc_security+0xb6/0x2a0
[  973.864065]  security_inode_alloc+0x94/0xd0
[  973.868395]  inode_init_always+0x552/0xaf0
[  973.872642]  alloc_inode+0x81/0x180
[  973.876278]  new_inode_pseudo+0x19/0xf0
[  973.880264]  new_inode+0x1f/0x40
[  973.883636]  shmem_get_inode+0x75/0x750
[  973.887629]  __shmem_file_setup.part.0+0x111/0x400
[  973.892557]  ? __alloc_fd+0x1d4/0x4a0
[  973.896354]  ? shmem_fill_super+0x8c0/0x8c0
[  973.900681]  SyS_memfd_create+0x1f9/0x3a0
[  973.904837]  ? shmem_fcntl+0x130/0x130
[  973.908724]  ? do_syscall_64+0x53/0x640
[  973.912698]  ? shmem_fcntl+0x130/0x130
[  973.916588]  do_syscall_64+0x1e8/0x640
[  973.920477]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  973.925323]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  973.930508] RIP: 0033:0x45c429
[  973.933699] RSP: 002b:00007fc291a4ca68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[  973.941408] RAX: ffffffffffffffda RBX: 00007fc291a4d6d4 RCX: 000000000045c429
[  973.948683] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c14d8
[  973.955949] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000001
[  973.963224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[  973.970494] R13: 0000000000000bdd R14: 00000000004cdb93 R15: 0000000000000003
[  973.977779] CPU: 1 PID: 10866 Comm: syz-executor.1 Not tainted 4.14.171-syzkaller #0
[  973.985676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  973.995030] Call Trace:
[  973.997617]  dump_stack+0x142/0x197
[  974.001246]  should_fail.cold+0x10f/0x159
[  974.005411]  should_failslab+0xdb/0x130
[  974.009382]  kmem_cache_alloc+0x2d7/0x780
[  974.013539]  ? shmem_alloc_inode+0x1c/0x50
[  974.017787]  ? rcu_lockdep_current_cpu_online+0xf2/0x140
[  974.023235]  selinux_inode_alloc_security+0xb6/0x2a0
[  974.028332]  security_inode_alloc+0x94/0xd0
[  974.032656]  inode_init_always+0x552/0xaf0
[  974.036889]  alloc_inode+0x81/0x180
[  974.040508]  new_inode_pseudo+0x19/0xf0
[  974.044479]  new_inode+0x1f/0x40
[  974.047836]  shmem_get_inode+0x75/0x750
[  974.051806]  __shmem_file_setup.part.0+0x111/0x400
[  974.056737]  ? __alloc_fd+0x1d4/0x4a0
[  974.060530]  ? shmem_fill_super+0x8c0/0x8c0
[  974.064853]  SyS_memfd_create+0x1f9/0x3a0
[  974.069016]  ? shmem_fcntl+0x130/0x130
[  974.072915]  ? do_syscall_64+0x53/0x640
[  974.076896]  ? shmem_fcntl+0x130/0x130
[  974.080805]  do_syscall_64+0x1e8/0x640
[  974.084690]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  974.089534]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  974.094719] RIP: 0033:0x45c429
[  974.097900] RSP: 002b:00007f429bd33a68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[  974.105620] RAX: ffffffffffffffda RBX: 00007f429bd346d4 RCX: 000000000045c429
[  974.112882] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c14d8
[  974.120157] RBP: 000000000076bf20 R08: 0000000000829050 R09: 0000000000000001
[  974.127421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[  974.134681] R13: 0000000000000bd3 R14: 00000000004cdac0 R15: 0000000000000003
00:39:48 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r6, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r6, 0x0)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r7, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:39:48 executing program 2:
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dlm-monitor\x00', 0x440300, 0x0)
r1 = socket$inet(0x2, 0x4000000805, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
r3 = dup3(r1, r2, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, <r4=>0x0]}, &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0xe, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b38b)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000400)={r4, 0x3000}, 0x8)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@nodecompose='nodecompose'}]})
syz_mount_image$cifs(&(0x7f0000000000)='cifs\x00', &(0x7f0000000040)='./file0\x00', 0x100, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="b42852a86b5ff731809de4c0d8b560e7df4238e9b5bbc1185f12c84c3cf9e26161cbdff638291f4c72d2367499d36de33bff63a33029b0f9778c112a3461cf9f7a2c54b4c2385b5d81f243091b7d6ac406328b2231fb", 0x56, 0x7}, {&(0x7f0000000180)="b092438b623fa96dbec54e2a10018b4c137f2afba82b03a300b9bdc9df37921dc153c07895daf9e03dc0bc89157aeba9492e909332cc396b73c876a57cbe8c292bb6322fc0598b3c9dbb8bfba9d15abb5d4bb883b6690818e59b3b80858339e38c062538793be4ce0f0836f234ec02c6068b9a6bbdb6301baf9594ca355d1bd48e4fc7268c6f88ea8e306b11921207e2c0ef4882365ff48599eb04c628c477bc2627288500863a56d8728c77de83faef0b23b7e92cc1acaa6f383b", 0xbb, 0x1a4d}, {&(0x7f0000000240)="0f7ba8fc767e0e7b266c08609b9de7d78d7e0654f8709bd7e86990b5829b7f35d302d01921828fac9620b17bfae112d2854cc82344f34be2a443a1b9ff35a78e1a4979c5379b52b5a328e2045097a8cf57afd34b246482a28e8d57a87e04470acc791ad7162b0411505ff4ffd50460ad01abed07dba068f3406184df8242bf212cd94d40b36e226e6633941473f9b54463b4c8dd5aa33225a271279c8986c3f1359527095c763fe3864afb56532723115ff6e87a55ed00da", 0xb8, 0x3}], 0x200800, &(0x7f0000000380)='hfsplus\x00')

00:39:48 executing program 0 (fault-call:3 fault-nth:4):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@type={'type', 0x3d, "29d59191"}}]})

00:39:48 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

[  974.396793] hfsplus: unable to find HFS+ superblock
[  974.436590] FAULT_INJECTION: forcing a failure.
[  974.436590] name failslab, interval 1, probability 0, space 0, times 0
[  974.465183] CPU: 0 PID: 10892 Comm: syz-executor.0 Not tainted 4.14.171-syzkaller #0
[  974.473094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  974.476736] CIFS VFS: Malformed UNC in devname.
[  974.482447] Call Trace:
[  974.482468]  dump_stack+0x142/0x197
[  974.482487]  should_fail.cold+0x10f/0x159
[  974.482509]  should_failslab+0xdb/0x130
[  974.482525]  kmem_cache_alloc+0x2d7/0x780
[  974.482544]  ? lock_downgrade+0x740/0x740
[  974.482561]  get_empty_filp+0x8c/0x3f0
[  974.513757]  alloc_file+0x23/0x440
[  974.517311]  __shmem_file_setup.part.0+0x1b1/0x400
[  974.522247]  ? __alloc_fd+0x1d4/0x4a0
[  974.526054]  ? shmem_fill_super+0x8c0/0x8c0
[  974.530387]  SyS_memfd_create+0x1f9/0x3a0
[  974.534538]  ? shmem_fcntl+0x130/0x130
[  974.538425]  ? do_syscall_64+0x53/0x640
[  974.542407]  ? shmem_fcntl+0x130/0x130
[  974.546304]  do_syscall_64+0x1e8/0x640
[  974.550215]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  974.555073]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  974.560269] RIP: 0033:0x45c429
[  974.563460] RSP: 002b:00007fc291a4ca68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[  974.571171] RAX: ffffffffffffffda RBX: 00007fc291a4d6d4 RCX: 000000000045c429
[  974.578441] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c14d8
00:39:48 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)="51d6f49b2e6cd2bf32edce198281782349943ecf6cd44e494b91ccc59521770966c809c43fd99a15dc8586e69c271c097ac5cd67caf18db29750076e6b16882a52c8fd8acc389189098da53edafb1f5bb6dde4fe80a718716613b3973ecdd97c7be12f8a6ff07d969de7086f1b4800edf2c8be83f61cdaff7750c38675e91345e4f4137f381d1f97caab2ad0ba1c87899c6b90bc66856661e010ef733d9447bc0c677fd2dd9014f32d247c481a50e84e2bd0e4a6e6dae2845769fd64f7f3875bb2e7a669989f2cf0a165abf4a92c123c28e3f7c9733c2139", 0xd8, 0xfffffffffffffff9)
keyctl$describe(0x6, r1, &(0x7f00000001c0)=""/143, 0x8f)
r2 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

[  974.585712] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000001
[  974.592986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[  974.600254] R13: 0000000000000bdd R14: 00000000004cdb93 R15: 0000000000000004
00:39:48 executing program 3:
ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000080)={0x9, @output={0x0, 0x1, {0x6, 0xac5}, 0xeda1, 0x101}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x2)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

00:39:48 executing program 1 (fault-call:3 fault-nth:4):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)

[  974.651731] hfsplus: unable to find HFS+ superblock
00:39:48 executing program 0 (fault-call:3 fault-nth:5):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@type={'type', 0x3d, "29d59191"}}]})

00:39:48 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x1000, 0x0, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)
r4 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f0000000140)={'broute\x00', 0x0, 0x0, 0x0, [], 0x9, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x108)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

00:39:48 executing program 2:
r0 = semget(0x1, 0x0, 0x0)
semctl$SEM_INFO(r0, 0x1, 0x13, 0x0)
semctl$GETVAL(r0, 0x3, 0xc, &(0x7f00000007c0)=""/4096)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@nodecompose='nodecompose'}]})

[  974.778276] FAULT_INJECTION: forcing a failure.
[  974.778276] name failslab, interval 1, probability 0, space 0, times 0
[  974.793648] FAULT_INJECTION: forcing a failure.
[  974.793648] name failslab, interval 1, probability 0, space 0, times 0
[  974.843556] CPU: 1 PID: 10913 Comm: syz-executor.1 Not tainted 4.14.171-syzkaller #0
[  974.851487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  974.860850] Call Trace:
[  974.863452]  dump_stack+0x142/0x197
[  974.867103]  should_fail.cold+0x10f/0x159
[  974.871265]  should_failslab+0xdb/0x130
[  974.875254]  kmem_cache_alloc+0x2d7/0x780
[  974.878474] hfsplus: unable to find HFS+ superblock
[  974.879415]  ? lock_downgrade+0x740/0x740
[  974.888577]  get_empty_filp+0x8c/0x3f0
[  974.892471]  alloc_file+0x23/0x440
[  974.896013]  __shmem_file_setup.part.0+0x1b1/0x400
[  974.900938]  ? __alloc_fd+0x1d4/0x4a0
[  974.904735]  ? shmem_fill_super+0x8c0/0x8c0
[  974.909063]  SyS_memfd_create+0x1f9/0x3a0
[  974.913213]  ? shmem_fcntl+0x130/0x130
[  974.917098]  ? do_syscall_64+0x53/0x640
[  974.921066]  ? shmem_fcntl+0x130/0x130
[  974.924950]  do_syscall_64+0x1e8/0x640
[  974.928836]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  974.933693]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  974.938884] RIP: 0033:0x45c429
[  974.942073] RSP: 002b:00007f429bd33a68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[  974.949776] RAX: ffffffffffffffda RBX: 00007f429bd346d4 RCX: 000000000045c429
[  974.957040] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c14d8
[  974.964326] RBP: 000000000076bf20 R08: 0000000000829050 R09: 0000000000000001
[  974.971588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[  974.978853] R13: 0000000000000bd3 R14: 00000000004cdac0 R15: 0000000000000004
[  974.986135] CPU: 0 PID: 10914 Comm: syz-executor.0 Not tainted 4.14.171-syzkaller #0
[  974.994036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  975.003389] Call Trace:
[  975.005984]  dump_stack+0x142/0x197
[  975.009620]  should_fail.cold+0x10f/0x159
[  975.013780]  should_failslab+0xdb/0x130
[  975.017760]  kmem_cache_alloc+0x2d7/0x780
[  975.021913]  ? rcu_lockdep_current_cpu_online+0xf2/0x140
[  975.027363]  ? check_preemption_disabled+0x3c/0x250
[  975.032385]  selinux_file_alloc_security+0xb4/0x190
[  975.037412]  security_file_alloc+0x6d/0xa0
[  975.041660]  get_empty_filp+0x162/0x3f0
[  975.045646]  alloc_file+0x23/0x440
[  975.049197]  __shmem_file_setup.part.0+0x1b1/0x400
[  975.054130]  ? __alloc_fd+0x1d4/0x4a0
[  975.058062]  ? shmem_fill_super+0x8c0/0x8c0
[  975.062405]  SyS_memfd_create+0x1f9/0x3a0
[  975.066553]  ? shmem_fcntl+0x130/0x130
[  975.070437]  ? do_syscall_64+0x53/0x640
[  975.074403]  ? shmem_fcntl+0x130/0x130
[  975.078283]  do_syscall_64+0x1e8/0x640
[  975.082164]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  975.087006]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  975.092194] RIP: 0033:0x45c429
[  975.095372] RSP: 002b:00007fc291a4ca68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[  975.103076] RAX: ffffffffffffffda RBX: 00007fc291a4d6d4 RCX: 000000000045c429
[  975.110335] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c14d8
[  975.117594] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000001
[  975.124854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[  975.132124] R13: 0000000000000bdd R14: 00000000004cdb93 R15: 0000000000000005
00:39:49 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r6, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r6, 0x0)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r7, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:39:49 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2c010, &(0x7f0000000000)={[{@barrier='barrier'}]})

00:39:49 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:39:49 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6402636f6d706f53654a143ec5d4fd98b82c00"])

00:39:49 executing program 1 (fault-call:3 fault-nth:5):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)

00:39:49 executing program 0 (fault-call:3 fault-nth:6):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@type={'type', 0x3d, "29d59191"}}]})

[  975.472275] FAULT_INJECTION: forcing a failure.
[  975.472275] name failslab, interval 1, probability 0, space 0, times 0
[  975.485599] FAULT_INJECTION: forcing a failure.
[  975.485599] name failslab, interval 1, probability 0, space 0, times 0
[  975.506844] hfsplus: unable to parse mount options
[  975.520905] CPU: 0 PID: 10952 Comm: syz-executor.1 Not tainted 4.14.171-syzkaller #0
[  975.528810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  975.538169] Call Trace:
[  975.540771]  dump_stack+0x142/0x197
[  975.544423]  should_fail.cold+0x10f/0x159
[  975.548580]  should_failslab+0xdb/0x130
[  975.552560]  kmem_cache_alloc+0x2d7/0x780
[  975.556716]  ? rcu_lockdep_current_cpu_online+0xf2/0x140
[  975.562171]  ? check_preemption_disabled+0x3c/0x250
[  975.567196]  selinux_file_alloc_security+0xb4/0x190
[  975.572215]  security_file_alloc+0x6d/0xa0
[  975.576457]  get_empty_filp+0x162/0x3f0
[  975.580431]  alloc_file+0x23/0x440
[  975.583980]  __shmem_file_setup.part.0+0x1b1/0x400
[  975.588915]  ? __alloc_fd+0x1d4/0x4a0
[  975.592716]  ? shmem_fill_super+0x8c0/0x8c0
[  975.597052]  SyS_memfd_create+0x1f9/0x3a0
[  975.601204]  ? shmem_fcntl+0x130/0x130
[  975.605089]  ? do_syscall_64+0x53/0x640
[  975.609069]  ? shmem_fcntl+0x130/0x130
[  975.612964]  do_syscall_64+0x1e8/0x640
[  975.616869]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  975.621722]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  975.626903] RIP: 0033:0x45c429
[  975.630093] RSP: 002b:00007f429bd33a68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[  975.637807] RAX: ffffffffffffffda RBX: 00007f429bd346d4 RCX: 000000000045c429
[  975.645086] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c14d8
[  975.652358] RBP: 000000000076bf20 R08: 0000000000829050 R09: 0000000000000001
[  975.659632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[  975.666904] R13: 0000000000000bd3 R14: 00000000004cdac0 R15: 0000000000000005
[  975.674482] CPU: 1 PID: 10951 Comm: syz-executor.0 Not tainted 4.14.171-syzkaller #0
[  975.682415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  975.691790] Call Trace:
[  975.694384]  dump_stack+0x142/0x197
[  975.698024]  should_fail.cold+0x10f/0x159
[  975.702185]  should_failslab+0xdb/0x130
[  975.706171]  kmem_cache_alloc+0x2d7/0x780
[  975.710324]  ? do_sys_ftruncate.constprop.0+0x35c/0x490
[  975.715696]  getname_flags+0xcb/0x580
[  975.719502]  getname+0x1a/0x20
[  975.722698]  do_sys_open+0x1e7/0x430
[  975.726417]  ? filp_open+0x70/0x70
[  975.729963]  ? do_sys_ftruncate.constprop.0+0x370/0x490
[  975.735327]  SyS_open+0x2d/0x40
[  975.738609]  ? do_sys_open+0x430/0x430
[  975.742502]  do_syscall_64+0x1e8/0x640
[  975.746393]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  975.751249]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  975.756437] RIP: 0033:0x4161c1
[  975.759623] RSP: 002b:00007fc291a4ca60 EFLAGS: 00000293 ORIG_RAX: 0000000000000002
[  975.767340] RAX: ffffffffffffffda RBX: 00007fc291a4d6d4 RCX: 00000000004161c1
[  975.774609] RDX: 00007fc291a4cb0a RSI: 0000000000000002 RDI: 00007fc291a4cb00
[  975.781877] RBP: 000000000076bf20 R08: 0000000000000000 R09: 000000000000000a
[  975.789148] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000006
[  975.796440] R13: 0000000000000bdd R14: 00000000004cdb93 R15: 0000000000000006
[  975.826144] hfsplus: unable to parse mount options
00:39:49 executing program 1 (fault-call:3 fault-nth:6):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)

00:39:49 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@nodecompose='nodecompose'}]})
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xb}}, @in6={0xa, 0x4e20, 0x8c9, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}, 0x7f}, @in6={0xa, 0x4e23, 0x2, @loopback, 0x81}], 0x48)
writev(r0, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r0, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201)

[  975.909535] FAULT_INJECTION: forcing a failure.
[  975.909535] name failslab, interval 1, probability 0, space 0, times 0
[  975.943567] CPU: 0 PID: 10959 Comm: syz-executor.1 Not tainted 4.14.171-syzkaller #0
[  975.951482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  975.960838] Call Trace:
[  975.963450]  dump_stack+0x142/0x197
[  975.967094]  should_fail.cold+0x10f/0x159
[  975.971264]  should_failslab+0xdb/0x130
[  975.975246]  kmem_cache_alloc+0x2d7/0x780
[  975.979408]  ? do_sys_ftruncate.constprop.0+0x35c/0x490
[  975.984790]  getname_flags+0xcb/0x580
[  975.988603]  getname+0x1a/0x20
[  975.991805]  do_sys_open+0x1e7/0x430
[  975.995535]  ? filp_open+0x70/0x70
[  975.999091]  ? do_sys_ftruncate.constprop.0+0x370/0x490
[  976.004473]  SyS_open+0x2d/0x40
[  976.007763]  ? do_sys_open+0x430/0x430
[  976.011662]  do_syscall_64+0x1e8/0x640
[  976.015556]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  976.020406]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  976.025597] RIP: 0033:0x4161c1
[  976.028786] RSP: 002b:00007f429bd33a60 EFLAGS: 00000293 ORIG_RAX: 0000000000000002
[  976.036500] RAX: ffffffffffffffda RBX: 00007f429bd346d4 RCX: 00000000004161c1
[  976.043766] RDX: 00007f429bd33b0a RSI: 0000000000000002 RDI: 00007f429bd33b00
[  976.051031] RBP: 000000000076bf20 R08: 0000000000000000 R09: 000000000000000a
[  976.058293] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000006
[  976.065559] R13: 0000000000000bd3 R14: 00000000004cdac0 R15: 0000000000000006
00:39:50 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r6, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r6, 0x0)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r7, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

[  976.122307] hfsplus: unable to find HFS+ superblock
00:39:50 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2b, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="495405b01a41f117abfed700160101"])

00:39:50 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:39:50 executing program 0 (fault-call:3 fault-nth:7):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@type={'type', 0x3d, "29d59191"}}]})

[  976.340649] FAULT_INJECTION: forcing a failure.
[  976.340649] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  976.352502] CPU: 1 PID: 10982 Comm: syz-executor.0 Not tainted 4.14.171-syzkaller #0
[  976.360387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  976.369744] Call Trace:
[  976.372349]  dump_stack+0x142/0x197
[  976.375995]  should_fail.cold+0x10f/0x159
[  976.380158]  __alloc_pages_nodemask+0x1d6/0x7a0
[  976.384829]  ? fs_reclaim_acquire+0x20/0x20
[  976.389151]  ? __alloc_pages_slowpath+0x2930/0x2930
[  976.394183]  cache_grow_begin+0x80/0x400
[  976.398257]  kmem_cache_alloc+0x6a6/0x780
[  976.402430]  getname_flags+0xcb/0x580
[  976.406245]  getname+0x1a/0x20
[  976.409447]  do_sys_open+0x1e7/0x430
[  976.413167]  ? filp_open+0x70/0x70
[  976.416718]  ? do_sys_ftruncate.constprop.0+0x370/0x490
[  976.422086]  SyS_open+0x2d/0x40
[  976.425391]  ? do_sys_open+0x430/0x430
[  976.429301]  do_syscall_64+0x1e8/0x640
[  976.433192]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  976.438047]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  976.443251] RIP: 0033:0x4161c1
[  976.446441] RSP: 002b:00007fc291a4ca60 EFLAGS: 00000293 ORIG_RAX: 0000000000000002
[  976.454152] RAX: ffffffffffffffda RBX: 00007fc291a4d6d4 RCX: 00000000004161c1
[  976.461426] RDX: 00007fc291a4cb0a RSI: 0000000000000002 RDI: 00007fc291a4cb00
[  976.468699] RBP: 000000000076bf20 R08: 0000000000000000 R09: 000000000000000a
[  976.475981] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000006
[  976.483254] R13: 0000000000000bdd R14: 00000000004cdb93 R15: 0000000000000007
00:39:50 executing program 1 (fault-call:3 fault-nth:7):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)

[  976.501638] hfsplus: unable to parse mount options
[  976.556640] FAULT_INJECTION: forcing a failure.
[  976.556640] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  976.568494] CPU: 1 PID: 10995 Comm: syz-executor.1 Not tainted 4.14.171-syzkaller #0
[  976.576378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  976.585735] Call Trace:
[  976.588337]  dump_stack+0x142/0x197
[  976.591987]  should_fail.cold+0x10f/0x159
[  976.596156]  __alloc_pages_nodemask+0x1d6/0x7a0
[  976.600833]  ? fs_reclaim_acquire+0x20/0x20
[  976.605161]  ? __alloc_pages_slowpath+0x2930/0x2930
[  976.610199]  cache_grow_begin+0x80/0x400
[  976.614275]  kmem_cache_alloc+0x6a6/0x780
[  976.618434]  getname_flags+0xcb/0x580
[  976.622243]  getname+0x1a/0x20
[  976.625437]  do_sys_open+0x1e7/0x430
[  976.629157]  ? filp_open+0x70/0x70
[  976.632710]  ? do_sys_ftruncate.constprop.0+0x370/0x490
[  976.638081]  SyS_open+0x2d/0x40
[  976.641365]  ? do_sys_open+0x430/0x430
[  976.645257]  do_syscall_64+0x1e8/0x640
[  976.649153]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  976.654005]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  976.659221] RIP: 0033:0x4161c1
[  976.662416] RSP: 002b:00007f429bd33a60 EFLAGS: 00000293 ORIG_RAX: 0000000000000002
[  976.670126] RAX: ffffffffffffffda RBX: 00007f429bd346d4 RCX: 00000000004161c1
[  976.677405] RDX: 00007f429bd33b0a RSI: 0000000000000002 RDI: 00007f429bd33b00
[  976.684672] RBP: 000000000076bf20 R08: 0000000000000000 R09: 000000000000000a
[  976.691946] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000006
[  976.699221] R13: 0000000000000bd3 R14: 00000000004cdac0 R15: 0000000000000007
[  976.721995] hfsplus: unable to parse mount options
00:39:50 executing program 0 (fault-call:3 fault-nth:8):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@type={'type', 0x3d, "29d59191"}}]})

00:39:50 executing program 1 (fault-call:3 fault-nth:8):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)

00:39:50 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='nodec\a\x00pose,\x00'])
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
bind$vsock_dgram(r1, &(0x7f00000000c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r2, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r2, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000300)={0x3, 0x70, 0x6d, 0x5, 0x80, 0x1f, 0x0, 0x5, 0x2002, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x277780, 0x1, @perf_bp={&(0x7f00000002c0), 0x5}, 0x5d2e8d147ccbd884, 0x6, 0xffffffff, 0x7, 0xfff, 0x0, 0x3ff})
r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/qat_adf_ctl\x00', 0x2000, 0x0)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480)='/dev/zero\x00', 0x0, 0x0)
perf_event_open$cgroup(&(0x7f00000003c0)={0x5, 0x70, 0x40, 0x99, 0x1f, 0x1, 0x0, 0x57, 0x2, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000380), 0x2}, 0x4, 0x4, 0x8, 0x6, 0xfffffffffffff001, 0x6, 0x8}, r3, 0x9, r4, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x110, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x40}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x90}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}, @TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4e}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9cbd}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xda}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}]}, 0x110}}, 0x1)

[  976.864293] FAULT_INJECTION: forcing a failure.
[  976.864293] name failslab, interval 1, probability 0, space 0, times 0
[  976.892689] CPU: 1 PID: 11001 Comm: syz-executor.0 Not tainted 4.14.171-syzkaller #0
[  976.900604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  976.909965] Call Trace:
[  976.910844] FAULT_INJECTION: forcing a failure.
[  976.910844] name failslab, interval 1, probability 0, space 0, times 0
[  976.912571]  dump_stack+0x142/0x197
[  976.927379]  should_fail.cold+0x10f/0x159
[  976.931543]  should_failslab+0xdb/0x130
[  976.935526]  kmem_cache_alloc+0x2d7/0x780
[  976.939679]  ? save_stack+0xa9/0xd0
[  976.943314]  get_empty_filp+0x8c/0x3f0
[  976.947216]  path_openat+0x96/0x3e50
[  976.950958]  ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  976.956354]  ? trace_hardirqs_on+0x10/0x10
[  976.960591]  ? check_preemption_disabled+0x3c/0x250
[  976.965638]  ? path_lookupat.isra.0+0x7b0/0x7b0
[  976.970311]  ? find_held_lock+0x35/0x130
[  976.974374]  ? save_trace+0x290/0x290
[  976.978180]  ? __alloc_fd+0x1d4/0x4a0
[  976.981992]  do_filp_open+0x18e/0x250
[  976.985793]  ? may_open_dev+0xe0/0xe0
[  976.989593]  ? lock_downgrade+0x740/0x740
[  976.993747]  ? do_raw_spin_unlock+0x174/0x260
[  976.998240]  ? _raw_spin_unlock+0x2d/0x50
[  977.002389]  ? __alloc_fd+0x1d4/0x4a0
[  977.006215]  do_sys_open+0x2c5/0x430
[  977.009934]  ? filp_open+0x70/0x70
[  977.013478]  ? do_sys_ftruncate.constprop.0+0x370/0x490
[  977.018844]  SyS_open+0x2d/0x40
[  977.022137]  ? do_sys_open+0x430/0x430
[  977.026032]  do_syscall_64+0x1e8/0x640
[  977.029916]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  977.034764]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  977.039951] RIP: 0033:0x4161c1
[  977.043160] RSP: 002b:00007fc291a4ca60 EFLAGS: 00000293 ORIG_RAX: 0000000000000002
[  977.050896] RAX: ffffffffffffffda RBX: 00007fc291a4d6d4 RCX: 00000000004161c1
[  977.058164] RDX: 00007fc291a4cb0a RSI: 0000000000000002 RDI: 00007fc291a4cb00
[  977.065434] RBP: 000000000076bf20 R08: 0000000000000000 R09: 000000000000000a
[  977.072702] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000006
[  977.079967] R13: 0000000000000bdd R14: 00000000004cdb93 R15: 0000000000000008
[  977.103557] CPU: 0 PID: 11004 Comm: syz-executor.1 Not tainted 4.14.171-syzkaller #0
[  977.111463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  977.120819] Call Trace:
[  977.123420]  dump_stack+0x142/0x197
[  977.127064]  should_fail.cold+0x10f/0x159
[  977.131224]  should_failslab+0xdb/0x130
[  977.135203]  kmem_cache_alloc+0x2d7/0x780
[  977.139352]  ? save_stack+0xa9/0xd0
[  977.142989]  get_empty_filp+0x8c/0x3f0
[  977.146880]  path_openat+0x96/0x3e50
[  977.150600]  ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  977.155975]  ? trace_hardirqs_on+0x10/0x10
[  977.160214]  ? check_preemption_disabled+0x3c/0x250
[  977.165243]  ? path_lookupat.isra.0+0x7b0/0x7b0
[  977.169919]  ? find_held_lock+0x35/0x130
[  977.173987]  ? save_trace+0x290/0x290
[  977.177803]  ? __alloc_fd+0x1d4/0x4a0
[  977.181610]  do_filp_open+0x18e/0x250
[  977.185413]  ? may_open_dev+0xe0/0xe0
[  977.189222]  ? lock_downgrade+0x740/0x740
[  977.193391]  ? do_raw_spin_unlock+0x174/0x260
[  977.197897]  ? _raw_spin_unlock+0x2d/0x50
[  977.202054]  ? __alloc_fd+0x1d4/0x4a0
[  977.205873]  do_sys_open+0x2c5/0x430
[  977.209596]  ? filp_open+0x70/0x70
[  977.213151]  ? do_sys_ftruncate.constprop.0+0x370/0x490
[  977.218530]  SyS_open+0x2d/0x40
[  977.221817]  ? do_sys_open+0x430/0x430
[  977.225715]  do_syscall_64+0x1e8/0x640
[  977.229606]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  977.234459]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  977.239654] RIP: 0033:0x4161c1
[  977.242851] RSP: 002b:00007f429bd33a60 EFLAGS: 00000293 ORIG_RAX: 0000000000000002
[  977.250568] RAX: ffffffffffffffda RBX: 00007f429bd346d4 RCX: 00000000004161c1
[  977.257842] RDX: 00007f429bd33b0a RSI: 0000000000000002 RDI: 00007f429bd33b00
[  977.265115] RBP: 000000000076bf20 R08: 0000000000000000 R09: 000000000000000a
[  977.272390] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000006
[  977.279663] R13: 0000000000000bd3 R14: 00000000004cdac0 R15: 0000000000000008
00:39:51 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r6, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r6, 0x0)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r7, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:39:51 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r4 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r4, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
sendfile(r3, r4, 0x0, 0x20000102000003)

00:39:51 executing program 0 (fault-call:3 fault-nth:9):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@type={'type', 0x3d, "29d59191"}}]})

[  977.486945] FAULT_INJECTION: forcing a failure.
[  977.486945] name failslab, interval 1, probability 0, space 0, times 0
[  977.551109] CPU: 1 PID: 11022 Comm: syz-executor.0 Not tainted 4.14.171-syzkaller #0
[  977.559040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  977.568392] Call Trace:
[  977.570987]  dump_stack+0x142/0x197
[  977.574619]  should_fail.cold+0x10f/0x159
[  977.578772]  should_failslab+0xdb/0x130
[  977.582746]  kmem_cache_alloc_trace+0x2e9/0x790
[  977.587415]  ? __lockdep_init_map+0x10c/0x570
[  977.591974]  ? loop_get_status64+0x120/0x120
[  977.596388]  __kthread_create_on_node+0xe3/0x3e0
[  977.601146]  ? kthread_park+0x140/0x140
[  977.605119]  ? __fget+0x210/0x370
[  977.608578]  ? loop_get_status64+0x120/0x120
[  977.612983]  kthread_create_on_node+0xa8/0xd0
[  977.617476]  ? __kthread_create_on_node+0x3e0/0x3e0
[  977.622488]  ? __lockdep_init_map+0x10c/0x570
[  977.626981]  lo_ioctl+0xce3/0x1cd0
[  977.630515]  ? debug_check_no_obj_freed+0x2aa/0x7b7
[  977.635541]  ? loop_probe+0x160/0x160
[  977.639343]  blkdev_ioctl+0x95f/0x1850
[  977.643228]  ? blkpg_ioctl+0x970/0x970
[  977.647117]  ? __might_sleep+0x93/0xb0
[  977.650996]  ? __fget+0x210/0x370
[  977.654454]  block_ioctl+0xde/0x120
[  977.658079]  ? blkdev_fallocate+0x3b0/0x3b0
[  977.662396]  do_vfs_ioctl+0x7ae/0x1060
[  977.666282]  ? selinux_file_mprotect+0x5d0/0x5d0
[  977.671032]  ? lock_downgrade+0x740/0x740
[  977.675186]  ? ioctl_preallocate+0x1c0/0x1c0
[  977.679593]  ? __fget+0x237/0x370
[  977.683050]  ? security_file_ioctl+0x89/0xb0
[  977.687462]  SyS_ioctl+0x8f/0xc0
[  977.690824]  ? do_vfs_ioctl+0x1060/0x1060
[  977.694970]  do_syscall_64+0x1e8/0x640
[  977.698850]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  977.703696]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  977.708875] RIP: 0033:0x45c297
[  977.712072] RSP: 002b:00007fc291a4ca68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  977.719773] RAX: ffffffffffffffda RBX: 00007fc291a4d6d4 RCX: 000000000045c297
[  977.727036] RDX: 0000000000000007 RSI: 0000000000004c00 RDI: 0000000000000008
[  977.734301] RBP: 000000000076bf20 R08: 0000000000000000 R09: 000000000000000a
[  977.741561] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006
00:39:51 executing program 1 (fault-call:3 fault-nth:9):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)

[  977.748839] R13: 0000000000000bdd R14: 00000000004cdb93 R15: 0000000000000009
00:39:51 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
r2 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
setuid(r3)
r4 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r5=>0x0}, &(0x7f0000cab000)=0xc)
setuid(r5)
setuid(r5)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6e6ff1b0e1a1227b4d9193b467ce9a199e6612f349153ccb652c7569643e", @ANYRESDEC=r1, @ANYBLOB=',\x00'])

[  977.805463] FAULT_INJECTION: forcing a failure.
[  977.805463] name failslab, interval 1, probability 0, space 0, times 0
[  977.845665] CPU: 0 PID: 11033 Comm: syz-executor.1 Not tainted 4.14.171-syzkaller #0
[  977.853583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  977.862947] Call Trace:
[  977.865549]  dump_stack+0x142/0x197
[  977.869189]  should_fail.cold+0x10f/0x159
[  977.873351]  should_failslab+0xdb/0x130
[  977.877334]  kmem_cache_alloc+0x2d7/0x780
[  977.881488]  ? rcu_lockdep_current_cpu_online+0xf2/0x140
[  977.886946]  ? check_preemption_disabled+0x3c/0x250
[  977.891975]  selinux_file_alloc_security+0xb4/0x190
[  977.896995]  security_file_alloc+0x6d/0xa0
[  977.901234]  get_empty_filp+0x162/0x3f0
[  977.905213]  path_openat+0x96/0x3e50
[  977.908933]  ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  977.914299]  ? trace_hardirqs_on+0x10/0x10
[  977.918539]  ? check_preemption_disabled+0x3c/0x250
[  977.923568]  ? path_lookupat.isra.0+0x7b0/0x7b0
[  977.928241]  ? find_held_lock+0x35/0x130
[  977.932311]  ? save_trace+0x290/0x290
[  977.936120]  ? __alloc_fd+0x1d4/0x4a0
[  977.939933]  do_filp_open+0x18e/0x250
[  977.943759]  ? may_open_dev+0xe0/0xe0
[  977.947576]  ? lock_downgrade+0x740/0x740
[  977.951748]  ? do_raw_spin_unlock+0x174/0x260
[  977.956250]  ? _raw_spin_unlock+0x2d/0x50
[  977.960404]  ? __alloc_fd+0x1d4/0x4a0
[  977.964248]  do_sys_open+0x2c5/0x430
[  977.967977]  ? filp_open+0x70/0x70
[  977.971525]  ? do_sys_ftruncate.constprop.0+0x370/0x490
[  977.976906]  SyS_open+0x2d/0x40
[  977.980196]  ? do_sys_open+0x430/0x430
[  977.984092]  do_syscall_64+0x1e8/0x640
[  977.987987]  ? trace_hardirqs_off_thunk+0x1a/0x1c
00:39:52 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f0000000000)=""/198)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="6e6f64a54e7ca3706f73650000"])

[  977.992841]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  977.998039] RIP: 0033:0x4161c1
[  978.001230] RSP: 002b:00007f429bd33a60 EFLAGS: 00000293 ORIG_RAX: 0000000000000002
[  978.008946] RAX: ffffffffffffffda RBX: 00007f429bd346d4 RCX: 00000000004161c1
[  978.016218] RDX: 00007f429bd33b0a RSI: 0000000000000002 RDI: 00007f429bd33b00
[  978.023492] RBP: 000000000076bf20 R08: 0000000000000000 R09: 000000000000000a
[  978.030765] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000006
[  978.038036] R13: 0000000000000bd3 R14: 00000000004cdac0 R15: 0000000000000009
[  978.125244] hfsplus: unable to parse mount options
00:39:52 executing program 1 (fault-call:3 fault-nth:10):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)

00:39:52 executing program 0 (fault-call:3 fault-nth:10):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@type={'type', 0x3d, "29d59191"}}]})

[  978.208993] hfsplus: unable to parse mount options
[  978.233425] FAULT_INJECTION: forcing a failure.
[  978.233425] name failslab, interval 1, probability 0, space 0, times 0
[  978.260780] CPU: 0 PID: 11052 Comm: syz-executor.1 Not tainted 4.14.171-syzkaller #0
[  978.268687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  978.278046] Call Trace:
[  978.280647]  dump_stack+0x142/0x197
[  978.284306]  should_fail.cold+0x10f/0x159
[  978.288471]  should_failslab+0xdb/0x130
[  978.292497]  kmem_cache_alloc+0x2d7/0x780
[  978.296659]  ? trace_hardirqs_on+0x10/0x10
[  978.300909]  __d_alloc+0x2d/0x9f0
[  978.304362]  ? save_trace+0x290/0x290
[  978.308169]  d_alloc+0x4d/0x270
[  978.311458]  d_alloc_parallel+0xe5/0x1800
[  978.315617]  ? lock_downgrade+0x740/0x740
[  978.319778]  ? __d_lookup_rcu+0x630/0x630
[  978.323941]  ? d_lookup+0xe5/0x240
[  978.327491]  ? d_lookup+0x166/0x240
[  978.331127]  lookup_open+0x493/0x1860
[  978.334927]  ? save_trace+0x290/0x290
[  978.338741]  ? complete_walk+0x1f0/0x1f0
[  978.342820]  path_openat+0x191d/0x3e50
[  978.346711]  ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  978.352096]  ? path_lookupat.isra.0+0x7b0/0x7b0
[  978.356768]  ? find_held_lock+0x35/0x130
[  978.356806]  ? save_trace+0x290/0x290
[  978.364670]  ? __alloc_fd+0x1d4/0x4a0
[  978.368481]  do_filp_open+0x18e/0x250
[  978.372287]  ? may_open_dev+0xe0/0xe0
[  978.376103]  ? do_raw_spin_unlock+0x174/0x260
00:39:52 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r2, &(0x7f0000c34fff), 0xffffff0b)
r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
fallocate(r3, 0x1, 0x0, 0x369e5d84)
r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000f00)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r4, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20008000)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x20200}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x14, r4, 0x8, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20000)
write$P9_RREADLINK(r2, 0x0, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000080)={0x980000, 0xef, 0x7, <r5=>r2, 0x0, &(0x7f0000000000)={0xa20001, 0x3, [], @value=0x100}})
ioctl$KVM_SET_XSAVE(r5, 0x5000aea5, &(0x7f00000000c0)={[0x3, 0x8, 0x7, 0x1, 0x7, 0x7fff, 0x9, 0x800, 0x6, 0x3, 0x4, 0x101, 0x6, 0x4, 0xfffff0da, 0x81, 0x1, 0xfff, 0x8be1, 0x3b6, 0x1ff, 0xbd1d, 0x2, 0x6c7, 0x3ff, 0x10001, 0x8000, 0x137, 0x40, 0x20, 0x200, 0xb949, 0x2, 0x7ff, 0x1f, 0xffffffd4, 0x60, 0x4, 0x9, 0x2, 0x8, 0x5cf8b6c9, 0x401, 0x7, 0x8, 0xfffffffa, 0x4, 0x8, 0xffffff81, 0x1, 0x9, 0x1c, 0xffffffff, 0x0, 0x3, 0x8000, 0x800, 0x8, 0x8, 0xd, 0x6, 0x3, 0x1, 0x68, 0x7, 0x40, 0x80000000, 0x3, 0x7, 0x1f, 0x0, 0x1c0, 0x8000, 0x80000000, 0x9, 0xc62, 0x9, 0xffffff00, 0xffff, 0xfff, 0x7, 0xcc26, 0x8, 0x8001, 0xba, 0x9, 0x157, 0x2, 0x6, 0x679e, 0x4, 0x8, 0x6, 0x5, 0x401, 0xffff, 0x6, 0x0, 0x5, 0x101, 0x0, 0x2b9af20a, 0x3, 0x200, 0x9ae2, 0x64, 0x3, 0x3ff, 0x8, 0xfffffffa, 0x5, 0xfffffffe, 0x2f7, 0x8, 0x9, 0xfffff5b6, 0x5, 0xff, 0x1ff, 0x3, 0x101, 0x0, 0x4, 0x1, 0x0, 0x1f, 0x2f6, 0x3, 0xff, 0x6ee, 0x8a3, 0x101, 0x5a7, 0x80000, 0x1, 0x50000000, 0x200000, 0x101, 0x6f5, 0x5, 0x2, 0xfffffffa, 0x0, 0xffffffff, 0x80000000, 0x3ff, 0x72c, 0x7, 0xe, 0xee56, 0x1, 0xfff, 0xffffffff, 0x9, 0x7c, 0x185, 0x7, 0x8000, 0x1ff, 0x81, 0x5, 0x7, 0x5, 0x80, 0x4, 0xf4, 0x20, 0x9, 0x8b4, 0xffffff0e, 0x6, 0xeca1, 0x9bd, 0x9, 0x3, 0x2, 0xb9, 0x1ff, 0x1, 0x21f, 0x8, 0x4, 0x7f, 0xf9e, 0x3, 0xff, 0x0, 0xfffffffc, 0x1, 0x2, 0x7fff, 0x5, 0xb73, 0x4e, 0x76b4, 0x80, 0x2, 0x8, 0x0, 0x5, 0xffff, 0x5, 0x7, 0x5, 0xffffffe1, 0x9, 0x3f, 0x6, 0x2, 0x1, 0xfffeffff, 0x3, 0x200, 0xfffff801, 0x9, 0x4, 0x50, 0x5, 0x8000, 0x1ff, 0x2ea7, 0x7, 0xffffffe1, 0x200, 0x9, 0x0, 0x8001, 0x6, 0x9, 0x1, 0x8000, 0x200, 0x8, 0x0, 0x8, 0xffff, 0x4, 0x3, 0x5, 0xa799, 0x5, 0x5, 0x8, 0x1ff, 0x7, 0x3, 0x1000, 0x9, 0x1a2, 0x40d, 0x8, 0x0, 0xffffffff, 0x77b, 0x3, 0x12a, 0x80000001, 0x3, 0x4ae1, 0x9, 0xffff, 0x9, 0x2, 0x9, 0x3, 0x1, 0x1f, 0x7ff, 0x80000000, 0xdb1, 0x3f, 0x9, 0x20, 0x2, 0x688, 0x2, 0x30ce, 0x800, 0x0, 0x1000, 0x1000, 0x5, 0x40, 0xffff, 0xfff, 0x9, 0x130, 0x81, 0x1f, 0x7, 0x2400000, 0x2, 0x1ff, 0x8, 0x3, 0x8, 0x2, 0x57, 0xfff, 0x40, 0x88, 0x8000, 0x81, 0x1, 0x9, 0x7, 0x800, 0x2, 0x3, 0x4, 0x63, 0x2, 0x8, 0x549b, 0x9eb6, 0x900, 0x1, 0x2, 0x1, 0x80000001, 0x3, 0x0, 0x7ff, 0x2, 0x3, 0x6, 0x4, 0x898c, 0x8, 0x8, 0xfff, 0x4, 0x80, 0x6cea, 0x40, 0x1, 0xfffffff8, 0x8, 0x3, 0x0, 0x5, 0x6, 0xfff, 0x1d, 0x6, 0x800, 0x6, 0x7ff, 0x1, 0xc51, 0x400, 0x9, 0x10001, 0x6, 0xfffffffa, 0x7, 0x7, 0x80000001, 0x100, 0x1, 0x400, 0x1ff, 0x2, 0x3, 0x1, 0x5d, 0x3, 0x10000, 0x80, 0x5, 0xbd85, 0x6, 0x0, 0xfffffc17, 0x401, 0x6, 0xfffffffd, 0xf64c, 0x1b, 0x800, 0x3, 0x8000, 0xfffff820, 0x1, 0x1, 0x2, 0x800, 0x2, 0x9, 0x8, 0x27, 0x6, 0x0, 0x4, 0x2, 0x0, 0xfbc, 0x1, 0x7, 0x257, 0xfffffffc, 0x8b0, 0x10001, 0x5, 0x832c, 0x101, 0x3, 0x5, 0x3f, 0x5, 0x5, 0x400, 0x1, 0x4, 0x10001, 0x7, 0x1ff, 0x7ff, 0x133, 0x1, 0x101, 0x1000, 0xffffffff, 0x5, 0x9, 0x800, 0x6, 0xfffff000, 0x2, 0x1, 0x80000001, 0xc42a, 0x4, 0x76, 0x0, 0x3, 0x4, 0x8, 0x6, 0x8, 0x100, 0x7ff, 0xfffffbff, 0x8001, 0x5, 0x8, 0x2, 0x2, 0x5, 0xc3c, 0x6, 0x1, 0x0, 0x9, 0x7, 0x1, 0x5, 0x80, 0xfffffff8, 0x2, 0x583, 0xdf, 0xf4, 0x986, 0x9, 0x2, 0x4, 0x3, 0x8001, 0x1, 0x7fff, 0x4, 0x1, 0x1, 0x1, 0x81, 0x7, 0x0, 0x1, 0x80000000, 0x9, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x2c, 0x7, 0x2, 0x2, 0x1ff, 0x7, 0x7, 0x5, 0x2, 0x2, 0x81, 0xfb71, 0x1000, 0x80000001, 0x0, 0x5, 0x10000, 0xfffffffc, 0x81, 0x101, 0x9, 0x5, 0x4, 0xafce, 0x4, 0x2ce, 0x60, 0x4, 0x94a8, 0x6, 0x7, 0xff, 0x8, 0x181, 0x2, 0x6, 0x5, 0x4, 0x401, 0x8, 0x2, 0x7, 0x6, 0x4, 0x0, 0x1, 0x8, 0x0, 0x8, 0x3c, 0x20, 0x7, 0x1f, 0xa51a, 0xc588, 0xa29, 0x7, 0xfffeffff, 0x4, 0x6, 0x0, 0xa17, 0x10001, 0x1, 0x3, 0x20, 0x2159, 0x3, 0x1, 0x3, 0x7fffffff, 0x3, 0x9, 0x8, 0x8, 0x3f, 0x99, 0x5a1d, 0x7, 0x3, 0x1, 0x6f2, 0x7, 0x2, 0xffffb29b, 0xfffffffb, 0x200, 0x6b, 0x461, 0x8, 0x7, 0x8001, 0x1, 0xfffffff7, 0x4, 0x20, 0x80000001, 0x0, 0x6, 0x8, 0x6c, 0xfff, 0x8, 0x4, 0x3, 0x8000000, 0x5, 0x6, 0x6, 0x10000, 0x5, 0x81, 0x6, 0x4, 0x1, 0x6, 0xfffffffa, 0xf1800000, 0xfffffffc, 0x81, 0x0, 0x4, 0xffff21da, 0x0, 0x3c, 0xb759, 0x1ff, 0x1, 0x8, 0xef1d, 0xfffff107, 0x2, 0x9, 0x1, 0xff, 0x7, 0x3f, 0xffff, 0xac98, 0x3f80, 0x1, 0xfffffffe, 0xfffeffff, 0xfffffffe, 0x0, 0x3, 0x8, 0x9, 0x35533f26, 0x1f, 0x0, 0x7ff, 0xfffffff9, 0x6, 0x6, 0x3f, 0x2, 0xfff, 0xffffffff, 0x8, 0x7f, 0x3, 0x80, 0xffff, 0xffffffff, 0x8, 0x4, 0x7, 0x9, 0x6, 0x3, 0x0, 0x1, 0x7, 0x6, 0xfffffffa, 0xbcc, 0x4, 0x8, 0xe00, 0xf7, 0x53ab, 0xe, 0x401, 0x3ff, 0x4, 0x20, 0x60, 0x4, 0x9, 0xffffffff, 0x401, 0x10001, 0x1, 0x80, 0x1, 0x1, 0x9, 0x7, 0x4, 0xdd1, 0x85f, 0xd279, 0x8000, 0x100, 0x1ff, 0x5, 0x101, 0xffffff6c, 0x0, 0x5, 0x6, 0x10000, 0x28c, 0x7ff, 0xea97, 0x1000, 0x400, 0x6, 0x6, 0x8, 0xfff, 0x7, 0x7, 0x9, 0x80000000, 0x1, 0xffffa74a, 0x0, 0x1, 0x7f, 0x6, 0x1000, 0x8, 0x8000, 0x8e22, 0x20, 0x8, 0x675fda29, 0x6, 0x8, 0xae, 0x1f, 0x80000001, 0xbf7, 0x7ff, 0x0, 0x9, 0x6, 0x9, 0x1, 0x100, 0x9e, 0x3, 0x800, 0x3, 0x4, 0x401, 0x1, 0x109, 0xc1b3, 0xa400, 0x7, 0x73, 0x5, 0x3, 0x100000, 0x5, 0x3, 0x5, 0x8, 0x5, 0x7fff, 0x7fffffff, 0x101, 0x7, 0x81, 0x1, 0x4, 0x8, 0x1, 0x2, 0x40, 0x5956, 0x20, 0x0, 0x0, 0x1, 0x8001, 0x4, 0x7fffffff, 0x55, 0x28, 0x3f, 0x8, 0x3, 0xff, 0x1, 0x4, 0x81, 0x1ff, 0x81, 0x1, 0x0, 0x4e0, 0x2, 0xfffff000, 0xfffffff7, 0x98d, 0xffff, 0x1, 0xfffffff7, 0x7, 0xc2, 0x8, 0x10000, 0x80000001, 0x7, 0xaa4, 0x5ef8, 0x5c, 0x3, 0x7, 0x2, 0x400, 0x63, 0x3, 0x80000000, 0x2, 0x3, 0x8000, 0xb5, 0xffffffff, 0xa153, 0x0, 0x95a2, 0x9, 0x0, 0x8d0, 0x5e40, 0xffffffff, 0x8, 0x3e, 0x9, 0x4, 0x7, 0x7, 0x2d22, 0x0, 0x3, 0x5, 0x8, 0x665, 0x3, 0x2, 0x6, 0x9, 0x8c2, 0x3, 0x2, 0x7ff, 0x81, 0xffffffff, 0xfff, 0x81, 0x9, 0x8, 0x7, 0x2, 0xfff, 0x5, 0xd7, 0x9, 0x9, 0x3, 0x9, 0x1, 0x3759, 0x10001, 0x1f, 0xb4c, 0x4, 0x8, 0x400, 0x8, 0x1, 0xe0, 0x7, 0x101, 0x0, 0x6, 0x5, 0x8001, 0x3, 0x7, 0x8001, 0xfffffe00, 0x3, 0x3, 0xe633, 0x3, 0x3, 0x2, 0x3, 0x8, 0xffff0001, 0x1, 0x9b, 0x3, 0x8, 0x1fabb8ec, 0x3, 0x4, 0x2, 0x2, 0x3, 0x6, 0xfffff801, 0x5, 0x51, 0x51, 0x2, 0x0, 0x80000001, 0x0, 0x7fff, 0xfffeffff, 0x8001, 0x7, 0x671, 0x7fff, 0x80000000, 0xec8, 0x7b49, 0x1, 0x1000, 0x0, 0x3, 0xc4, 0x2, 0x9, 0x5, 0x9, 0x7f, 0x8001, 0x7, 0xc29856bb, 0x80000000, 0x7418, 0x4, 0x0, 0x1, 0x1f, 0x0, 0x7fffffff, 0x6, 0xffffffff, 0x0, 0x81, 0x8, 0xc3, 0x80000001, 0x1, 0x80000000, 0x8, 0x200, 0x7, 0x9, 0x2, 0x7, 0x1, 0xfffffffb, 0x1, 0x7, 0x5, 0x4, 0x3865, 0x0, 0x1a, 0x1f, 0x7, 0x80000001, 0x6, 0x6, 0x4, 0x7fff, 0x7f, 0x7ff, 0x354dc6bd, 0x2, 0x8000, 0x9, 0x18, 0x5, 0xffffff39, 0xc0f, 0xfc, 0x9, 0x80000001, 0x3ff, 0x2, 0xff, 0x800, 0x0, 0x3ff, 0x8001, 0x2, 0x4, 0x401, 0xffff, 0x6, 0x42f, 0x9, 0x23, 0x3, 0x0, 0x10001, 0x81, 0x4, 0x92, 0x0, 0x2, 0x80, 0x800, 0x8, 0x80, 0x3f, 0x1, 0x301, 0x200, 0x6, 0x101, 0x78cc, 0x3f, 0x6, 0x931c, 0x101, 0x9]})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000001240)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
clock_gettime(0x0, &(0x7f0000001280)={<r8=>0x0, <r9=>0x0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = dup(r10)
ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200)
ioctl$VIDIOC_QBUF(r7, 0xc058560f, &(0x7f00000012c0)={0xfffffff7, 0x3, 0x4, 0x40000000, 0x80000001, {r8, r9/1000+30000}, {0x1, 0xc, 0x6b, 0xc6, 0x8, 0x1, "9579dafd"}, 0x0, 0x4, @fd=r11, 0x19057f35, 0x0, r0})
writev(r6, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r6, 0x0)
accept4$tipc(r6, &(0x7f00000011c0), &(0x7f0000001200)=0x10, 0x800)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r12 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r12, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

[  978.380612]  ? _raw_spin_unlock+0x2d/0x50
[  978.384761]  ? __alloc_fd+0x1d4/0x4a0
[  978.388583]  do_sys_open+0x2c5/0x430
[  978.392305]  ? filp_open+0x70/0x70
[  978.395854]  ? do_sys_ftruncate.constprop.0+0x370/0x490
[  978.401231]  SyS_open+0x2d/0x40
[  978.404513]  ? do_sys_open+0x430/0x430
[  978.408405]  do_syscall_64+0x1e8/0x640
[  978.412295]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  978.417144]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  978.422339] RIP: 0033:0x4161c1
[  978.425529] RSP: 002b:00007f429bd33a60 EFLAGS: 00000293 ORIG_RAX: 0000000000000002
00:39:52 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r6, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r6, 0x0)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r7, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

[  978.433247] RAX: ffffffffffffffda RBX: 00007f429bd346d4 RCX: 00000000004161c1
[  978.440518] RDX: 00007f429bd33b0a RSI: 0000000000000002 RDI: 00007f429bd33b00
[  978.447787] RBP: 000000000076bf20 R08: 0000000000000000 R09: 000000000000000a
[  978.455056] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000006
[  978.462326] R13: 0000000000000bd3 R14: 00000000004cdac0 R15: 000000000000000a
00:39:52 executing program 2:

00:39:52 executing program 1 (fault-call:3 fault-nth:11):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)

00:39:52 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r4 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r4, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
sendfile(r3, r4, 0x0, 0x20000102000003)

[  978.495681] FAULT_INJECTION: forcing a failure.
[  978.495681] name failslab, interval 1, probability 0, space 0, times 0
[  978.555451] CPU: 1 PID: 11055 Comm: syz-executor.0 Not tainted 4.14.171-syzkaller #0
[  978.563365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  978.572727] Call Trace:
[  978.575332]  dump_stack+0x142/0x197
[  978.578980]  should_fail.cold+0x10f/0x159
[  978.583148]  should_failslab+0xdb/0x130
[  978.587134]  kmem_cache_alloc+0x2d7/0x780
[  978.591291]  ? trace_hardirqs_on+0x10/0x10
[  978.595534]  ? save_trace+0x290/0x290
[  978.599346]  __kernfs_new_node+0x70/0x480
[  978.603507]  kernfs_new_node+0x80/0xf0
[  978.607408]  kernfs_create_dir_ns+0x41/0x140
[  978.611926]  internal_create_group+0xea/0x7b0
[  978.616444]  sysfs_create_group+0x20/0x30
[  978.620600]  lo_ioctl+0x1162/0x1cd0
[  978.624241]  ? loop_probe+0x160/0x160
[  978.628053]  blkdev_ioctl+0x95f/0x1850
[  978.631950]  ? blkpg_ioctl+0x970/0x970
[  978.635860]  ? __might_sleep+0x93/0xb0
[  978.639758]  ? __fget+0x210/0x370
[  978.643227]  block_ioctl+0xde/0x120
[  978.646859]  ? blkdev_fallocate+0x3b0/0x3b0
[  978.651198]  do_vfs_ioctl+0x7ae/0x1060
[  978.655107]  ? selinux_file_mprotect+0x5d0/0x5d0
[  978.659871]  ? lock_downgrade+0x740/0x740
[  978.664019]  ? ioctl_preallocate+0x1c0/0x1c0
[  978.668425]  ? __fget+0x237/0x370
[  978.671895]  ? security_file_ioctl+0x89/0xb0
[  978.676301]  SyS_ioctl+0x8f/0xc0
[  978.679671]  ? do_vfs_ioctl+0x1060/0x1060
[  978.683823]  do_syscall_64+0x1e8/0x640
[  978.687713]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  978.692564]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  978.697754] RIP: 0033:0x45c297
00:39:52 executing program 2:
getresuid(&(0x7f0000000000), &(0x7f0000000040)=<r0=>0x0, &(0x7f0000000080))
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x80000000000, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@nobarrier='nobarrier'}], [{@dont_appraise='dont_appraise'}, {@euid_lt={'euid<', r0}}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@fsname={'fsname', 0x3d, 'nodecompose'}}, {@dont_appraise='dont_appraise'}, {@seclabel='seclabel'}]})

[  978.700942] RSP: 002b:00007fc291a2ba68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  978.708665] RAX: ffffffffffffffda RBX: 00007fc291a2c6d4 RCX: 000000000045c297
[  978.715932] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007
[  978.723202] RBP: 000000000076bfc0 R08: 0000000000000000 R09: 000000000000000a
[  978.730478] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000005
[  978.737747] R13: 0000000000000bdd R14: 00000000004cdb93 R15: 000000000000000a
[  978.764409] hfsplus: unable to parse mount options
00:39:52 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r0, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000080)={0x4, 0xa, 0x0, 0xb5a, "80e527a2e088079ab9480edae456acf43b6e5193d60143284bdd899ff896070c"})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ffc000/0x1000)=nil)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x5ab5, 0x0, 0x0, 0x829050, 0x0)

00:39:52 executing program 2:
link(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000080)='./file0\x00', 0x100000000, 0x0, 0x0, 0x3a5448, &(0x7f0000000780)=ANY=[])

00:39:52 executing program 0 (fault-call:3 fault-nth:11):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@type={'type', 0x3d, "29d59191"}}]})

00:39:52 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r1, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r1, 0x0)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xc0, 0x9, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x26}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x4c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0xc, 0x1a, ':!+bdev\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x400}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000)
r2 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)

00:39:53 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r2, 0x1)
getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000180)={'raw\x00', 0xa6, "a94661bc206bc20f40d459f55dac26f32a95cf7df2fe58c6ed6019d19f4727cce87f3be4844ae741899bdd969c6003ec7e92d087c5b0dc65674e7ba7cbba003f03dc63089f46056cf3f2e4c00231758592fc4c4b2e8d269571f584afbfdac07471bac1cd2ddeef98abade81e64ba0548a9bfa910cec0669926722816196a54573e1b79de0f964199c14aa6dd1328912c99a28aa2062fac0200f0eaa8a021a7086acfff62b723"}, &(0x7f0000000040)=0xca)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$PPPIOCSFLAGS(r4, 0x40047459, &(0x7f0000000000)=0x30014ce)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="747970653929d591912c00"])

00:39:53 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e6f6465636f6d706f73652c0091bb65e43c60ff2d759b0ada674736092c48f009e3ad5f14158ce83cebf7c21cec3c7d7e909425f6a53ab36f7d2b75884487b54a239ec59bbd795014c9b163153120a12ebe3150"])
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r0, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000740)='cpusetnodev$\x00', r2}, 0x10)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x5, 0x100010, r0, 0x0)
r3 = getpgrp(0xffffffffffffffff)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r4, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r4, 0x0, 0x0)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000a00))
r5 = gettid()
tkill(r5, 0x1000000000016)
sendmsg$nl_generic(r2, &(0x7f00000009c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0xee01, @ANYBLOB="00008a000100ffff080010005f952063916f7646be952fcb9f19317af67a02bd36e961910bc431b8fb0e573db250dd43f925d7e200cfc211afcfe26258cb231778f9c090dc12e1e650ef765e8943383c3a7a049b950fce1f30b1129fb3235529cc81f285edd1259ade3357e618910fe1b463190f92507be2310d9b93f57639a9e1752916d91b74518caa520fe7d7771da424027e3bae0d13e1361f4bd3b0994454048537f54cf573d412", @ANYRES32=r3, @ANYBLOB='\b\x00\'\x00', @ANYRES32=r5, @ANYBLOB], 0x178}, 0x1, 0x0, 0x0, 0x4041}, 0x4004804)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r0, 0xc0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=0xa8cb, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x5, 0x5}, 0x0, 0x0, &(0x7f0000000080)={0x40004, 0x0, 0x8000, 0x400}, &(0x7f00000000c0)=0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=0xffffffffffffffff}}, 0x10)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f00000002c0)="e0ac9a160356223a67bcfc2558dad93cac01d5b7e8bbef8420485c939f36c0ff585238bbc51f573cb58d296a93979f6a81cf5ce65d71675d2d871a0a83ebdcfc58cacfd978bd0b420e34cb2061cad9b0925106fd73bae82e5767640ce4b9b7538e6dd35c76f769756e9be424cde201b5526b157bd29ce7d2d293c65a98b5c964a0912ba10d6c3f3406cc88c2566447423a23ae33437ed667c667d0b6da8504105096ea7933059f7990fca5207d03e1bbf9e33a04c25b28540190df4a0eb807c7f75148845ba26dd8395a218fdf7e", 0xce}, {&(0x7f00000003c0)="965883992df95dc0da6b402db1be6dff19401a1e52c7b9f368af43fcd58735327551503d60ca1a7455a6ae439736732779032c8d5aff41d7d337935fa12a64a034c5a58c2f5d65c1efdd0eade3a16f4125c752242eff1d0d8194b6ab58ad9de9d06eb36e145d8e9a85817c7436fa8aa9a1d0d7a47aa4ffc0cb7c647e50c0ec54c741cfb722914f75bcf5ca08655493493aef702fda0c6705e129afb1c41c17a238a6e392da", 0xa5}, {&(0x7f0000000480)="0a7f4f92f64513587033a62aa2907da1661c12fb254c6c0e48bd75ce0f02cffd01478259126300bd25a9862e1dcc8a118bd8c14b73f9e40dd5ebc7ef3b872fd0578abe582d4b2d96314f8ccb519b9f5cf598ad07b2a1084e641b4fbbc6a542ead8e3bca2e1ee693687e9e0d2cb6af86cf2bba08a0954fd469213f102642b37a42d4f2695eff03ed2c244866fc0784a5910d11dd8acc49a9d0c5fc2776426a50ce6bc8c8444a29fb1a8aec20f86ed84a9d45f367d7df7a9dbd11e2bb6d6a1bc46613edee848ebc4e4db37277a6d41f47df082048705", 0xd5}, {&(0x7f0000000580)="85d5bb31dfc95a869ef0bf860e1ea198eede4426d95cf80c71e24ea4e2a101941ff1d82c1f5e2caf6275c8e572c3756adaf36b02e917841cfe7513e63160c7e2b55791179100bd05bb719ffed721a437de213533da511104c921a94d32c2f552c4221c41174c23f17697bd7b03c68851e13162be59b0f6cbb57b57a159e29e98abad2128b2246e32224f3162d017419a7a0629bcfbfbac0f729a3921ea23298de4bb2d5fa932305f3ca995268f19a594300c47f7a1ddbb33494dcc2976abea220dc606e298", 0xc5}], 0x4, 0x1)
writev(r6, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r6, 0x0)
ioctl$KVM_SET_NR_MMU_PAGES(r6, 0xae44, 0x9)

[  979.104614] hfsplus: unable to find HFS+ superblock
00:39:53 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x10000, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r0, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r0, 0x0, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

00:39:53 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r6, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r6, 0x0)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r7, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:39:53 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r2, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r2, 0x0)
setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000040)=@netrom={'nr', 0x0}, 0x10)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)

00:39:53 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}, 0x1c)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@type={'type', 0x3d, "29d5ca91"}}]})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00')
sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r4, 0x301, 0x0, 0x0, {0x4}}, 0x14}}, 0x0)
sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0xb0, r4, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x70}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3a}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xd, 0x22}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x12}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xc}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xb3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe04}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0xfffffffffffffe61, 0x4, 0xfff}]}, 0xb0}}, 0x4048841)

00:39:53 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r4 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r4, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
sendfile(r3, r4, 0x0, 0x20000102000003)

00:39:53 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)

[  979.418346] hfsplus: unable to find HFS+ superblock
[  979.483894] hfsplus: unable to find HFS+ superblock
00:39:53 executing program 1:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0xa0200, 0x0)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xc0, 0x2, 0x2, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_EXPECT_TUPLE={0x80, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}]}, @CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz0\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x5}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x5}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xded2b46b6f616b1c}]}, 0xc0}, 0x1, 0x0, 0x0, 0x84}, 0x8004)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000040)='bridge0\x00')
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r3, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r3, 0x0, 0x0)
fcntl$addseals(r3, 0x409, 0x8)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)

00:39:53 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:39:54 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$SNDCTL_DSP_GETBLKSIZE(0xffffffffffffffff, 0xc0045004, &(0x7f0000000100))
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
socketpair(0x5, 0x3, 0x8, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000140)=""/152)
setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, &(0x7f0000000000)='.em1^\x00', 0x6)

00:39:54 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r6, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r6, 0x0)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r7, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:39:54 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r2, &(0x7f0000c34fff), 0xffffff0b)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$BLKTRACESTART(r4, 0x1274, 0x0)
write$P9_RREADLINK(r2, 0x0, 0x0)
fsetxattr(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="7559c14678bc"], &(0x7f0000000080)='*keyring\x00', 0x9, 0x3)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)

00:39:56 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:39:56 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
msgget(0x3, 0x346)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)

00:39:56 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r6, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r6, 0x0)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r7, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:39:56 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

00:39:56 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@nodecompose='nodecompose'}]})
r0 = msgget$private(0x0, 0xc)
msgctl$IPC_RMID(r0, 0x0)

00:39:56 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r0, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r0, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340)='NLBL_MGMT\x00')
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x78, r1, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r1, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/dev/bsg\x00'}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'hfsplus\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x200400c0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r2, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2)
r3 = syz_open_dev$evdev(0xfffffffffffffffd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
readv(r3, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000308)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x40002063)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0)
getresuid(0x0, &(0x7f00000002c0), 0x0)
ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r2, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x88, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x7ff, 0x1}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_to_bond\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'bond_slave_1\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'vlan1\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller1\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}]}, 0x88}, 0x1, 0x0, 0x0, 0x50}, 0x4004)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f00000005c0)='hfsplus\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000c9aa07e547f3a5c870d9d69f09"])
r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x8000, 0x0)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x1}, &(0x7f0000000280)=0x8)

00:39:56 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
dup(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r2, &(0x7f00000001c0)="ef1cd0b5c8e7a985555464212cfc1ff5fbefd1d87ab8dbc7bd9485b41b52973360f51f998427a5ee7b13a53b8d44b1d79ecbe3bd7ea332f53ec5bdf9d1cba5478021e257ac1051823a735f1d5ac409f3120f92973508bd771f24904f026c5cfc5bc907a346e0b1824a7fa56174070601a6ba838408f407d5809bd9fd3b25afcaec0687347602b77bc9fec921e08f5994c5e1a78d88bb8ce1b26606ad94850c0fedca5e75ad680b6c6d1780b00f86b7572da911988b03822edefdf1321ec97f6d77be4a68d3638004d8e6208abaede975ae3fffb857e51c64da119a93d88a153a87a1f7c6a6645db05f393236fd99ae8c8159818190558ab3"}, 0x20)
r3 = gettid()
tkill(r3, 0x1000000000016)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r4, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r5, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r5, 0x0, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000001, 0x13, r5, 0x2f314000)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x81, 0x7, 0x80, 0x0, 0x2, 0x4040, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0xb5, 0x1}, 0x10, 0x0, 0x7, 0x5, 0x492, 0x101, 0x2}, r3, 0x9, r4, 0x1)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)

00:39:56 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
accept4$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000000)=0x6e, 0x80000)
accept$packet(0xffffffffffffffff, &(0x7f00000014c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001500)=0x14)
r4 = socket$bt_rfcomm(0x1f, 0x1, 0x3)
sendmsg$inet(r4, &(0x7f0000001740)={&(0x7f0000000100)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001440)=[{&(0x7f0000000140)="673937a952003170764575ab122891679727b0eab85492e871763ad159fd8a146ccf6526ec7f2f3befe4f27bb0bf9d3782a902d6241b5a1bd58a45a72e78cd6242ac4f94669ff77858eac1d64250450ff3d86535b07a2dc63393a51c8b31100479d475612d5cc4086137bc6a3966a741222ead06ccde5e44c46a19d37648e9af9c4e5b5fbfcc86467993f01c7b1274cc3e9119fdf1ef48980d3c6c4449302eca56ba1e00918fbb18485399478b8f49090020987d16ce058f102e0a7f699556ea110ae08e177d6adec5bbf2de0ba1e539411d1e95252763ef10fdc4bce62f4c4613d22b7eb89f", 0xe6}, {&(0x7f0000000240)="9086478e97d16f5b768dd36a1f173fcc1f414745b03ea07db3a7ab1bced772d33ee3eab685bd0bc0ae2b99788fbe15375eddcdf7296bf7f6220a583c8ed5765a477f17aefcadfd77ee1464f189be51", 0x4f}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="4dc903c85c2ede1cbfb1d516af7493a30cae1b142d74ed5e6bc8c7c9b44b96a900d95e5ad011252052ea2d0cff111f6fcea8a3c6139f7ca26d629cbb631de14cef41d97554c6cf6eb455c1907af3fb77879ae98dd8426ce00fff18000fc2a7b4e5b36ed59c12984522d8aa0dab15689b7582ab6d57d22930a9e80c9e5db2a7590f38bb5b16c87dc436ad4e4536536619901596488971599444e1", 0x9a}, {&(0x7f0000001380)="3e574a4b9a0806e9c277929c06976cc1fda9c68e30335f653a2afc4a56eb0b71c36ba17896d14db4b35e2e1eed941880b035b845d27d5a5d32db22e49138e1a6a4e04b5fb18c3f3eb4a2dba08c12a96d4abc347a85e7118f3e6ad792fa2d03c1628d1cb08c500e158f43618b13d0c73102393c4420b7c0d528225550ca2ef35f18b7dbaca8283e3ca9c5c53b889ec0f07c5af259326651034b5cb21d5daa5879a4daceaf51d819a566bc14105a68b235269eb1ad5d", 0xb5}], 0x5, &(0x7f0000001580)=[@ip_retopts={{0x54, 0x0, 0x7, {[@cipso={0x86, 0x1e, 0x2, [{0x0, 0x4, "c37f"}, {0x5, 0xe, "5ebe0331fa353117f4158337"}, {0x1, 0x6, "9dd75c67"}]}, @rr={0x7, 0x23, 0xad, [@rand_addr=0x5ec6c305, @multicast1, @broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x18}, @empty, @broadcast, @remote]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_retopts={{0xd0, 0x0, 0x7, {[@timestamp_addr={0x44, 0x24, 0x2e, 0x1, 0x4, [{@remote, 0x3}, {@multicast1, 0x7}, {@multicast2, 0x80000001}, {@empty, 0x7}]}, @rr={0x7, 0x17, 0xee, [@loopback, @multicast1, @local, @local, @dev={0xac, 0x14, 0x14, 0x3c}]}, @end, @end, @end, @cipso={0x86, 0x4c, 0x0, [{0x1, 0x2}, {0x2, 0xe, "2b9be63dadb8c7e5d470bfd3"}, {0x2, 0x12, "c65c3fc5bda834abcc4e8b68322a650e"}, {0x1, 0x6, "b579517b"}, {0x7, 0x8, "9274566bc8a2"}, {0x7, 0xc, "02b6d7ac20af71863227"}, {0x2, 0xa, "9b4575d8ae9bfbff"}]}, @timestamp_prespec={0x44, 0x34, 0xad, 0x3, 0x7, [{@local, 0x280}, {@empty, 0xf5}, {@multicast1, 0x101}, {@broadcast, 0x4}, {@local, 0x3b5}, {@local, 0xffffffff}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @dev={0xac, 0x14, 0x14, 0x19}, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1122}}, @ip_tos_u8={{0x11}}], 0x190}, 0x1)

[  982.113735] hfsplus: unable to find HFS+ superblock
[  982.201142] hfsplus: unable to find HFS+ superblock
00:39:56 executing program 2:
socketpair(0x1e, 0x4, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x40000, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r3, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r3, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r4, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x300000f, 0x10012, r4, 0x88d22000)
r5 = creat(&(0x7f00000001c0)='./file0\x00', 0x20)
ioctl$USBDEVFS_RESETEP(r5, 0x80045503, &(0x7f0000000200)={0x8})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = dup(r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
ioctl$SIOCNRDECOBS(r7, 0x89e2)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x880000, &(0x7f0000000780)={[{@nodecompose='nodecompose'}]})
ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000080)=0x1)
modify_ldt$write2(0x11, &(0x7f0000000000)={0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1}, 0x10)

00:39:56 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f00000001c0), 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00')
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r4, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x7ff}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x4}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfff7}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x10000050)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

00:39:56 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="74ff70114ac8d8c99cc62f"])

00:39:56 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r2, 0x1)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000000))
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="7479f0653d2997a3a53e0072ea30f99066d081df759dbf3055daa8483da3a1f89407af2a5f1b69a7da83bd85e77c7323b3a97ecd0e88ff472df05776691c24"])

00:39:56 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x24, r3, 0x511, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x24}}, 0x0)
sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r3, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0xc058534f, &(0x7f0000000180)={{0x0, 0x6}, 0x0, 0x9, 0x10001, {0x7f, 0x8}, 0x1, 0x1})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = dup(r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f00000000c0)=0x8, 0x4)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10)

00:39:56 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:39:56 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r8, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:39:56 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540))
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r0, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r0, 0x0, 0x0)
r1 = dup(r0)
setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0xa, 0x4e21, 0xe5, @mcast1, 0x7f}, 0x9, [0x594, 0x800, 0x2, 0x3, 0x1000, 0x5, 0x4, 0x9]}, 0x5c)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r2, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r2, 0x0, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x1fc8, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=r2])

00:39:56 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="6e4fbd1bc7d38240b073652c00"])

00:39:56 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)

[  982.935886] hfsplus: unable to parse mount options
[  983.021094] hfsplus: unable to parse mount options
[  983.225263] hfsplus: unable to parse mount options
00:39:59 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@nodecompose='nodecompose'}]})
r0 = socket(0x1a, 0xa, 0x7f)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000000c0)={0x1, 0x80000000})
getsockname(r0, &(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000000080)=0x80)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x4402, 0x0)
ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f00000001c0)=0x2)

00:39:59 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r2, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r2, 0x0)
ioctl$VIDIOC_S_CROP(r2, 0x4014563c, &(0x7f0000000080)={0x4, {0x4277, 0x101, 0x7fffffff, 0x800}})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket$inet_sctp(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x64140, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10)

00:39:59 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:39:59 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@type={'type', 0x3d, "29d59191"}}]})
r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x8983, &(0x7f0000000040))

00:39:59 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r8, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:39:59 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
dup(r0)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x1)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00')
pipe(&(0x7f0000000ac0)={<r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
accept4$packet(r3, &(0x7f0000002940)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002980)=0x14, 0x80000)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000002a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002a40)={&(0x7f00000029c0)={0x5c, r2, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', <r5=>r4})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', r5})

00:39:59 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={'syzkaller0\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}})

[  985.207144] hfsplus: unable to find HFS+ superblock
[  985.209439] audit: type=1800 audit(1582504799.238:115): pid=11312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.3" name=BB dev="sda1" ino=17292 res=0
[  985.236859] hfsplus: unable to find HFS+ superblock
00:39:59 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="6e6fbd6580009160d615e9344916ccaa35113de58130420ee584fc83cd5866736560f5fec4e9a9f1d312a3e2b2ca2bbeff87e53bb2e892107012ca3f0a3cf8ea6114c6aecb8baaca8ce7d6b475998290f706dbef8a9feb4356f51d5b55284684da689fbd3f923d2c39696cc6cf62a014322b2ae7e14dfe55ce8480c1b838e38d8fd900"/145])
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x9}, &(0x7f0000000040)=0x8)

[  985.286443] hfsplus: unable to find HFS+ superblock
[  985.289397] audit: type=1800 audit(1582504799.278:116): pid=11312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.3" name=BB dev="sda1" ino=17292 res=0
00:39:59 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x301200, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@getneigh={0x14, 0x1e, 0x1, 0x70bd29, 0x25dfdbf6, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x404c045}, 0x40810)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x40000, 0x0)
fcntl$setsig(r2, 0xa, 0x31)
r3 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x4880, 0x0)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x400000, 0x0)
ioctl$RTC_AIE_OFF(r5, 0x7002)

00:39:59 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x428482, 0x0)
r2 = socket$inet(0x2, 0x4000000805, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
r4 = dup3(r2, r3, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, <r5=>0x0]}, &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0xe, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b38b)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r5}, &(0x7f00000001c0)=0x8)
dup(r0)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="7478400b6e76abf4fc2c0084e4819cb88188425914696f35fd81ab9da0cf558200af46de3a6606c764f00ebb4f401830a372badbc7878108d481a3c0f947e7d91e2ac934f3df38ceeff3fa86b463832d635a5c6c7d0e23abdc9ee7f71541565d85287f99505652ef25fc471cff4c0faf6136ccceddc8d18e48e93eeeb39c9ba0471cddec401a50548053f8168c6c6aed0cc25d"])

[  985.452641] hfsplus: unable to parse mount options
[  985.536616] hfsplus: unable to parse mount options
00:39:59 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x6, 0x5}, 0xc)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="e102fabd37a413bd65c1ecf2ec7ba849389d2c7a2609d49eec2a60069011d3ffb7e7d5241c1be53e97bbd5f3c6c7d3a19ec8c88ac81b5d92db090c26"])

00:39:59 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r3, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r3, 0x0)
r4 = socket$inet(0x2, 0x4000000805, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
r6 = dup3(r4, r5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, <r7=>0x0]}, &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0xe, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b38b)
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0)={<r8=>r7, 0x4, 0x3, 0x800, 0xfffffffc, 0x1339}, &(0x7f0000000100)=0x14)
getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r8, 0x8001}, &(0x7f0000000180)=0x8)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
socket$unix(0x1, 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000040)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x14)

00:39:59 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="6e6f641ff41318f175b89fcb05"])
r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0)
ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x7f)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x11})

00:39:59 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"])

[  985.723687] hfsplus: unable to parse mount options
[  985.799165] hfsplus: unable to parse mount options
00:39:59 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:39:59 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r2, &(0x7f0000000040)={0x2, 0xffff, @rand_addr=0x1}, 0x10)

00:40:00 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r8, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:40:00 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000000)=0x1, 0x4)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="747970653d060000002c00"])

00:40:00 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2100012, &(0x7f0000000780)=ANY=[@ANYBLOB="f7dfffffffffffff9073652c00"])
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSBRK(r0, 0x5427)
r1 = getpgid(0xffffffffffffffff)
sched_setattr(r1, &(0x7f0000000000)={0x38, 0x6, 0x2, 0x81, 0xd9e, 0x5, 0x8, 0x10000, 0x1, 0x2}, 0x0)

00:40:00 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x140f, 0x1, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xd, 0x45, 'opa_vnic\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xa, 0x45, 'ipoib\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8840}, 0x24048840)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

00:40:00 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f0000000140)={0xd54, 0x1, &(0x7f0000000040)=[0x1f], &(0x7f0000000080)=[0x5, 0x9, 0x7], &(0x7f00000000c0)=[0x200, 0x6], &(0x7f0000000100)=[0x2, 0x8, 0x8, 0x8000]})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r4, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r4, 0x0)
setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f00000001c0)={0x4, &(0x7f0000000180)=[{0x2, 0x3f, 0x8, 0x10000}, {0x1, 0x4, 0x8, 0x8001}, {0xfff, 0x2, 0x0, 0x8000}, {0xb4, 0x1, 0x4, 0x3}]}, 0x10)

00:40:00 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540))
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r3, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r3, 0x0, 0x0)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
getsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0xe)

00:40:00 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400204)
syz_mount_image$bfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x1008018, 0x0)
read$usbmon(0xffffffffffffffff, &(0x7f0000000100)=""/133, 0x85)
ioctl$USBDEVFS_RESETEP(r1, 0x80045503, &(0x7f0000000040)={0x1, 0x1})

00:40:00 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x200000, 0x0)
setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000080)=0x4, 0x4)

00:40:00 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r2, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r2, 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = dup(r5)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r7, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r7, 0x0, 0x0)
ioctl$PIO_UNIMAP(r7, 0x4b67, &(0x7f0000000200)={0x6, &(0x7f00000001c0)=[{0x3, 0x101}, {0x40, 0xffff}, {0x6, 0x3a47}, {0x4, 0x3}, {0x2be9, 0x5}, {0x8000, 0x1f}]})
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r8 = socket$inet(0x2, 0x4000000805, 0x0)
r9 = socket$inet_sctp(0x2, 0x5, 0x84)
r10 = dup3(r8, r9, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r10, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r9, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, <r11=>0x0]}, &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r10, 0x84, 0xe, &(0x7f000059aff8)={r11}, &(0x7f000034f000)=0x2059b38b)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000040)={0x80, 0x820a, 0x7, 0x9, <r12=>r11}, &(0x7f0000000080)=0x10)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000180)={r12, 0x400}, 0x8)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$VIDIOC_RESERVED(r1, 0x5601, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="746b707c60e2ec079b80d3a0319e7b88c9588832e1296f13ec2c909e"])

00:40:00 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@nodecompose='nodecompose'}]})
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x8, 0x9}, 0xc)

[  986.366014] hfsplus: unable to find HFS+ superblock
[  986.421679] hfsplus: unable to find HFS+ superblock
00:40:00 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:40:00 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r2, 0x1)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, <r3=>0x0}, &(0x7f0000000080)=0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, <r4=>0x0}, &(0x7f0000000380)=0xc)
r5 = getgid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, <r6=>0x0}, &(0x7f0000000400)=0xc)
setxattr$system_posix_acl(0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r4, @ANYBLOB='\b\x00', @ANYRES32=r5, @ANYBLOB="080002", @ANYRES32=r6, @ANYBLOB="10000500000000002000060000000000"], 0x9, 0x3)
write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f00000000c0)={0xa0, 0xffffffffffffffda, 0x5, {{0x1, 0x1, 0xfffffffffffffffa, 0x5, 0x2, 0x70, {0x6, 0x8000, 0x7fffffff, 0x9, 0x20, 0x6, 0xf53, 0x400, 0x972, 0x40, 0x40, r3, r4, 0xfff, 0x1}}, {0x0, 0x11}}}, 0xa0)

[  986.657349] hfsplus: unable to parse mount options
00:40:00 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r8, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:40:00 executing program 1:
prctl$PR_GET_FPEMU(0x9, &(0x7f0000000100))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000080))
syz_mount_image$bfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x800, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r2, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r1, 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000040)=ANY=[@ANYBLOB="0300002000000000000001"])

00:40:00 executing program 2:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/btrfs-control\x00', 0x40, 0x0)
sendto$unix(r0, &(0x7f00000005c0)="1d2a2d9beb4210bda45b1830e5ad15b63fb7d633a796353daaaafbe4af306288f966f998992d2d3cec98d33d0ba97e8e653f02159d5721e4640430027344935995", 0x41, 0x800, &(0x7f00000027c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
r1 = gettid()
tkill(r1, 0x1000000000016)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r3 = fanotify_init(0x0, 0x0)
r4 = epoll_create1(0x0)
r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff)
fanotify_mark(r3, 0x45, 0x800000b, r5, 0x0)
r6 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xc0, &(0x7f0000000680)={0x0, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r6, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000140)='GPL\x00', r7}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r2, r5, 0x0, 0x1, &(0x7f0000000200)='\x00', r7}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={<r8=>r1, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)='hfsplus\x00', r7}, 0x30)
process_vm_writev(r8, &(0x7f00000000c0)=[{&(0x7f00000007c0)=""/4096, 0x1000}], 0x1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/1, 0x1}, {&(0x7f0000000180)=""/87, 0x57}, {&(0x7f0000000200)=""/65, 0x41}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/63, 0x3f}, {&(0x7f0000000300)=""/101, 0x65}, {&(0x7f0000000380)=""/89, 0x59}, {&(0x7f0000000400)=""/200, 0xc8}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x9, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002840)=ANY=[@ANYBLOB="3be8c4d2e7490326d713aa0822906218420a144f9b1b0323ec789eab8cd04304a4a5823ff6afa7dbebbbfe2d634ebcf68b51763642272f7fff8709357cfa61754ade3b6a73cd"])
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

00:40:01 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000040)={0x990000, 0xffff, 0x1, <r2=>0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x990a96, 0x8, [], @value=0x3}})
ioctl$DRM_IOCTL_ADD_BUFS(r2, 0xc0206416, &(0x7f00000000c0)={0x1eb, 0x2, 0x9, 0x1, 0x8, 0x1})
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)

00:40:01 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:40:01 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r2, 0x1)
getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000005e00)={@local, <r3=>0x0}, &(0x7f0000000000)=0x14)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000005e80)={'batadv_slave_1\x00', r3})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x4400, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f00000000c0))
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r6, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

00:40:01 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="747970653d29d591902c00"])
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r2, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r2, 0x0)
write$ppp(r2, &(0x7f0000000180)="463644773b055abdb701456436e2868bf4429beeebbbe68c22a17e47eafb6a4807c3b42b6c68a0a81140356c56302b059baaac292d0ae06f678811f76c8da960fe3bcacefbe5e1baf3d629fdc366dbb985f6d5942029bc460c0f3dcf0c421b5315a028a83b4b0a6774fc56a902340777f9fd028f573142ff05d9821e82919c5eed", 0x81)

00:40:01 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r4, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r4, 0x0)
sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x90, 0x1, 0x9, 0x5, 0x0, 0x0, {0xc, 0x0, 0x1}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_STATUS={0x8}, @NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_TUPLE={0x38, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x111}}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x90}, 0x1, 0x0, 0x0, 0x40001}, 0x0)
write(r3, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r3, 0x0, 0x0)
pwrite64(r3, &(0x7f0000000080)="2e00344eb188180aafe7f639d1f549cd364c0a033e7c1ad4b591c16a2197f901198d691b3370a1c6fbcbf31c9dded31971d907ae4d046d7d818943890073903484e48185a0a0aa663f", 0x49, 0xff)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

00:40:01 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@type={'type', 0x3d, "29d59191"}}]})
open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x14)

00:40:01 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x10000, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT])

00:40:01 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x190, 0x12, 0x400, 0x70bd29, 0x25dfdbfe, {0xf, 0x9, 0x3, 0x0, {0x4e21, 0x4e21, [0x80000000, 0x81, 0x7, 0x7f6], [0x8d, 0xffffffff, 0x4a], 0x0, [0x5, 0xd43]}, 0x8}, [@INET_DIAG_REQ_BYTECODE={0xc2, 0x1, "416e325d83a3cb944503ecbb7938f202d92cc0914e128f1a95b1d97266b34aaefceb00e18c2b7dcd5a694fe3cfa18d7fb0d20a600b56322f51d0c959cb04064729c3ecd566ae6dce6f319e21adefaf501c276d837e7fde4ec5049ef2213769ceffb7297b4ad8d07e489ae4b92f7827f8e8c4fa1e0950dd4c1016b6e44329b07f8c21e324b645770e2b88443b4f23554ca47e504ed1ede0cb2d8c9c96a1c12c34f4674777461d2eda02ca84296b4308e7c8567e4f961ed20ffec977f1c2ab"}, @INET_DIAG_REQ_BYTECODE={0x49, 0x1, "8633d535aec87c61b066b4246061b4bb9793d74ffbb38bbac050d7f222e777d04090ffc700ac9ed2d19c55462fe2407330769a983ab99f7bb0f633bd8e3f748a57516d5bce"}, @INET_DIAG_REQ_BYTECODE={0x34, 0x1, "bbaafc54bf802421127e406d34c33ded1e6e42cd68a38e48fb70c6dcde0e105f74db06cc7048153c7439e813b0e20b6c"}]}, 0x190}, 0x1, 0x0, 0x0, 0xc0}, 0x4)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB])

00:40:01 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r8, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:40:01 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = memfd_create(&(0x7f00000004c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\xdc\x7f\xfa\xbc\xf6\xe0W\xbb\xb0w\xff4F\x1f0\xe5\xa8\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xef\xf5\x1fe\xce\x1a7%\xe0\xff\xb9\xc3\x9a\xb8\xdf\xb2o\xa4k\x012>\xa1\x9c\x8ex\xff\x0f\x00\x00\xd2\xfdG\xf3\xb8\x87\x98\x93r\xa2\xbc\x00\t\xbb\xad7\b\x062\xd4\xbd\x89d\xcd\x81\xce\x89kF\x91\x16\x9bF\x02\xf0\xfa\x8e^\xb5\xc5\x92),\x05\xa49\x1e\xc3\x19k\x81U\xe6k\x90\xa3\x13a<\xb8;z9\x9b\xd6\xa9\xd2z\x00\x00e\x1a\xd1\xb1>\xa5Q\xca(MaC0\xe3!\x16E\x97f\xb3\xb2)l\xa3\f\x95\xd00\xff}v\x9f\xf3\xdar\xae\x88t\x81\xf5\xfd\xe0\xbee\xed\x0e_V\x97\xbb\xf0\xe8\x84\\\xbb\a\x9a\x962Q\xd3\xa0(^\xa6uG6\x03\xecJz\x0f\x1b\xeb\xb5p\x17\xac\x80\x1b\n\x9a\xb1\x03\xd6\xad\t1@\xc7m\xc7*)P\xf1\x84L\xf9\x7f\xec\x87\x95k9*lq\xc96\xce6\xe4&\x12\x87T\xff\xf2\xb5XQ\xbd\a\xe45\xe2\x16\xf3\xb50\a\xa0\xc44)\x8b\xcf\xd1\xdc\x03\x10\x96\xafr\xe3-/\xe4+\x04\xb14M\x87<\x8aO\xe3\x80F\xcc~%z\xd71f\x12N\xf5k\x1ffZ\xf0g\xcc\n.\xe3\x1d\xd0\xa0wK\x12\xbf\xa27\xdc\xa3\xb1\'\xc2S\x1d\r\npI4\x7f;\xe8GB\xd6\xc4^\xce4\xe7!c\xf8Z\x8bKx\x02\x13\xc8l~u\xbd>Iw\x167r{\x87x\xf0\xc9\xc3\xf3\x97\x97Fw\xa7K!KE\x01\xbb\x9f\xc0!\x8b\xf1OUh\xc2\xdaRC\xee\x18sI\xf6z\xdf\x066X\xaay\x10z\xfbd\x18\xfa\xf7SAT5\xae\x02\xca\xd3\xe6\xec\xe5\xe9\xd1\x8dTY\xa5H\x80\x8ep\xa5wGg*\x17_Z1(\xf7\xbe\x88r\xad\xfc0\x04\x18G\xbe4Q\xb4\x9c\x0e0\x83\x051\x16\tz\x81)\xaa\xa9=\xb1\x97Z\x9c\x91\x15D\xf4\xeau\xed\xb5N\xe6\xbes+\x9ek\x01\x9f\x12P\x91]\xac>\x11\xd8\x04\xd8\xff\xe0t \xc3\xe1\xc5\x16\x8a%\a3)\x9c\x90\x8d\xc6bI\xd6\xcee\x137\xa1,&\"\x9f!dg\xbat\x8b\xc5\x95\x96\xb0\xe0\xda\xda\xda\xbd\xa3j\xea]\v\xfc\xc0\t\xc3\xde\x9d\xac\x18hA\xff\n\v~\xfe\x19\x8f\x05\xd32\x87\xff\xe4w@0\xe4k\x18\xcd\xb1J\xf9B\xed\x1f\xb1\x12\xa9\x97\x91\r;\xb1!\xfc\x13\xf9v\xd5\x8d\x92\xd7\x18W\xe6\xc2\x11\x85\x7f\xae\v.T\x03~H\x93Q\x91\f\x0f\xe5>[\x1c\xc3;\x1d#\xdb7\x1dTt0\xef\x18\xfe\b(\xa0\x9e9\x01\xbd\x97(w\xdf\x1f\x82\xf2\xaa\xc3\xbeS\xc7\x8d\x8d\xff\x91\xcb\x11\x84\x9d\xcc\x04TX\xa2\xacz\xa6\xa4\v!1\xe2\xd9', 0x6)
write(r2, &(0x7f00000000c0)="2fe7fa5f81e379ed07a625cbd9092bd8ef38498f0a7e2abaff81dedf69", 0x1d)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000000000004, 0x8000000000000011, r2, 0x0)
rmdir(&(0x7f0000000000)='./file0\x00')
ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000080))
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x30820, &(0x7f0000000040)=ANY=[@ANYBLOB="637208000000006e000026312c006520abd0"])

00:40:01 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)

00:40:03 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f0000000080)={{0xf3, 0x6}, {0x28, 0x9}, 0x7fffffff, 0x0, 0x20})
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)

00:40:03 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@type={'type', 0x3d, "29d59191"}}, {@decompose='decompose'}]})

00:40:03 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:40:03 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r3, 0x40184150, &(0x7f0000000000)={0x0, &(0x7f0000000080)="84e2a92c30f6fddfb7f0313326c44b50083eb0585986c293002b74fc69ca3a2d5fbc2a2a63afdedf0eb8436fdc79c2282bbbcf7377198912090cae1d41dd3c49db788d92d795eba2900bc723aed32edd1f53a2048e4ddfa0b56b", 0x5a})
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

00:40:03 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r8, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

[  989.919729] hfsplus: unable to find HFS+ superblock
00:40:04 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540))
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r0, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r0, 0x0, 0x0)
dup(r0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

00:40:04 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x66100, 0x0)
ioctl$UI_DEV_CREATE(r2, 0x5501)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)

00:40:04 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
fgetxattr(r1, &(0x7f0000000040)=@known='system.sockprotoname\x00', &(0x7f0000000240)=""/111, 0x6f)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x719f)
setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000180)=0x3, 0x4)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="204303"])
write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x2d, 'rdma'}, {0x2d, 'io'}]}, 0xa)

00:40:04 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x8)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0xc8080, 0x0)
r3 = syz_open_dev$media(&(0x7f0000000240)='/dev/media#\x00', 0x4, 0x30841)
ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000280)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={'rose', 0x0}, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
socket$caif_stream(0x25, 0x1, 0x5)
write(r2, &(0x7f0000c34fff), 0xffffff0b)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r4, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000200)={'batadv0\x00'})
write$P9_RREADLINK(r2, 0x0, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0x0, 0xfffffff9, 0x80000001, <r5=>r2, 0x0, &(0x7f0000000080)={0x9b0952, 0x8, [], @p_u32=&(0x7f0000000040)=0x4}})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r5, 0x40bc5311, &(0x7f0000000100)={0x0, 0x0, 'client0\x00', 0xffffffff80000002, "5ab38a186a0a8226", "108742b7de4f1035509610acceb2bd83f48561b9871ce73d0fee478707c000f7", 0x0, 0x5})
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)

00:40:04 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x101000, 0x110)
setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f0000000040)={{0x300000, 0x3}}, 0x10)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="f467fe0400000000000000912c0058c7c158c7c90e44cfbd131225ad3715f2d71fd9fab605c943a3eaf220bd44a52a29ce6af3c2ba345d9586463a5b679a7a236faab49c604ed26e39a84054350f7fd34755781eeb0218084a47c0bd3c67b4c3ac2ee793a6e19c412e97443d59"])
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x94, 0x2, 0x1, 0x601, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_NAT_DST={0x6c, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={[], [], @local}}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x20}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @local}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}]}, @CTA_NAT_DST={0xc, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x60008d0}, 0x0)

00:40:04 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="2aad0354e521e8c17e44e299694769345f0580558ecb57f4ab11aa5c4eca85cfd573f90c0100fcfa0bd2ce7de9854f6fb3e15e63bd262abfd584648fa1be12b3113606b3c03a98edc2e951c3ecc4a2f61ec579581369e52d5fdaffd9484dfb95815724d5aec95ff9d1063b2cf16297bdb785813032bdcf62b8de4d68ed83a6918bbf1dc8ac0c594bfb4e2c6b84220e2164"])
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0)

00:40:04 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540))
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x20400, 0x0)
write(r0, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r0, 0x0, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)

00:40:04 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00')
sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002700)={0x14, r2, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x94, r2, 0x8, 0x70bd26, 0x25dfdbff, {}, [@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000)

00:40:04 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="757970593d4b5a078d81227fe3641782912c0002"])

00:40:04 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:40:04 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BLKRRPART(r1, 0x125f, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)

00:40:04 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0))
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r6, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r6, 0x0)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r7, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:40:04 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="6e00000000e6ed6c072ed5a5b2"])

00:40:04 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x2809040, 0x0)

00:40:04 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(0xffffffffffffffff, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r0, 0x0)
ioctl$SOUND_MIXER_READ_DEVMASK(r0, 0x80044dfe, &(0x7f00000000c0))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x6)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r3, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r3, 0x0, 0x0)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x300000e, 0x12, r3, 0x118fa000)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@type={'type', 0x3d, "29d59191"}}]})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x206a80, 0x0)
r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x20100, 0x0)
r8 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x252a, 0x0, 0x0, [], [{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x801, 0x0, 0x80000001}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000000040)={<r9=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r7, 0xc0182101, &(0x7f00000000c0)={r9, 0x1, 0x2})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f0000000180)={r9, 0x8c37, 0x2})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, &(0x7f00000001c0)={r9, 0x2, 0xb1})
r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x20000, 0x0)
ioctl$FBIOGET_FSCREENINFO(r10, 0x4602, &(0x7f0000000040))

00:40:04 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:40:04 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
socket$inet(0x2, 0x1, 0x6)
r3 = socket$inet(0x2, 0x4000000805, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
r5 = dup3(r3, r4, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00')
sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, r6, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x1fc74e9e}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x66}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000000}, 0x20008d1)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, <r7=>0x0]}, &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0xe, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b38b)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = dup(r8)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000080)={<r10=>0x0, @in6={{0xa, 0x4e21, 0x8, @mcast2}}, 0x4, 0x5, 0x5d, 0x1, 0x102, 0x4, 0xff}, &(0x7f0000000000)=0x9c)
getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000140)={r7, 0xfffff000, 0x7, 0x9, 0x3, 0xad9, 0xff01, 0x4, {r10, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}}, 0x7, 0x4, 0x8, 0x80000000, 0x2f}}, &(0x7f0000000200)=0xb0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
socket$pptp(0x18, 0x1, 0x2)

[  990.952455] hfsplus: unable to parse mount options
00:40:05 executing program 1:
socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendto$x25(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x80, &(0x7f0000000100)={0x9, @null='               \x00'}, 0x12)
syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x208282)
fcntl$dupfd(r0, 0x406, r0)
socketpair(0x1d, 0x5, 0x1, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000000408030000000000000000000a00ac4100000000000000000900010073797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)
pipe2(&(0x7f0000000300)={<r3=>0xffffffffffffffff}, 0x4000)
ioctl$SG_GET_RESERVED_SIZE(r3, 0x2272, &(0x7f0000000340))
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r4, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r4, 0x0, 0x0)
read(r4, &(0x7f0000000080)=""/42, 0x2a)
ioctl$SIOCAX25GETINFO(0xffffffffffffffff, 0x89ed, &(0x7f0000000280))

[  991.014198] hfsplus: unable to parse mount options
00:40:05 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@nodecompose='nodecompose'}]})
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x2, 0x0)
ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r0, 0x800443d3, &(0x7f0000000040)={@fixed={[], 0x12}, 0x82d9, 0x0, 0x8})

00:40:05 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r3, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r3, 0x0)
setxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.ima\x00', &(0x7f00000001c0)=@v2={0x3, 0x1, 0xb, 0x80, 0xac, "7dc789d49f9ef0ed8e970e05f6bd19c72f7b272e0a8a97f2cd1ce9722caa793286a1892c6bad02080fc2cffdb0263934df43ac1b37922b8ed75e2d6c55127c7c49ad1d73a694880a972aa3bd22d45683283704920df5c95fc1629dae668279b722d3a3e6d2eb9503eb36f3fe10713c9905a1c14ebe8485e3ff3cf9fc2f70da42a7fae3aa79c2c2263d3efe44cf826a9b325e67c3bbabe93920437ebd0ce095927f06788ffdb5e8620af7a3e2"}, 0xb5, 0x2)
ioctl$BLKRESETZONE(r3, 0x40101283, &(0x7f0000000000)={0x5, 0x8})
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

[  991.172078] hfsplus: unable to find HFS+ superblock
00:40:05 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540))
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r0, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r0, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r1, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r2, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r2, 0x0)
fanotify_mark(r2, 0x0, 0x48000018, r1, &(0x7f0000000000)='./file0\x00')
r3 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

[  991.285195] hfsplus: unable to find HFS+ superblock
00:40:05 executing program 2:
mlockall(0x2)
r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000004000/0x2000)=nil)
shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000)
shmctl$SHM_LOCK(r0, 0xb)
shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x7000)
shmctl$SHM_UNLOCK(r0, 0xc)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@nodecompose='nodecompose'}]})

[  991.493714] hfsplus: unable to find HFS+ superblock
[  991.581240] hfsplus: unable to find HFS+ superblock
00:40:05 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0))
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r6, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r6, 0x0)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r7, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:40:05 executing program 2:
syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x1ff, 0x2800)
openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x404d03, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040), 0x4)
r1 = accept4$bt_l2cap(r0, 0x0, &(0x7f00000001c0), 0x80000)
setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000200)=0x4, 0x4)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r2, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r2, 0x0)
ioctl$VFIO_SET_IOMMU(r2, 0x3b66, 0x7)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@barrier='barrier'}]})
r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0)
ioctl$SNDCTL_DSP_GETTRIGGER(r3, 0x80045010, &(0x7f0000000080))

00:40:05 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:40:05 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
prctl$PR_SET_DUMPABLE(0x4, 0x1)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@ax25={{0x3, @rose}, [@null, @netrom, @bcast, @null, @default, @bcast, @null]}, &(0x7f00000001c0)=0x80, 0x80000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0)='gtp\x00')
sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r3, 0x1, 0x0, 0x0, {0x2}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0)
sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8280d4d151a248eb}, 0x4000000)
r4 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="747970653d29d591910c00"])
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = dup(r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0)
prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c)
ioctl$DRM_IOCTL_ADD_CTX(r7, 0xc0086420, &(0x7f0000000000)={<r8=>0x0})
ioctl$DRM_IOCTL_UNLOCK(r6, 0x4008642b, &(0x7f0000000040)={r8, 0x5})

00:40:06 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x2000004001ff)
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f00000000c0)=""/94)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)
ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000040)=0x3)

00:40:06 executing program 2:
recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000180)=""/204, 0xcc, 0x20, 0x0, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@nodecompose='nodecompose'}, {@creator={'creator', 0x3d, "7a2da4ef"}}]})

00:40:06 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r2, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r2, 0x0, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r3, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r3, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r4, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r4, 0x0)
getsockopt$netrom_NETROM_T2(r4, 0x103, 0x2, &(0x7f0000000300)=0x9, &(0x7f0000000080)=0x4)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x0, r3, 0x3, 0x1, 0x1, 0x40})
r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x28f0, 0x420040)
ioctl$TIOCL_BLANKSCREEN(r5, 0x541c, &(0x7f0000000200))
r6 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r7, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r7, 0x0, 0x0)
r8 = gettid()
tkill(r8, 0x1000000000016)
r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r9, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r9, 0x0, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRES64=0x0, @ANYPTR64=&(0x7f0000000280)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES32=r7, @ANYRES16=r3, @ANYPTR64, @ANYRESDEC=r8], @ANYRESDEC=r9, @ANYRESOCT=0x0]])

[  992.069047] hfsplus: unable to find HFS+ superblock
00:40:06 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)

00:40:06 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="546f6465636f6d70c2c58f9c00"])
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth0_macvtap\x00', 0x10)

00:40:06 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
accept$phonet_pipe(r1, &(0x7f0000000000), &(0x7f0000000080)=0x10)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

00:40:06 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0)
read$midi(r2, &(0x7f0000000080)=""/201, 0xc9)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)

[  992.269386] hfsplus: unable to parse mount options
00:40:06 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r3, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r3, 0x0, 0x0)
fcntl$setflags(r3, 0x2, 0x0)
bind$vsock_dgram(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @hyper}, 0x10)
openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x4400, 0x0)

[  992.367784] hfsplus: unable to parse mount options
00:40:06 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0))
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r6, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r6, 0x0)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r7, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:40:06 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)

00:40:06 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:40:06 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@nodecompose='nodecompose'}]})
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200000, 0x0)
ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000040)={0x8, "96c257d0b2723bfae856996964e00cac3d4511b70974381d598d4604a174c87c", 0x0, 0x1})

00:40:06 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x821040, 0x0)

[  992.816686] hfsplus: unable to find HFS+ superblock
[  992.895904] hfsplus: unable to find HFS+ superblock
00:40:07 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@nodecompose='nodecompose'}]})
r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e)
getpeername(r0, &(0x7f0000000180)=@sco={0x1f, @none}, &(0x7f00000000c0)=0x80)

[  993.063860] hfsplus: unable to find HFS+ superblock
[  993.146019] hfsplus: unable to find HFS+ superblock
00:40:09 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x88000, &(0x7f0000000040)={[{@nodecompose='nodecompose'}]})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000000)={0x2, 0x10000, [{0xd1c, 0x0, 0xfffffffffffffeff}, {0x7, 0x0, 0x2}]})

00:40:09 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, r3)
sendmsg$nl_netfilter(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r3], 0x1}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, r5)
sendmsg$nl_netfilter(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r5], 0x1}}, 0x0)
keyctl$search(0xa, r3, &(0x7f0000000040)='cifs.spnego\x00', &(0x7f0000000080)={'syz', 0x0}, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x3, 0x0, 0x0, 0x18a1052, 0x0)

00:40:09 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(0x0)
r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r3 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r3, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3)
sendfile(r2, r3, 0x0, 0x20000102000003)

00:40:09 executing program 3:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0)
ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000500)={0x1bc, 0x18, &(0x7f0000000100)="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"})
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r2, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r2, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r3, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r3, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$KVM_GET_LAPIC(r5, 0x8400ae8e, &(0x7f00000006c0)={"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"})
mount$9p_fd(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='9p\x00', 0x40008, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [{@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@subj_type={'subj_type', 0x3d, '/proc/sys/net/ipv4/vs/cache_bypass\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/proc/sys/net/ipv4/vs/cache_bypass\x00'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}})
getsockopt$inet_tcp_int(r1, 0x6, 0x8, &(0x7f0000000000), &(0x7f0000000080)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
dup(r6)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r7, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
clock_gettime(0x0, &(0x7f0000000ac0)={<r8=>0x0, <r9=>0x0})
r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r10, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r10, 0x0, 0x0)
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000b00)={0x0, 0xb, 0x4, 0x40000000, 0x2, {r8, r9/1000+10000}, {0x3, 0x0, 0x1, 0x6, 0x8, 0x2, "acc265da"}, 0x2, 0x1, @offset=0x9, 0x7, 0x0, r10})

00:40:09 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={<r2=>0xffffffffffffffff}, 0x106}}, 0x20)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
fsetxattr$security_ima(r3, &(0x7f0000000340)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "c1b7204763c9bbbf7ccafe98e98aca13"}, 0x11, 0x2)
write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000200)={0x8, 0xffffff93, 0xfa00, {0x0, {0x0, 0x264bd, "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", 0x2, 0x3, 0x1, 0x0, 0x0, 0x1, 0x4, 0x4}, r2}}, 0x128)
syz_genetlink_get_family_id$batadv(&(0x7f00000003c0)='batadv\x00')
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@type={'type', 0x3d, "29d59191"}}]})
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x6abd07691a47931, 0x0)
ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f00000000c0)={0x1, 0x49, &(0x7f0000000040)="b74c187d791487f550d65c6f7929fbf6d96b625c6e7914cae0d6a36c070fcbf5d05cb6c323a25aa259c8dd48bd93df848a2ceb67c80f616f8d51fc0ee6c875432decbbc5f57911030a"})

00:40:09 executing program 4:
connect$netlink(0xffffffffffffffff, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r6, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r6, 0x0)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r7, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:40:09 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
getpeername$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14)
r3 = dup(r0)
dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_SMI(r3, 0xaeb7)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={<r5=>0xffffffffffffffff}, 0x13f, 0x5}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f00000001c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000100), 0x3, r5, 0x30, 0x0, @in6={0xa, 0x4e20, 0x650, @mcast1, 0x7f}}}, 0xa0)

00:40:09 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x8400200)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x228142, 0x0)
ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000180))
ioctl$IMCLEAR_L2(r2, 0x80044946, &(0x7f0000000140)=0x31ee)
r3 = socket$unix(0x1, 0x1, 0x0)
accept$unix(r3, &(0x7f0000000080)=@abs, &(0x7f0000000000)=0x6e)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

00:40:09 executing program 3:
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$SNDCTL_DSP_GETCAPS(r1, 0x8004500f, &(0x7f0000000100))
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x200)
ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f00000000c0)={0x2, 0x480000, [{0x1ff, 0x0, 0x5}, {0x5, 0x0, 0xe48}]})
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

00:40:09 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(0x0)
r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r3 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r3, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3)
sendfile(r2, r3, 0x0, 0x20000102000003)

00:40:09 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

00:40:09 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@nodecompose='nodecompose'}]})
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x7})

00:40:09 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x9, 0x10082)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
utimensat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={{0x0, 0x7530}, {r2, r3/1000+30000}}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r4, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r4, 0x0)
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x34e1f0fd920296d})
r5 = dup(r0)
ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000001c0)=0x112138)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@type={'type', 0x3d, "29d59191"}}]})

00:40:09 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x406, 0x0)
write(r2, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r2, 0x0, 0x0)
ioctl$TIOCGRS485(r2, 0x542e, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r3, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r3, 0x0, 0x0)
write(r3, &(0x7f0000000140)="5735bffc0c46e39d68c9dd4ce39467cdd15ae931bfc7ae5913de83369601164f0a482ff3264c4b80edbc4c9c665d0b2cd617f5d6f70c8cb969c31bff9198079a78c10f7a9b5fc85ffd27c2cf78eb3fc3eb5c09911e084eba8b68d4cade73d122a42cb238a6f8c9c1ad185b41c705935fdaca9a47be81a459b9723705f7833ec362c45e8945d07d3c8273b989e9652300ac8b34fb469bd0f01b78fdaa4cc266643c983c759d0663cb6c4333eda7ad2d993f06f11d457ed0f0600035db368144800301962e58e9514fdd712f9e4fd797f2f3ae55059be6119dc631ac330e8890854cea5a093896254085a714815d75d7c67f63998b7dedc3bef80245f15388195eef63f811963cff0591654786793d188cee7954b3c72cc51bf92ec3b52289d23c45ab2cd4d3ccae24daef374f2a7f893b619639a8ebb28facbed2b5e13e4a4591020ebe48c5b5832e16b1181d471e3d85726107b16af687a41ec420f11b486fb44f91f1bc02425fc06acd56eb4d9e37bf4c1960e8d3908f26f137fabcd673f7ef37d91cdf8ece6ad6eae83c4417b59f3fc2e9513527b5e48834df4e256ea153bddd1936a5d59e645bd19c1fb0b00a088b06ae2ae40d63aa4733b9a4fc47c9e99c07c8b7c1375eee64236f47ead60142c4e2cce1821be044ee8ccad78aeffa0fda3ec8df0ddcccde8e45aed0c61f27c045b0bfcbcb3ee789fe9b339a3f5a8bd633402b889b04cf432b918ee3aeb97a5219ab4b3a09473b446daac52dcf41c1da540e610bfcfb53fa45fc413aabcac8dd1ff83801d88ffdb8bd0172d424604b5f0f9754f1f03095e205ab6fcb9232d261750bcc46977392fbfc8fccd6f7b816bb94ba315e14f84e94f06efc1004858316410f38c3b084b09b739fed03ecec63ee42087c0c87351e117de23dd36119e1a0ce062daf13eb1a88d39a06e7cedd1f501801d264ed94ef14e1aff6aec611ae643f1ae6aa55ad2458efc4a567fd23822dadb8b9e7d0dcd62558608efb6c01db29c467a10f7542dcb7a7d65b753f6e14c4a48941552652981dc6624554c0ef13fbbc6673c325a8adbdf90743581d88858cfdddec3568d1a2b3f541ce2041ec8725153a3149ce19d5c0a32cc76a1930fefb551a417992f2998a22dfda647ca6d9b4cd026466a6e20df1c077a97548345a4e29095341396eb53d3e6516f432993712de7330e06eddf353da08f1611f1a4c3050d903deddd372978c62d6524f34d0a3aa0d0fe52640bd6a8e1e31b2328d58bf5bed3b0d977c32d47563d63d2d6c769f4fd84224f839c5cacf4f981f12ac5f72a3ddc57574c86f489f85b2232eec1aa4c27a0983cee41c9433a6cfe8c90f8062b3d10ca3ad980de5c2bc1b91b49c5b4279c719a1ba616cfc168f5a4ad2e0f9ca619d83819e44adb2a190139f8cf50e54878dda767ddc372151a6b06bc36143d1d8d59c1899c40c098e9626f30928911192ac07d142cc7ceae6afe6cb680bd6242dddf1f3812c083ae41374b2401b72c2de21fcc39573378717edb6645477b6b4f396e1714373c09c376f486f956ff59ffee9d41e8021f8b4d97100554ebe6f6b520afccbe43e201fe569eba01b9a6d65dc9c130d261918e0425290a694110f24b20b180be17a3b0266d059dd7cfb6b77b793ee149d9535efd6e737fa9d79cc8636a4ca32558e1bca763f1b2a51e40dd57d6f245ce907c36bd86b5ba9dc45a8ae5ef4d81d7c1d790c022fb6d46e4d26c271eb95bc275d338084b0c0077e188a9d4bf5d4a0d7d972eadf5363bc64b380c7d18e4c966cb8cd814ca877e17dac45265659f1c80a6cf019d04854777c71c682ebbe80f2c6bd1cfccd34fd24178b553fca4c93d8ad19f1d44a75ab53cc43349a8bceed66365de4b0103f88b32055df174c1f7722162e90feea5c4177546872721a6659071af131baa37ac765f81afbf37deb1e3df023d4eef6a8924242d5e385a58454cae5bafec44cacd305d11996c2801e16a600bfa43bc01db60c4c6dc5dd271772bfeeef6bfc790f45a111d64994800ad5288252d27455ecdc6a94d58babf96684381049e2f6d268a13b459d155eae814e01305c9e50ceafbdabdeade852bc6edaff5e3987082a34e1e962c60c82b0acf92c395932a8e35aedee74f4b7da768d1accda9ca4423977737668c32523a59704c15edb016c06ffcba6ce985008a05fddc0ad260123bfa0311e86fdd47953f7612d8ad3a2dfb9e8c5b1c172cdce06e3ed4e3919160864a5c07d33c50e96370e4f8babe410864024df15a92ea967a52795f4ff4d4fe2a49bc804d997394a48b77ef2cb27fabf50ca6ed08d8a2c8e9f85bc60096c0ebb9edc73fa4d18fa10629778d5f7edf4e3d8c05e142043dc74e47ce2ab193847bb2877810b830321b8730988b532af8ba26bc17fda100776487e552956497b07abe655412a280440deb5f63268763069c75fbd08bcd5b203f2fac18f741a483de1a25e5551bcedd29a5ed57abb79993ceed884115ee4cd3ec4169ec196c16f4908901b558b67407bed7e40c0705af6661b8155a2c45b7698a393c9f3eec82247d9d762a8a8eb7647affc797c59dd2632045275749f6bacbf4565e8b4888bbe54279079f044c94b1018c4da84c527ac04f55cc8622531b38de02484a4bc4378655d2eb7065dc1ee55ffc096efa061ef671f2af9124476a01a2408c9aa44b0e823c8f44dee855ce2c9f6da335d697afb4159314a2f3f3d82b285df50feae33db9d052361747f69ff5b28935c9ff8d9a93631186aeed673f6763b1fcd10a3a6636a2f1d322777f50cfaf3339c9219791e6afd53789783000c89e5620ac1172275f5b57433c2d9d56b75831010688f33be83fdfe596ba2bf82caf9b1d19468aae496b5fd1e2523342e62becfebc743e994e49ef46c85ea60f2eb75540379d0b93cec38832390e76270d44725e1ca234a67721689940d8655d4c9031dd678db93652f5d38345fd666772e6ff25e15eee2bd6637827e686438812686a6dfa65e61ccee3d6dcf3ecbe856d632772945039845e46c5cf95dd4f512f6f65f9e579dc6621226bf5c1799414a196d1b6af6341853c7dcb1b9ffaff829b1cfdac88197839003a6fef2c762044c18e9942fdba9924361dd2902761dae1267004f28519e46288bdacce06fc86eac40bef39ebfdccaa123baf98b03b401229b9a78effd9c8687da08dac672e59bfa1cec7cdadfb9041759cd75d347e21db2e05a00f2bb81c77a79ac748064efa6e13b3e033a86c718368701777df9362baa76e014f84111bff040caf43596adeea0d1a16b866bf00122044cf68bdf66996562ce09b456e56c88491575dee6ca74276e28d89792f175cf5307e14a9243a4a43b440eb3f5d75d2cc5f753d709cfa5b46ea5c7664f0154c7e770920f93994281fa69fb6a170e25e01fbcce04a2484b3cc1f36fdbf835c3f967659c34fb834600907f56d0f282f36c7a5856a2fec8fb084276a95f8da94387865f6e6117f816912c3d6d39eb1f21f8a090952f5f380c031228963fc8b28dad48b6d4df24e56888d049879de270c4ed691708e8115f97ca1875cdd5597798c7e10b520a06b0684d80fc3c7b891294a21c7c2eea53b0e278da73b69feb952bfeac91166357d7e51c1d5a0b14de2d2b8265a4339ff4ef42269eaa7ca712bb2f29ed93428bb997ba788633ab2c9d8e65f6d8797fb965b5d20fe873df714489a4f085476ee081a54c3e2120f96c003dd60b855126066ec77106630a30d5f7de6c42cbba64d9c269c29029c3a84037093e41006a9323f7f50a16c81f4bc68e627698f6a850dc8bf71d153fdfcae8b78b9af3569f9afb0b62fa757082de6cbed53f5aa4fcd6be073749228ee85650bdee7632c5f42ead2dff4fecc3a367b33c84640664fc89f203554b03fa71c6eedc8f15a0d30812eb78653082f6ecb37ed2fbc38cca1bd1079809894999f33e4f6ddd089b6ddffe1a6d0afc8037152b18241c56f680457fa50701c349782a9c073e31bdb7d97972852cc58325db10f8caf0a8cf4e3d5e2f3754f511ddc016997a4498430a32c85ab4715491d665030e8ae6a2a5bfc44d4cc69c8267b269e9659af30c041d9cfac8d2cf2787877c245b803418735d0cfdce1f3c9972e8e6770372e6b7ceac0cbff0fb87b00a933194491430382c428df7f67389915b6ce5d1d3a1abfaeabfad6b8637a6ff1e8b3d18775cda2c5bedfa38ea2c3eaf0636ba7e36d3431c010551f7d4e08eacebb8c7554fa55112b65da25804c2476f814956bf0e7ec1626483c233012b3b4f910df66a4dbf23a0887c066f3c0e6ebe66c0024cbca600c5673ee420bdcfd09411ccc04352ccf9b0648efbdc411513839c29bea44e17384614f6861575dede1305d6710f6965bacbde056ead58966b954d546f63addb3bb496396645464097ebbf2a538eecf3f1dc5f241685d26064d9a212d3a27e979d7a45c13bf2379f777efb42251f88502f1e0ab1afb35d1fa9b543a4e2873839ae5f9bd801409cc20e7fbf1092631f152d16e1bc404e4ba992412990c7dcc1e7a3962f04bb0cb05b285ba044dfc443172b4feb70071b4c08ddf33e3fac37847799b037e03f213f58f3b0b56a41ea542eb2af5eccc0b5d09649513c147b709687ae8f53b7c8367bfbb851854a69a2859ce138fb5b2c13108d235864d1ecc152044bbd93df1ca06b47706933d743e1b87a7b401f0b3bbbdfc4061ab6a0b5169310bb6fe32a8329896e15637060cd25588b9b9d4c79f3100879342916ff4838fd45f4d06cb20d8098d1fc9b17444022e17fd6fe406054374dde492135591d92de59d0fa77cd0414a03f6b615ad927ffbba2b3f371c507ba983fa13ac8746cc227c682edd6e32a22398ae42ddb1eb4da5228e27dadd8373177f0b81f5d80262bde63ae712014859a02bcfe23188f93d567a7894855f35108d34cde900d092d455f36242f6d876bcfee1c2f647bba6408b8b9900d0e44dd0d407cf265989ce2445d3be5815c6a8bb0b0574754e56ea9c584c6bfdbd2e1aebea9058c13be6b1b3d433197ccf7a9c7b34bb78c41e4a2e9631e2d31a6ab8e1707ccaaf6779fed5579b5fc967c467103109b6e71f1d37ef605bbe52372cd858287ebd0de96adc61fdba419ee00210eadf53c44c8c5360d6995f721e67d4c73214a8f078f635b1a91fcc8e2443e3d258111071e735bedf59d705ed80a348972a94529b4c3078b187e7516f3e8c7eaf8db7c997652a7113a83d527e29260f3449182b8a41f32814a8261b68ddc78b6141d7d720fdc7849b10e131ecf3f0e95369957fb6795a136eb31116c0522cf0a90e689a84acbd9d23329b5968f552ee01d3bc9ef97d172085d429c4266182be510847ad04ffbb1752a00015a8b51c63d9cb8d659439871e4ac4b6bac275ceedf8ded5f19d2602c579e2f5f556e80823dffc413bb28aaca8191da6edab8de6987eaaf575fc05aace2e1d8aaa867acf5490727d4a7e5bfad064fee8c8c6a75772995bbfe82a32163e01668a5788552e95c4d22bd825f9c2d9623cebc9a43df7a5c69138d920070c33a9efb4a774323634a78e061d60e3929fba20b30811a48ed5f0c9c32b43e173368583ed601b2903541de09e3f5cda069a65973811b1cb2ff1201c52953b5403777c16c64e08d8c1dd90b4c6b5cbc3011d26743ec6deecab7db9a4a3a9766c9ef7b5deaecb420f99494124b7fc84985944d3ff6517c187c2b120b3f7453d4c5ac91bd3794c524e4c6031c42fc6a886f59319c56de6408fc71dac337bb935867b0007781b213", 0x1000)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

00:40:09 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(0x0)
r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r3 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r3, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3)
sendfile(r2, r3, 0x0, 0x20000102000003)

00:40:09 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000140)={0x9, &(0x7f0000000040)=[{0x3, 0xec, 0x0, 0x7fff}, {0x200, 0x8, 0x5, 0x9}, {0x101, 0x6, 0x2}, {0x1, 0x40, 0x1, 0x1}, {0x3ff, 0x5, 0xfa, 0x7}, {0x3, 0x40, 0x2, 0x1}, {0x8, 0x81, 0x3, 0x4b9e2f86}, {0x8, 0x3, 0xf0, 0xffffffff}, {0x79, 0x2, 0x81, 0x800}]})
write$selinux_access(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="737973746533286e666f626a6563745f723a6c6f63616c655f743a7330202f7573722f7362696e2f63757073246a726f77736564203030303030303030303030303030303030303039006deb2361ce10a740f3"], 0x4a)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)

[  995.495022] hfsplus: unable to find HFS+ superblock
00:40:09 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB])

[  995.592572] hfsplus: unable to find HFS+ superblock
00:40:10 executing program 4:
connect$netlink(0xffffffffffffffff, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r6, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r6, 0x0)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r7, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:40:10 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="ae92df6f65fa68d7a173652c00"])

00:40:10 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(0x0, 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:40:10 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
dup(r0)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x6}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x404c015}, 0x20008000)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x6, 0x0)
futex(&(0x7f00000000c0)=0x1, 0x8c, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000240), 0x0)
write(r2, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r2, 0x0, 0x0)
ioctl$KDSETLED(r2, 0x4b32, 0x7f)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)

00:40:10 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='io.stat\x00', 0x275a, 0x0)
writev(r0, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r0, 0x0)
ioctl$UI_DEV_DESTROY(r0, 0x5502)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r4=>0x0}, &(0x7f0000cab000)=0xc)
setuid(r4)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@type={'type'}}], [{@subj_type={'subj_type', 0x3d, '/dev/qat_adf_ctl\x00'}}, {@obj_type={'obj_type', 0x3d, 'lo('}}, {@uid_lt={'uid<', r4}}, {@permit_directio='permit_directio'}, {@uid_gt={'uid>', r4}}]})
r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000740)='/dev/qat_adf_ctl\x00', 0x20000, 0x0)
setsockopt$inet6_tcp_buf(r5, 0x6, 0xe, &(0x7f00000007c0)="5068f32977cc311f529133cff1ebde76f8360a0c366bc9305e42dce37b873dedec53b6be6338356c15e9b6", 0x2b)

[  996.057103] hfsplus: unable to parse mount options
00:40:10 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={<r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r1, 0x0, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x6, 0x0, 0x0, 0x90010, &(0x7f0000000180)=ANY=[@ANYBLOB="090240615ba0177302000000000000548414d80200", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="98bfce0da988c7aea739e56c8810f081376d317ecdc8c9798cb03d6e7a69369e9208f35471d8c39d314ae7d755603f36ccad7dae7c967725357f05a67c15f2028abed48018824ca4aebdffc1c209624ceade46de1049592e73f338dfe3b45e8889e612a28b7a8a18bf2f460f9076dc3cee6e916172"], @ANYRES64=r0, @ANYPTR=&(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYRES32=0x0, @ANYPTR], @ANYPTR, @ANYRESHEX=0x0, @ANYBLOB="27dae1ae93714955c997b5d2af2c7244d10916aa18c45bb0e961871002348c5c5d2d6b58e73ff553897acc05b34dc1583ad3509ef759f98eb2a7557f17c1cfc427c84c2f1a16989aef29eb0fe8ed0cd2dbd371a4f9543ddde3e3796ccc168baa8d5d", @ANYRESDEC=r1, @ANYRESHEX, @ANYRES64]])

[  996.129731] hfsplus: unable to parse mount options
00:40:10 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="6e6f6465636f6d706f738e2c00"])
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0xe0, 0x4, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88ed}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x14d}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa01}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7f}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3003}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xdb}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x29}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffe}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x5}, 0x8000)

[  996.364038] hfsplus: unable to parse mount options
[  996.431393] hfsplus: unable to parse mount options
00:40:10 executing program 2:
r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x280)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00')
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00')
pipe(&(0x7f0000000ac0)={<r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
accept4$packet(r3, &(0x7f0000002940)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002980)=0x14, 0x80000)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000002a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002a40)={&(0x7f00000029c0)={0x5c, r2, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00')
pipe(&(0x7f0000000ac0)={<r7=>0xffffffffffffffff})
vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
accept4$packet(r7, &(0x7f0000002940)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002980)=0x14, 0x80000)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000002a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002a40)={&(0x7f00000029c0)={0x5c, r6, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x80)
getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14)
eventfd2(0x9c, 0x80001)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xc4, r1, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_LINKSTATE_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4}, 0x4008000)

00:40:10 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(0x0, 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:40:10 executing program 4:
connect$netlink(0xffffffffffffffff, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r6, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r6, 0x0)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r7, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:40:10 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clock_gettime(0x0, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0})
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x4, 0xa, 0x4, 0x4000000, 0x401, {r2, r3/1000+30000}, {0x5, 0x0, 0x7e, 0x9, 0xa7, 0x0, "23f95dba"}, 0xffff0a4d, 0x3, @fd, 0x10001, 0x0, <r4=>0xffffffffffffffff})
statx(r4, &(0x7f0000000100)='./file0\x00', 0x100, 0x100, &(0x7f0000000140))
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)

00:40:11 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="756bce600d8f45f04d00"])
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
sendmmsg$alg(r2, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="fc465ab9ecd3d9f9a6970df3265f16a7ec274e93facc391e50a884e659ee82f0dda7ea3217b0f3772c2aa23ce5500687f172d5153ce94d7d6b538fa7559b5c0ce2d0628e4963ac37925047cf120bb4f60139aef90a6f08bab32d845f87237c88527c18dbe28ddbb5e8cd1596161b754f87d9ee29283a06023a4f99f844f07052c455d0480d875210739aa5765d753cf0ba33e9095438dcf3998c61304359774340670c8ab2189584016f7738a9fce384dcd21bbeccfa2071c1ce0cda8b99929275023204841a29c214f7d6bffddbd2fa40341520e8c9039199212b6c44ac0a68d22f9e774246f7", 0xe7}, {&(0x7f0000000080)="7f2126560509e9b7d60fbb197fc3e810313731d9821756dfe114f57b5b74f096ac5c383f3c687cb0cc0b4d415c72508bb406a7610f0c5fe2a8245403dfb75fed73904b0324aff15ab1c50af1413e46bc282a4d8d3d2bda50799b40c9c89ad817c143db4e", 0x64}], 0x2, &(0x7f0000000280)=[@iv={0x20, 0x117, 0x2, 0x7, "3405d72d055de9"}], 0x20, 0x8080}, {0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)="b16f663b97da6e37e871946aa71fe1ffd1755a3b86ee3b15dc8b46a4", 0x1c}, {&(0x7f0000000300)="6dde2aa071621c3c2a75d5d1bda546211e1c226d2504ae215d4244da8a8ca50d7167552ba9cf0ab5b2", 0x29}, {&(0x7f0000000340)="29452089d873483ad6db46ca5b32325af499a89e203e658400c0199839f11825070fd9fe422c792263ac98d1bb023e786dd3a8496fa96a849bb89f4348b6e4fcffcc", 0x42}, {&(0x7f00000003c0)="71df0a39e5854c187a2eb34caa8710245abe94da960492f8244595232dc100d633dbef54062eb3ccf8d075e5e79b8a7cab0af9702c421c53e1fe746102ffac9207c4cb6e912abe3f1c171ca149c6d00d58bc70ed9466be70e8e2d2f18c35bd17f719bb355735db5bc473abda0efe7dc513500f43f5bcd101f4780fe993a0c8cfa098c854bd87b816221b89445e1e4c0ca20d5baa420ddfadeaf1c830f10f8f7cfd85803bcd6ffe0c8c041f3469dd", 0xae}, {&(0x7f0000000480)="ec3578dafaaf5a0b3c4f499346593bf6c6dc4f25585c31ca96b3d004fa0957ee095e564b2bcea44a5c5b94fb9be3eeb936a9747012deed093926ac591f4c98e8a3d7989f9d5305a50c92b049c642d6d1daaedd12fbdfaa5441971495502e7a25a988061c6a62", 0x66}, {&(0x7f0000000500)="faae6c1c49de3035492e6c2879952b28c9b04cefd5f7acf2d8ca26016ee8e219b93fe97934aca7174fa67a95154cf25941ba590ee5111229", 0x38}], 0x6, &(0x7f00000005c0)=[@assoc={0x18, 0x117, 0x4, 0x8}, @iv={0x38, 0x117, 0x2, 0x20, "0daee03f8fed496facbc9e51fcd74d4d002553c35352fa71c0b28c27cfc1ed37"}, @assoc={0x18, 0x117, 0x4, 0x1}], 0x68, 0x44}], 0x2, 0x0)

00:40:11 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="747991753d29d591912c00257a859c640834cd5be9e86dff3027863291f88ce7a63d4061ca1ae2d8b8cb9439240b97e2ba620baa5c027429949045a35e5aefe5fadacc4945e500003d00"/84])
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x100, 0x0)
ioctl$SIOCNRDECOBS(r0, 0x89e2)

00:40:11 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@nodecompose='nodecompose'}]})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETXW(r1, 0x5435, &(0x7f0000000340)={0x9, 0xff00, [0xd4, 0xb91e, 0x7, 0xa6, 0x7], 0x6})
r2 = getuid()
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
r4 = getuid()
mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuseblk\x00', 0x4d1e040e15142f0f, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@blksize={'blksize'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@fowner_gt={'fowner>', r4}}, {@subj_type={'subj_type'}}, {@pcr={'pcr', 0x3d, 0x3e}}, {@appraise_type='appraise_type=imasig'}, {@pcr={'pcr', 0x3d, 0xd}}, {@seclabel='seclabel'}]}})

[  997.392175] hfsplus: unable to parse mount options
00:40:11 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(0x0, 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

[  997.457745] hfsplus: unable to parse mount options
[  997.476172] hfsplus: unable to find HFS+ superblock
[  997.566817] hfsplus: unable to find HFS+ superblock
00:40:11 executing program 4:
socketpair(0x0, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r8, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:40:11 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2002, &(0x7f0000000340)=ANY=[@ANYBLOB="7375626a5f747970653d2a2c2c001f"])
r0 = gettid()
tkill(r0, 0x1000000000016)
ioprio_get$pid(0x0, r0)
tkill(r0, 0x40)
timer_create(0x3, &(0x7f0000000000)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000040))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r1, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r1, 0x0)
socket(0x10, 0x2, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r2, 0x1)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
setuid(r3)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0x2, 0xffffffff, {<r4=>0xffffffffffffffff}, {r3}})
sched_setparam(r4, &(0x7f00000001c0)=0x81)
sendmsg$nl_netfilter(r1, &(0x7f00000002c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0xfffffffffffffd3c, 0x13, 0x0, 0x801, 0x70bd25, 0x25dfdbfe, {0x1}, [@typed={0x0, 0x7e, 0x0, 0x0, @ipv4=@broadcast}, @typed={0xf4, 0x49, 0x0, 0x0, @str='memory.events\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4000080}, 0x1)

00:40:12 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00')
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="601c0038", @ANYRES16=r6, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r5, @ANYBLOB="4400028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB='\b\x00\a\x00\x00\x00\x00\x00'], 0x60}}, 0x0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000500)=<r7=>0x0, &(0x7f0000000540)=0x4)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r8, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000580)={'team0\x00', <r9=>0x0})
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r10, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r10, 0x1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in6=@initdev}, 0x0, @in6}}, &(0x7f0000000740)=0xe8)
getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000780)={@loopback, @multicast2, <r12=>0x0}, &(0x7f00000007c0)=0xc)
r13 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00')
pipe(&(0x7f0000000ac0)={<r14=>0xffffffffffffffff})
vmsplice(r14, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
accept4$packet(r14, &(0x7f0000002940)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002980)=0x14, 0x80000)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000002a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002a40)={&(0x7f00000029c0)={0x5c, r13, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r15}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x80)
r16 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00')
pipe(&(0x7f0000000ac0)={<r17=>0xffffffffffffffff})
vmsplice(r17, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
accept4$packet(r17, &(0x7f0000002940)={0x11, 0x0, <r18=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002980)=0x14, 0x80000)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000002a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002a40)={&(0x7f00000029c0)={0x5c, r16, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r18}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x80)
r19 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r19, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r19, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r19, 0x8933, &(0x7f0000000800)={'batadv_slave_0\x00', <r20=>0x0})
r21 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00')
pipe(&(0x7f0000000ac0)={<r22=>0xffffffffffffffff})
vmsplice(r22, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
accept4$packet(r22, &(0x7f0000002940)={0x11, 0x0, <r23=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002980)=0x14, 0x80000)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000002a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002a40)={&(0x7f00000029c0)={0x5c, r21, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r23}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x80)
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000b40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000840)={0x298, r6, 0x8, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r7}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x134, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x1f}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r15}, {0xbc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r20}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r23}}}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x60}, 0x24000811)
setuid(r3)
r24 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r24, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r25=>0x0}, &(0x7f0000cab000)=0xc)
setuid(r25)
setreuid(r3, r25)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="747970653d29d591912c007bac4cf1feb958e0d504d7b16b301f935ba72f6cf30b8d97e5aa9d8fdc0fee02c203e9fd61a9f893dd2cae0aa1669fe941921f2e66931004ecf0e9264ea07c42ddc60b79bba4dab6983ddcd1283c3d41ea1c0df83261c002025a6eaf1251f7023f833b3a4ed3f0b5f55cab0e0261fb1536cd97aefa231ebac6f54e8e94adfc32e6f20b40d7b031829b7577438e4eaccbcbba2640b44b16a5a8ee60f262c5902fcb30896910c720426baa0533885818f045b7e74538abdb00000000"])

00:40:12 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:40:12 executing program 4:
socketpair(0x0, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r8, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:40:12 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:40:12 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
timerfd_gettime(r1, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@type={'type', 0x3d, "29d59191"}}]})

00:40:13 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x2000000000000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="002515b60b40d1462bb8c9a450de88e900000000000000000000a07d30acd6fad4872605a811611c9aa13fb9abb749fd77f7fcef954468a68798dd7592d20338213773654c3cd6e332b723e945c575233bdef0f8adda67705e4b931a578859a334425dfb999b81e5a8410fac100840f6c146b3138030ef9a8ee7cfc1ad5d51583ab614a73297721707381f7d2bc617f44c46842ed93bdab466d0ca2b2a6aaf3e2ee409fad363b1839dfa995e1248a5f08eaa95eb64b77141a4e71f814b029cfab99f81cd927d2898cc3f8a96d690ed12d8ab5361fca738f14685cca01ca6424f16c68a6d447ce8e022a7b3a4418ba74d93a4142a7f"])
r2 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0xa)
write$selinux_load(r2, &(0x7f0000000180)={0xf97cff8c, 0x8, 'SE Linux', "4eacac3d98dedb49872d502289400cfb2e09e76ffa2793e983b1bfc9cc8a4ee0fd25b515704b508da55480c75c39cfcf74f45318a9ba0c5c4733a931e386c8b97df3834ec800d885f27a818e9431193930d71e2e4f3d6f421179431f43694d4c7873f5dbb8f454b2d6ae570a4f83a9bc5e3b8599cea7ef4ca4fa15f833c9c3fba61e1fc531dfb7523813bafd286c0444f1e93c66e516c95f95d3e2e0e6556392fb52ce9300f7850b4be613ba86cad0e987829932a5c26b72050eb98129d0d19f973e92b916862aecece148e53a6cf6f25787e605701730c3afe38e6398dfedf8c157af5bf3b83b59e44ed5fe93c175c57de56373"}, 0x104)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VFIO_SET_IOMMU(r4, 0x3b66, 0x1)

00:40:13 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="748c0000000078d1ab1400"])

00:40:13 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={<r0=>0xffffffffffffffff})
syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x2, 0x141000)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780))
setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000040)={0x3}, 0x4)

00:40:13 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000180)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x24800, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0])
pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
bind(r2, &(0x7f00000001c0)=@rc={0x1f, @fixed={[], 0x11}, 0xfe}, 0x80)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write$6lowpan_enable(r3, &(0x7f0000000080)='0', 0x1)

00:40:13 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:40:13 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="747970653d29d52a06d4893f919d4dcabb"])

00:40:14 executing program 2:
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f0000000180)=0xe8)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x0, 0x0, 0x208010, &(0x7f00000001c0)={[{@uid={'uid', 0x3d, r0}}]})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000200)={0x0, 0x30, 0x1, <r3=>r2})
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x2)

00:40:14 executing program 4:
socketpair(0x0, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r8, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:40:14 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$VT_DISALLOCATE(r1, 0x5608)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@type={'type', 0x3d, "29d59191"}}]})

00:40:14 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x0)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

[ 1000.935930] hfsplus: unable to find HFS+ superblock
00:40:15 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000000, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6e6f6465636f66e6e0d5c52c00"])
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000000)=0xfffffffa)

[ 1001.149494] hfsplus: unable to parse mount options
[ 1001.203896] hfsplus: unable to parse mount options
00:40:15 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = msgget$private(0x0, 0x481)
r2 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
setuid(r3)
getresgid(&(0x7f0000000000), &(0x7f0000000040)=<r4=>0x0, &(0x7f0000000080))
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r5, 0x1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@broadcast}, 0x0, @in6=@remote}}, &(0x7f00000000c0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, <r7=>0x0}, &(0x7f0000000380)=0xc)
getgid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc)
setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x0, 0x3)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)={0x0, <r8=>0x0})
r9 = fcntl$getown(0xffffffffffffffff, 0x9)
msgctl$IPC_SET(r1, 0x1, &(0x7f0000000300)={{0x3, r3, r4, r6, r7, 0x190}, 0x0, 0x0, 0x200, 0xfc7e, 0x7, 0x5bd, 0x0, 0xf4d6, 0x2, 0x6, r8, r9})
r10 = dup(r0)
ioctl$EVIOCSKEYCODE(r10, 0x40084504, &(0x7f0000000440)=[0x1, 0x8])
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@type={'type', 0x3d, "29d59191"}}]})

00:40:15 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@creator={'creator', 0x3d, "bd7961d9"}}]})

[ 1001.409556] hfsplus: unable to find HFS+ superblock
00:40:15 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="747970653d29d591910b00"])

[ 1001.513539] hfsplus: unable to find HFS+ superblock
00:40:15 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x0)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

[ 1001.537055] hfsplus: type requires a 4 character value
[ 1001.545734] hfsplus: unable to parse mount options
00:40:15 executing program 2:
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
timer_gettime(r0, &(0x7f0000000000))
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@nodecompose='nodecompose'}]})

[ 1001.704357] hfsplus: unable to find HFS+ superblock
00:40:15 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r2, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r2, 0x0, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000000)=0x8001)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@type={'type', 0x3d, "29d59191"}}]})

00:40:15 executing program 4:
socketpair(0x26, 0x0, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r8, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:40:16 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x0)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:40:16 executing program 4:
socketpair(0x26, 0x0, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r8, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:40:16 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r4 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r4, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
sendfile(r3, r4, 0x0, 0x20000102000003)

00:40:16 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
dup(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'wg2\x00'}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8000}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1781}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8880}, 0x40000)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x3}}, {@obj_type={'obj_type', 0x3d, 'type'}}, {@permit_directio='permit_directio'}, {@smackfsdef={'smackfsdef', 0x3d, 'wg2\x00'}}, {@pcr={'pcr', 0x3d, 0x1a}}]})

00:40:17 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@type={'type', 0x3d, "29d59191"}}]})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @ipv4={[], [], @rand_addr=0x2}}, 0x1c)
listen(r2, 0x1)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000000)=0x20, 0x4)

00:40:17 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="7479706508000000912c00be48e8512fd992093ab34db3699152ff603768e6364dc47a9b4321b70e222e1031b0dbb1edaa173ef9b20e8f90adda9a0bc0c791c6b21743776d98579bbc730000000000000000"])

00:40:17 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="647970653d29d591912c002ce1bc6fb0792ea13c8b0a87dcaac79d04eb3f61fb71c049cc8b62eca344a87d512ca7196e9c935c83993dbd8be2df9760cd53cc22866e2b16e73524f5435e51bfaed61c7961c2b19044b5e0d5c0bfd57a46608a29008ae373d8d2d0daa92fcd960357a70372c6"])

00:40:17 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="747370653d29d591912c00"])

00:40:17 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r4 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r4, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
sendfile(r3, r4, 0x0, 0x20000102000003)

00:40:18 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r4 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r4, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
sendfile(r3, r4, 0x0, 0x20000102000003)

00:40:18 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r2, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r2, 0x0)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
linkat(r2, &(0x7f0000000180)='./file0/file0\x00', r3, &(0x7f0000000200)='./file0\x00', 0x0)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="c1c5610100000000fffffff2000000000077b2382bdb395f849d0759e663c34f06b5ab5f0f9effd6582ee0acea1f777c92f7513939699523d7939a22b5d31ce271b063e247e07d7383300763757d1e05e7b91fb503bdb9370f73d97446d6aca534099cfd72f1abc299ccc42831d26a39c76185d68244fceb2cc36e4e45700c7e1da5661febc97d2b67bade3e04d69530bf25977e05b991245bf145f931a5d2a342242ab0e566dfc60ffa50260d34d8a45500551a06bdc940a5727f94bd6be42548d726b041ed7c"])
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f0000000080)={&(0x7f0000000000)=[0x2], 0x1, 0x1c9f, 0x66, 0x7fff, 0x0, 0x7ff, 0x5, {0x1, 0x3, 0x8000, 0xfffb, 0x3ff, 0x8, 0x6030, 0x3, 0x4, 0x7, 0x6, 0x2, 0xfffffffc, 0x800, "4d5472a9fee45f9b48a220d844eb7f61025713bfe915112f2ae5d4cd47709262"}})

00:40:18 executing program 4:
socketpair(0x26, 0x0, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r8, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:40:18 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@nodecompose='nodecompose'}]})
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r0, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r0, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r1, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00')
sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r3, 0x301, 0x0, 0x0, {0x4}}, 0x14}}, 0x0)
sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="fd000000", @ANYRES16=r3, @ANYBLOB="00012cbd7000fbdbdf2502000000080006000900000008000400ff030000080005000900000008000500ff01000070000380060007004e200000080003000300000008000300030000000500080016000000140002006e657464657673696d3000000000000014000600fe8800000000000000000000000000010800050000007fff060007004e2000001400020076657468315f746f5f6873720000000008000500070000000c000180060004004e2100000800060002000000"], 0x3}, 0x1, 0x0, 0x0, 0x4000082}, 0x8801)

[ 1004.892906] hfsplus: unable to find HFS+ superblock
00:40:18 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in=@empty, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@local}, 0x0, @in6=@remote}}, &(0x7f0000000040)=0xe8)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x10000000000, 0x0, 0x0, 0x140004, &(0x7f0000000080)=ANY=[@ANYBLOB="747970653d56009b912c7569643c", @ANYRESDEC=r2, @ANYBLOB])

00:40:19 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="747970653d29d591912c003f3777f323d5b0b2cc4b259fd0454ce566ccb0d642a4863b3cb2c24d00befd709e0aa8fbd127dd0bddee9c15d5cd8c369910b5a56c12a99b04f1a02d2f346d7412946add430e48f429b51a71433d81afee260370d7f54f914f"])

00:40:19 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x6177, 0x1272c3)
ioctl$VIDIOC_G_JPEGCOMP(r1, 0x808c563d, &(0x7f0000000180))
write(r0, &(0x7f0000c34fff), 0xffffff0b)
r2 = socket$inet6_dccp(0xa, 0x6, 0x0)
fchdir(r2)
write$P9_RREADLINK(r0, 0x0, 0x0)
ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000040)=0x5)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="883f489313a807e561b9753054aba5de76df7296ac6f321bbd6a727ffe6012671ebe0fe88051a1895a66c83a6acbce5456618b4e1aa7faf69a63e23345afe377cc029077d8a276b873a1ed8b359053b7a1f4efe9718bce62135f683e2a41bc4766200d4f53214a2c0dd6c628c2d77abcc56310935fef183c75017a8dc2fba66452003fb870e03faf0d41eed54a5fb2cf2c85b33b887712daefdd6e77bcfdb52c9041d312243fa8b40a08d36bb8b45112a2547518b99061"])
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r3, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r3, 0x0)
ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000080))

00:40:19 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = accept4$ax25(r2, &(0x7f00000001c0)={{0x3, @netrom}, [@netrom, @netrom, @null, @default, @null, @default, @bcast]}, &(0x7f0000000240)=0x48, 0x80800)
setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000280)=@netrom={'nr', 0x0}, 0x10)
r4 = dup(r0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r5, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r5, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000380)=0x1)
write(r6, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r6, 0x0, 0x0)
ioctl$TIOCSSERIAL(r2, 0x541e, &(0x7f0000000300)={0x101, 0x7, 0x3577, 0x0, 0x9f06, 0x4, 0x80000000, 0x0, 0x57e8, 0xea, 0x4, 0x8, 0x234b, 0x3, &(0x7f00000002c0)=""/57, 0xfffa, 0x3, 0x26f9})
ioctl$VIDIOC_TRY_EXT_CTRLS(r5, 0xc0205649, &(0x7f0000000080)={0x9b0000, 0x3, 0x8, r6, 0x0, &(0x7f0000000040)={0x990a7b, 0x7, [], @p_u16}})
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="747970652db1549e845760"])

00:40:19 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, 0x0)
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

[ 1005.437512] hfsplus: unable to parse mount options
00:40:19 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="747970653d29d59191b3d10aedfb6fb61f457b4b503d4e1a766853df01000000000000005e386f304d7b68d206cbb3d61555fa06b9223a33e98537def65ae802c73ab4e2c246af4e0928a30fd5d2cb46bfdfc0facf19526fce156e31169636795bb0f0aab0e36a7f6c50d22235026de0148babd21050b910d076e987c89a64ab337e36bcdf4f09c6a447f7da62825e47879e5c76bcf8754776199b2149d988edd9973cf4df7adb5fbc8c40c3ef47b23cb2"])
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r3, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000400)=""/90, &(0x7f0000000480)=0x5a)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r3, 0x0)
sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, 0x4, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x200}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x21a}]}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}]}, 0x54}}, 0x90)
sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)={0x58, r2, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "464d164b82ab3d2046a90ed7a4"}, @NL80211_ATTR_KEY_SEQ={0x12, 0xa, "dc72096fdb8b829ee60004703408"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "8f31cc1fcc992c705639a8fb79"}]}, 0x58}, 0x1, 0x0, 0x0, 0x40080}, 0x8000000)

00:40:19 executing program 4:
socketpair(0x26, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r8, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:40:19 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r1, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7)
recvmmsg(r2, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000000000)=""/39, 0x27}, {&(0x7f0000000040)=""/186, 0xba}, {&(0x7f0000000180)=""/17, 0x11}, {&(0x7f00000001c0)=""/3, 0x3}, {&(0x7f0000000200)=""/177, 0xb1}, {&(0x7f00000002c0)=""/115, 0x73}], 0x7, &(0x7f00000003c0)=""/7, 0x7}, 0x41}, {{&(0x7f0000000400)=@nl=@proc, 0x80, &(0x7f0000000540)=[{&(0x7f0000000480)=""/179, 0xb3}], 0x1, &(0x7f00000007c0)=""/205, 0xcd}, 0x7}], 0x2, 0x62, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x1800088, &(0x7f0000000780)=ANY=[@ANYBLOB="7479703d29d591912c00"])

00:40:19 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@type={'type', 0x3d, "29d59191"}}]})

00:40:20 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x30480a2, &(0x7f00000001c0)=ANY=[@ANYBLOB="09e57ff9feffffffffffffff3b2e7d19a025c10e7d915e17b38dae78bc7540e886efa169882c0eeb447a5379a30d568eccf86069f9e841a303dbedd844ad4e1aab6302a9c46ba0cb6a507e54db801203c788a103da5d97ad48243aea8f8f6ed73689bd8d441a0ba5835d2f4a82923d57f8506465fdc9082c8bbe0b44694d1a479a00b59711c4e5ceefb72a22d86fb61fb1787f43e8b48697503d7797a2d5a57e1c4fb2a5f18eed4fd50608c883ce4e78a1b5ce9bccf36a9b26e4804b4d53ccd27ce81fd0ac3ee7b440f53ea5ae6b97f9ca7d27f415f2a7f492e8d3281f280eb56cc4a8bdeff970621fd6d0edd688c7"])
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r2, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
connect$tipc(r4, &(0x7f0000000080)=@id={0x1e, 0x3, 0x3, {0x4e24, 0x3}}, 0x10)
ioctl$KVM_S390_VCPU_FAULT(r2, 0x4008ae52, &(0x7f0000000000)=0x3)

00:40:20 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r1, 0x0, 0x0)
r2 = getpgrp(0xffffffffffffffff)
ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000000)=r2)
r3 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="74798b6e11bcaffa68c600"])

[ 1006.109531] audit: type=1800 audit(1582504820.138:117): pid=12276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name=BB dev="sda1" ino=17395 res=0
00:40:20 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6465636f6d706f73652c0044dc7e3f29d8736447e89421e3e5d32391560dc4ea05ac9d68b5d711815d160342de7c1ce3c85f9019"])
r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x420000)
write$FUSE_GETXATTR(r0, &(0x7f0000000080)={0x18, 0x0, 0x5, {0x7fffffff}}, 0x18)

00:40:20 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, 0x0)
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

[ 1006.278291] hfsplus: unable to find HFS+ superblock
[ 1006.291654] hfsplus: unable to parse mount options
[ 1006.326740] hfsplus: unable to find HFS+ superblock
00:40:20 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="6e516420be66a4edc0"])

00:40:20 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000801}, 0x8841)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r2, 0x0, 0xc, &(0x7f0000000140)=0x20, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
linkat(r4, &(0x7f0000000240)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00', 0x1c00)
r5 = dup(r3)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r6, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r6, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(r7, 0xc0206434, &(0x7f0000000180)={0x6, <r8=>0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_SG_FREE(r6, 0x40106439, &(0x7f00000001c0)={0xffffffff, r8})
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)

00:40:20 executing program 4:
socketpair(0x26, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r8, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

[ 1006.556142] hfsplus: unable to parse mount options
[ 1006.658088] hfsplus: unable to parse mount options
00:40:20 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000780)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'])

00:40:20 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r0, &(0x7f0000c34fff), 0xffffff0b)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x40001, 0x0)
r2 = socket$inet(0x2, 0x4000000805, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
r4 = dup3(r2, r3, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, <r5=>0x0]}, &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0xe, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b38b)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e21, 0x9, @local, 0xffffff81}}}, 0x84)
write$P9_RREADLINK(r0, 0x0, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r6, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r6, 0x0, 0x0)
r7 = fcntl$dupfd(r0, 0x406, r6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={<r8=>0x0, 0x101}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f00000000c0)={r8, 0x80}, 0x8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)

00:40:20 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r0, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r0, 0x0, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x60020, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0])

00:40:21 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, 0x0)
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

[ 1007.095141] hfsplus: unable to parse mount options
00:40:21 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000000c0)=0xffffffffffffffff)
r2 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in=@multicast1, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000040)=0xe8)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f0000000080)=0xe8)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@session={'session', 0x3d, 0xfffffffffffffffd}}], [{@fowner_lt={'fowner<', r3}}, {@fowner_lt={'fowner<', r4}}, {@smackfsdef={'smackfsdef', 0x3d, '.'}}, {@appraise='appraise'}, {@smackfstransmute={'smackfstransmute', 0x3d, 'type'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x34, 0x64, 0x66, 0x63, 0x30, 0x32, 0x37], 0x2d, [0x30, 0x30, 0x63, 0x32], 0x2d, [0x31, 0x38, 0x37, 0x39], 0x2d, [0x30, 0x65, 0x55, 0x39], 0x2d, [0x61, 0x63, 0x65, 0x3, 0x36, 0x64, 0x39, 0x37]}}}, {@subj_role={'subj_role'}}, {@obj_role={'obj_role', 0x3d, '#\xce\xe7\xe5\x1d'}}]})

00:40:21 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r2, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r2, 0x0)
write$P9_RCREATE(r2, &(0x7f0000000000)={0x18, 0x73, 0x2, {{0x42, 0x2, 0x1}, 0x5}}, 0x18)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@type={'type', 0x3d, "29d59191"}}]})

00:40:21 executing program 4:
socketpair(0x26, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r8, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:40:21 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x6, 0x40000)
setsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000040), 0x4)
r2 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@type={'type', 0x3d, "29d59191"}}]})

00:40:21 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
lookup_dcookie(0x18, &(0x7f0000000040)=""/221, 0xdd)
ioctl$UI_SET_SNDBIT(r3, 0x4004556a, 0x5)

00:40:21 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x0, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:40:21 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = gettid()
tkill(r2, 0x1000000000016)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r3, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r3, 0x0, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00')
pipe(&(0x7f0000000ac0)={<r6=>0xffffffffffffffff})
vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
accept4$packet(r6, &(0x7f0000002940)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002980)=0x14, 0x80000)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000002a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002a40)={&(0x7f00000029c0)={0x5c, r5, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x80)
sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x30840083}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=@mpls_delroute={0x1f0, 0x19, 0x800, 0x70bd28, 0x774, {0x1c, 0x80, 0x14, 0x1, 0xff, 0x4, 0xfe, 0x2, 0x200}, [@RTA_NEWDST={0x84, 0x13, [{0x3, 0x0, 0x1}, {0x9}, {0x9}, {0x800}, {0x36, 0x0, 0x1}, {0x1}, {0x80, 0x0, 0x1}, {0x4}, {0x9, 0x0, 0x1}, {0x7e97, 0x0, 0x1}, {0xfff, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x7fff}, {0xc94, 0x0, 0x1}, {0x9}, {0x4}, {0x2, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0xffff, 0x0, 0x1}, {0x7fff}, {0x0, 0x0, 0x1}, {0x100, 0x0, 0x1}, {0x100, 0x0, 0x1}, {0x9}, {0xff2d4, 0x0, 0x1}, {0x9}, {0xfff81}, {0x5, 0x0, 0x1}, {0x6}]}, @RTA_NEWDST={0x84, 0x13, [{0x4}, {0x7f}, {0xff, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0xc97d}, {0x3, 0x0, 0x1}, {0x2}, {0x4, 0x0, 0x1}, {0x83e}, {0x4}, {0x2, 0x0, 0x1}, {0xff801, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x4}, {0x2}, {0x8}, {0x8}, {0x1000, 0x0, 0x1}, {0x800, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x80000, 0x0, 0x1}, {0x5}, {0x8, 0x0, 0x1}, {0x24}, {0x1, 0x0, 0x1}, {0x2}, {0xff, 0x0, 0x1}, {0x81, 0x0, 0x1}]}, @RTA_VIA={0x14, 0x12, {0x26, "9ff729b924c78f0b214e21e5c7dd"}}, @RTA_OIF={0x8, 0x4, r7}, @RTA_DST={0x8, 0x1, {0x1, 0x0, 0x1}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xff}, @RTA_VIA={0x14, 0x12, {0x23, "8b40bc50bcfaf307264e261d08a5"}}, @RTA_NEWDST={0x84, 0x13, [{0x7002, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x101, 0x0, 0x1}, {0x4}, {0x1f, 0x0, 0x1}, {0x200}, {0x5}, {}, {0x7c, 0x0, 0x1}, {0x21}, {0x1ff, 0x0, 0x1}, {0x8001, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x1}, {0x9}, {0x6}, {0x800, 0x0, 0x1}, {0x2}, {0xffff}, {0x8001}, {0x9, 0x0, 0x1}, {0x4}, {0x0, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0xffff, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x23, 0x0, 0x1}, {0x910}, {0x7f}, {0x3, 0x0, 0x1}, {0x1}, {0x1, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x24040001}, 0x0)
write(r4, &(0x7f0000c34fff), 0xffffff0b)
clone(0x100, &(0x7f0000000380)="b0b6506fc180bde4e1520be2b935f4c0174c4ddd1abe0cbe261956369525f39dde523302ba5f4dbd6116807e2114e5f38912e060a9b3f54b26a98f83d9b8a91f1c43972b8473904e996ac61150897388ae64eef019b407734233cf0f3f405ff3e394caa8a897ee4875c77b0a188ab86e982beed9930b3e2fd1270a92fe5e953e25d71bb8dfd68e0905a1a8816c6978a72f8a128e677271032f47d1dc6d8c57f2571a3d03f1ccd99b2fa69ece884fc16b706999e50ffe6e6e14fcf0990bb0883df814871e19b485543d269e5792fbbf3c043a3cbcb34f44ee7995260d356a", &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)="1a391a5078e362bae5adfadecfd2fc67548bf87e6d9ae858f1ab13")
write$P9_RREADLINK(r4, 0x0, 0x0)
r8 = gettid()
tkill(r8, 0x1000000000016)
r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r9, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r9, 0x0, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0xc5382b3ff0c152fb, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000180)=ANY=[], @ANYRESDEC=r0])

00:40:21 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@nodecompose='nodecompose'}]})
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x80800, 0x0)

00:40:22 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x869058, 0x0)

[ 1007.955313] hfsplus: unable to find HFS+ superblock
[ 1008.042737] hfsplus: unable to find HFS+ superblock
00:40:22 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r0, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r0, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r1, 0x0, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f0000000040)={0x4, 0x2})
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)

00:40:22 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6465636f6d706f73652c00e141847a33aad913155e05ec52e5585de0909b422fdd92035254cc1eac71afbe92a48a0f971ae624d89062e61d75606e2db97d10db9a83514bed9859407944b6ab3c3bbee457baa7d1402ffecc96a9013cf5643a2127573e4b35d9185eac9f049fc07ef0c55cf10fc2aee1c87cfba2f619f64129da87e9989355369c8b3116bd4f4fe1b9f580e1d6d526f7ab4f790e74e6d78c41d90d410f27777a7e38f277047a40ffc9a4ae756c237999f196e3fbb31c805e7717a016eca265138cf4c2b5861b"])
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
name_to_handle_at(r1, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x36, 0xad73bb8, "4113da55297bebb36cc5791c10aa02a1827fc27d5395fcf040090ff6a6e89d1ee0e5eea32b9eedc571367f477b5a"}, &(0x7f0000000200), 0x1000)

[ 1008.192325] hfsplus: unable to find HFS+ superblock
[ 1008.255827] hfsplus: unable to find HFS+ superblock
00:40:22 executing program 4:
socketpair(0x26, 0x1, 0x81, 0x0)
connect$netlink(0xffffffffffffffff, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r6, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r6, 0x0)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r7, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:40:22 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6465706f73e38b09a4d6521d16d5fdd885092c661a58b0dcf5817387e541ba8ee48a3505f5fde4e42d61398df4c45348218b647efe"])

[ 1008.492981] hfsplus: unable to parse mount options
00:40:22 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x0, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

[ 1008.582020] hfsplus: unable to parse mount options
00:40:22 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r0, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r0, 0x0, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, <r1=>0x0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc040564a, &(0x7f00000001c0)={0x9, 0x0, 0x2019, 0x6, 0x7, 0x1f})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r5, 0xc0205649, &(0x7f0000000280)={0x9f0000, 0x597a, 0x8, <r6=>0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x980911, 0xfffffeff, [], @value=0xfffffe00}})
r7 = gettid()
tkill(r7, 0x1000000000016)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r9, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r9, 0x0, 0x0)
r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r10, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r10, 0x0, 0x0)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r11, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r11, 0x0)
r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r12, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r12, 0x0, 0x0)
r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r13, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r13, 0x0, 0x0)
io_submit(0x0, 0x7, &(0x7f0000002980)=[&(0x7f0000001440)={0x0, 0x0, 0x0, 0x2, 0x7, r0, &(0x7f0000000440)="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", 0x1000, 0x3, 0x0, 0x3}, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x6, 0x3, r9, &(0x7f0000001700)="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", 0x1000, 0x4}, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x6, 0x1, r10, &(0x7f00000014c0)="7df4e4a06e02f9a8e8930528", 0xc, 0x6, 0x0, 0x2}, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, &(0x7f0000001580)="511dc268f167f51bf18f416d04fe84cf82692afc757ebc948db06c663f05e4499515243178ace28d3399276751e044", 0x2f, 0x100000000, 0x0, 0x0, r11}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x7, 0x4, r12, &(0x7f0000002700)="5f4179df75b4d519f2917648d2c8b4d51b9a56e9013385d4773bffb8562a2aa153e402ff6e45ee2c8aa5f5f33900b19e43a15386f48d5e44234e016413b626de4c4a0963ee0fc051d62a4e53045cc57fad5457739631e9bc27557408ebeefdf8e948ab45f56b3ba853c59afa2c0fbec806cab785bb8b103bd32b17d8fc9487e1766a709256ec3c891ee27f421e1c633d4cbbaf4fdb99df86c5de44776bd104536e2f29e4090d9188595b885ff36a477641622841f71066a20320b8ffbe5c383b8bfab252", 0xc4, 0x0, 0x0, 0x3}, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x2, 0x101, r4, &(0x7f0000002800)="a6fd3586a51c998d53a76978925b0b418d05a3720f66207a3e24258c1dfb4de65d6c05f417e8d614b2d931528acce1608aa3006e12223531a6e84f240e1aa766864f049db840391d683a02ddd5eddb29931cd4191494b56f35d45485db7f66df5bed2a329684c9919ebe34a70de5cbabd061a4db514179f88877231d14d6495c640479270c39db315a363d1d6301ed2d2e6e6d9f4a5419bd75eb30d0f0e95da4f2ec039abbb32f9baf851c486688ebc2d5771dacafe0d384568179179d38afdd1733254fafc47f3ec642e13da6d61ef286221eb6307eaa03187f01b8ac766ea8904e42", 0xe3, 0x5, 0x0, 0x3}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x47, r13, &(0x7f0000002900)="d24cbf09684ea722b7870ce447f22dd11e78208c0bfdf6d4235c79b0aebaa4ce0cf6c8fcec8651002dec3ac34f38533563e5107d586916510dd080bf8d54230c5c6bf17441f555f5e5811b0f003d5394ddd5c074e437922328c0351567b5ea6d3d0ce68115", 0x65, 0x2, 0x0, 0x2, r6}])
bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r8, 0x1)
r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r8, &(0x7f00000016c0)=[{&(0x7f0000002a00)="5f4a76b2519bd3d2246118bb001028b8af00e0eb0cafd3d975b209f7ddb0d7eb0483f275745f3297cc13546a3244ed0fb07ecb013f534fdfdb7c7778e26f7076c11b1d327009fd06225086d3af584d9c65dcdcee26df294b9d3a016b06dcd71f9493cb82565e10c48eb844186dd7ddc7e68f17ccf81c1ac788c0cf51b86174b13e120e2d72f734eec04c71c281b47865a19a7d4bcd8b288d2826f5f58545c5931b69f557de6276c24a3f1ab14f607d9d5a642909f757ec1ca5443d00241a173eafc771d4f3552007197654979146125b814bca195c0fe02dd198947365c89aba5cefe8f414eefe8e85e1a0292ed4d2a7df9f8e61372643", 0xf7}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r14, 0x0)
ioctl$EVIOCSABS20(r14, 0x401845e0, &(0x7f00000002c0)={0x5, 0x4, 0x8000, 0x7, 0x8, 0x4})
ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f0000000200))
r15 = gettid()
tkill(r15, 0x1000000000016)
rt_tgsigqueueinfo(r1, r15, 0x10, &(0x7f0000000040)={0x0, 0x4, 0x400001})
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="b16d45ae5716cc836ff2ddae529fefb0a673652c008c45fa8f555cce57d22e4e6640a926a29fd91316aba2a30602882ea45f68ec8b751fc0ae2969b0bbcc1cdfc7ac25c8df3d8f5b67ca9e9290feae775e5be233e448b57662ce3dfab6833b9536caf85d2c54fe0d32d02dfacc617636442df2565e07b61228ae55f27782972a015a63e721726d74a43c9da82282634c6844f41a9a1aaf62c58a0ee7bdee89a3d2f2581b9e1d805b4c08f5e47a76dbdc564aac6db4174983b105515be18db80cf0431695b4a2632a6dbda97628b3edde5c7096b06d504267c0ece376947a77c57eab6e6518e3cd1fa38052a3b6c0149cff14e692319422b274f93b75376a092bb7d02bcae9"])

00:40:23 executing program 4:
socketpair(0x26, 0x1, 0x81, 0x0)
connect$netlink(0xffffffffffffffff, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r6, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r6, 0x0)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r7, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:40:23 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$TCSETXF(r2, 0x5434, &(0x7f0000000080)={0x0, 0x8, [0xf800, 0x9a, 0x400, 0x5, 0x2], 0xc83})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00')
pipe(&(0x7f0000000ac0)={<r4=>0xffffffffffffffff})
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
accept4$packet(r4, &(0x7f0000002940)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002980)=0x14, 0x80000)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000002a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002a40)={&(0x7f00000029c0)={0x5c, r3, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x800002}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', r5})
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)

00:40:23 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x0, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:40:24 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x200, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@type={'type', 0x3d, "29d59191"}}]})

00:40:24 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x0, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:40:24 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r2, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f0000000040)={0x9, 0x4, 0x0, 'queue0\x00', 0x6})

00:40:24 executing program 4:
socketpair(0x26, 0x1, 0x81, 0x0)
connect$netlink(0xffffffffffffffff, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r6, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r6, 0x0)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r7, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:40:24 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r2, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r3, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r3, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000000)={0x0, 0x80000, <r4=>r3})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r5, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r5, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(r5, 0xc0206434, &(0x7f0000000080)={0xefc, <r6=>0x0, 0x10000, 0x7})
ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f00000000c0)={0x8000, r6, 0x2, 0x1})
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000300)=@urb_type_control={0x2, {0x8, 0x1}, 0xfffffffe, 0x80, &(0x7f00000001c0)={0x18, 0x9, 0xd9, 0x200, 0x7}, 0x8, 0xfff, 0xf8bc, 0x0, 0x84, 0x4, &(0x7f0000000200)="b74c3bbfbb45078fa3526c5ad89222da8b8589161ccc6860be5fc16c94c79bfbcc64327c7d9066b2ce9615abc69154cbe02d74d03bb9438298f46098ea13d2975de684fba739660b705a19cb889b951ccfaf41f96422655949c7c8d7c8c2141ecea45756a595002abeb19926888f927fe4e492ccf5fbb5b23064424e6789e916a46d89501df99398a89e727619dcc3f4c26eec8093feed1fca34f6c5325f12718c1feb7ba4b5a66c02ee935fa7d1ae57669d01f6e122e0458ba583ae631e69f0ee2f5b57504c95f5e31bb25e7b8baaaf7afb4fc0f72673f958"})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0)
ioctl$VIDIOC_S_EDID(r7, 0xc0285629, &(0x7f0000000140)={0x0, 0xf0d, 0x6, [], &(0x7f0000000100)=0x3})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r8, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

00:40:24 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x1, 0x0, 0x0, 0x829050, 0x0)

00:40:24 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r3, 0x1)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00')
pipe(&(0x7f0000000ac0)={<r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
accept4$packet(r5, &(0x7f0000002940)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002980)=0x14, 0x80000)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000002a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002a40)={&(0x7f00000029c0)={0x5c, r4, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000300)={'team0\x00', r6})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={&(0x7f0000000000)="b7e907ff412ca8b3b943f2e90c4df52fdc3d98a8f4471388ad", &(0x7f0000000080)=""/115, &(0x7f0000000100)="82a46018d9d52e4e271740ee478a734c77df4cdc8a1cdc4b5e81773fe82b645cc6529e2c11f120808649a9db1c370930b6da9024858e5db3eb2ceed9f00630e9768884533bb7bdbc4dc0bfb033bf6a8833168b71a82c43e405040cd6816841c316beb41e29db7473c2a3a82b9f433fff07cbe6c45d0c0db7b96c3675cfc9fbee0c7d9505aeeced2ce4dc5bddf1f4ccb5d873aadc9107926c8360f41688a4de1313aa312cb0a067abbefbdadf329e64f19ce7f41b24731ce1eb3c1d00458a5afb12c094c00850ba39237db50e239e75a13ff7f45d12867c59d5d5716b3e231cca3caae359484f65513617670b995040ba13cd24", &(0x7f0000000200)="ad0d05130ba925287df03ac334fee70cb513c02329e8b3944f2b90ebccdab1c780ed4f36a8be2718b2e9e3be942ae114a1a9e9abda1d60beff8f10ae8161717786f81c26c289448b56ab64fc47c42a1dd2376a3768ad95350dbf8dc9f5de2bced99847d34ad5ccff28cb4692d8f70570c83eb06936895412cef392add460e4ba2f", 0xad49, r1, 0x4}, 0x38)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

[ 1010.868595] attempt to access beyond end of device
[ 1010.881602] loop0: rw=2048, want=3, limit=1
[ 1010.895193] hfsplus: unable to find HFS+ superblock
00:40:25 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
dup(r0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
getpeername$tipc(r3, &(0x7f00000000c0), &(0x7f00000001c0)=0x10)
writev(r1, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="747970653d29d591912c0069477c8f4ffd4771fe077fdc3e522974e3ca5ced88d2ec5b26f4c2d9f9d291927b58b488c71e65b98934075a1cf6e7f46abfe163d4567ce0619dc009ce1c429776f716ff3af2b700ac0f21494e2f033f443d49e6b11c950000000000000000000000562bbdef7d92e171725503819ecdadefcd2298af58cd9637ec0659813a5f15b842b20f7254f9600f21236f479d41cb78a4"])

00:40:25 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[0x5, 0x0]})
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@nodecompose='nodecompose'}]})

00:40:25 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r3 = fanotify_init(0x8, 0x800)
r4 = epoll_create1(0x0)
r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff)
fanotify_mark(r3, 0x45, 0x800000b, r5, 0x0)
r6 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xc0, &(0x7f0000000680)={0x0, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r6, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000140)='GPL\x00', r7}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r2, r5, 0x0, 0x1, &(0x7f0000000200)='\x00', r7}, 0x30)
r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r7}, 0xc)
dup(r8)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r9, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = dup(r10)
ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200)
setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000080)=r11, 0x4)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)

00:40:25 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x0, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:40:25 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r1, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r1, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r3, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r3, 0x0, 0x0)
writev(r3, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r2, 0x0)
getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r4 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@type={'type', 0x3d, "29d59191"}}]})

00:40:25 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0))
connect$netlink(0xffffffffffffffff, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r6, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r6, 0x0)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r7, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:40:25 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x7, 0x1000, 0x6})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)

00:40:25 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

[ 1011.873392] hfsplus: unable to find HFS+ superblock
00:40:26 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000040)={0x6, 'xfrm0\x00', {0x1203022a}, 0x7})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@type={'type', 0x3d, "29d59191"}}]})

[ 1011.946732] hfsplus: unable to find HFS+ superblock
00:40:26 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x2000, 0x0)
ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000001080)={0x16, 0x1000, &(0x7f0000000080)="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"})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r3, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r3, 0x0)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x28, 0x1404, 0x200, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c841}, 0x1004)
openat$selinux_load(0xffffffffffffff9c, &(0x7f00000010c0)='/selinux/load\x00', 0x2, 0x0)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)

00:40:26 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x1000028, &(0x7f0000000780)={[{@nodecompose='nodecompose'}]})
link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00')

00:40:26 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', r1}, 0x10)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

00:40:26 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x3, 0xfffffd49, 0x0, 0x0, &(0x7f0000000000)={[{@type={'type', 0x3d, "29d59191"}}, {@force='force'}]})

00:40:26 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='\x00'/13])
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x101000, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x118, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x11}, @NFCTH_TUPLE={0x9c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @NFCTH_TUPLE={0x40, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x9}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x14}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x118}, 0x1, 0x0, 0x0, 0x4014}, 0x8080)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r1, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r1, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000080)={0xa00000, 0x8001, 0xef, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9d00a3, 0x1ff, [], @string=&(0x7f0000000000)=0x9}})

00:40:26 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
r3 = gettid()
tkill(r3, 0x1000000000016)
ptrace$getsig(0x4202, r3, 0x20d9, &(0x7f0000000080))

[ 1012.308527] hfsplus: unable to find HFS+ superblock
00:40:26 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x0, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:40:26 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000540), r4, 0x1, 0x1, 0x3f00}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000300)={0x13, 0x10, 0xfa00, {&(0x7f0000000100), r4}}, 0x18)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r5, 0x1)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r6, 0x1)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r7, 0x1)
inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x100)

00:40:26 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x64, 0x15, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4881}, 0x2000c850)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@nodecompose='nodecompose'}]})

00:40:26 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0))
connect$netlink(0xffffffffffffffff, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r6, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r6, 0x0)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r7, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:40:26 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, &(0x7f0000000040)={0x3f})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x2829850, 0x0)

[ 1012.780880] hfsplus: unable to find HFS+ superblock
00:40:26 executing program 1:
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x40002, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, &(0x7f0000000080))
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)

[ 1012.870259] hfsplus: unable to find HFS+ superblock
00:40:26 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)

00:40:27 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = epoll_create1(0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000040))
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f000086fff4))
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='nodecoSpose,\x00'])

00:40:27 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'bridge_slave_1\x00', 0x1})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@type={'type', 0x3d, "29d59191"}}]})
getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x4)

[ 1013.032705] hfsplus: unable to parse mount options
00:40:27 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r2, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r2, 0x0)
connect$pptp(r2, &(0x7f0000000040)={0x18, 0x2, {0x3}}, 0x1e)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x19e8, 0x0, 0x0, 0x91e075, 0x0)

[ 1013.089218] hfsplus: unable to parse mount options
00:40:27 executing program 0:
ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, &(0x7f0000000000)={{0x2, @name="e72408eff964256f3486057dc38c671ff254c0d7fba130b8c5fc620582bd106a"}, "97a9739b2e7f546c6dec29b2fa305045ba3afbabc17e778c2cb1d124d84fc211", 0x1})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@type={'type', 0x3d, "29d59191"}}]})

[ 1013.247202] hfsplus: unable to find HFS+ superblock
00:40:29 executing program 1:
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)
readahead(r1, 0x4, 0x81)

00:40:29 executing program 2:
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000000000)={0x1, 0x8, 0x8001, 0xffffffffffffffff, 0x8001, 0x200, 0x6, 0x101, 0x800000ff, 0x7ff, 0xc543, 0x5})
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="6e6f6465636b6d42fb73650008"])

00:40:29 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:40:29 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r2, &(0x7f0000c34fff), 0xffffff0b)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000240)=0x9, 0x4)
write$P9_RREADLINK(r2, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x4, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@nodevmap='nodevmap'}, {@uname={'uname', 0x3d, 'hfsplus\x00'}}, {@privport='privport'}, {@cachetag={'cachetag', 0x3d, 'hfsplus\x00'}}, {@cache_loose='cache=loose'}, {@nodevmap='nodevmap'}], [{@fsname={'fsname', 0x3d, ':'}}]}})
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="747970653d29d591912c0032714d85b1234e21f68a8d3fb16307a3d1311f7b66245a7a210082d8f87b11093ecf873d4178abcefc8680576de1d48390d93a71d6e2dc9ef510b6d564a1282d737ac1dfcfa98a495d6bd424f0bd3fd8bc2cd70fc97dc41edfd1f2b1b7eb0529a35647251d5f8dd92d"])

00:40:29 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0))
connect$netlink(0xffffffffffffffff, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r6, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r6, 0x0)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r7, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:40:29 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0)
bind$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x3, @remote}}, 0x1e)
r2 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)

[ 1015.310741] hfsplus: unable to parse mount options
00:40:29 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@nodecompose='nodecompose'}]})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x6, @mcast1}, 0x1c)
listen(r1, 0x1)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000280)={'gre0\x00', {0x2, 0x4e20, @remote}})
r2 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00')
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x4, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8c0}, 0x11)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0)
ioctl$VIDIOC_ENUMSTD(r4, 0xc0485619, &(0x7f0000000040)={0x1, 0x10003, "ff9ca17909de0e4ff5df7ef7d7762efa84a16329875daef7", {0x0, 0x4}, 0x3})

00:40:29 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x2)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)
inotify_init1(0x80000)

[ 1015.503502] hfsplus: unable to find HFS+ superblock
[ 1015.587981] hfsplus: unable to find HFS+ superblock
00:40:29 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r3, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r3, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={<r4=>0x0}, &(0x7f00000000c0)=0xc)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000100)={[], 0x0, 0x10000, 0xc2c, 0x4, 0x0, r4})
ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000200))
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$PPPIOCGIDLE(r2, 0x8010743f, &(0x7f0000000040))
r5 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = dup(r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETISPACE(r7, 0x8010500d, &(0x7f00000001c0))
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)

00:40:29 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0x3, &(0x7f00000000c0)={&(0x7f00000001c0)={0x1c, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x8001)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@nodecompose='nodecompose'}]})

00:40:29 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

[ 1015.815779] hfsplus: unable to find HFS+ superblock
00:40:29 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r1, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r1, 0x0)
recvfrom$ax25(r1, &(0x7f0000000040)=""/25, 0x19, 0x100, &(0x7f0000000080)={{0x3, @null}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
r2 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)

[ 1015.893530] hfsplus: unable to find HFS+ superblock
00:40:29 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r1, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r1, 0x0)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000080)='.\x00', 0xfe)
ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1ff)
r3 = inotify_init()
r4 = inotify_add_watch(r3, &(0x7f0000000000)='.\x00', 0x80000000)
inotify_rm_watch(r2, r4)
inotify_rm_watch(r1, r4)
syz_mount_image$ocfs2(&(0x7f0000000000)='ocfs2\x00', &(0x7f0000000080)='./file0\x00', 0x2, 0x3, &(0x7f00000001c0)=[{&(0x7f00000000c0)="19c4552c0f615c0a2231fd55200e08319e9954279ff7bb251bfc7efd1321c70cac6b5bf38652087f43994161d7c127fae934ca8208685fc7576d5672304ea11562b03dc1a3c4cdc9ecefb7fdd32d4ae83985", 0x52, 0x5}, {&(0x7f0000000140)='c', 0x1, 0x4318}, {&(0x7f0000000180)="d8dc423341a863e4f26fcc07c5b8c5ec752aff862b8ac26c888af0b2c82934fe4cc29fa372b3826dcd198d063595181170ea5ceae19523845a2ca9b3c9", 0x3d, 0x100}], 0x0, &(0x7f0000000240)='m:\xa4)posix_acl_access\\$GPLvmnet1{[GPL\x00')
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r5, &(0x7f00000000c0), 0xe)
setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000000040), 0x4)
setsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f0000000280)=0x2c, 0x4)
r6 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r8, 0x1)
getsockopt$IP_SET_OP_GET_FNAME(r8, 0x1, 0x53, &(0x7f00000002c0)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000300)=0x2c)
bind$inet(r7, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

00:40:30 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="2fbced3ad9786d8ea0cc3ca7905f30dd940329009a801de2f9efe62f2048b78719df3f2cd1a66d7602fb77463755f9e9af70daebae7bc6f7545b7a0c634a4709a93ad97d2a2f6c49d83028c82e6b2937529d861ca26b6a89849c00"/100])
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f00000000c0)={'ah\x00'}, &(0x7f0000000200)=0x1e)
readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/118, 0x76)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000280)={0x1, 0x8000, 0x1000})

00:40:30 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socketpair(0xf, 0x80000, 0x96, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
sync_file_range(r2, 0xfffffffffffffffb, 0x6, 0x7)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)

[ 1016.058974] hfsplus: unable to parse mount options
[ 1016.231659] hfsplus: unable to parse mount options
[ 1016.232909] hfsplus: unable to find HFS+ superblock
00:40:30 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r8, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:40:30 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)
clock_settime(0x5, &(0x7f0000000040)={0x0, 0x989680})
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x244083, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000000c0)={<r3=>0x0, 0x7f}, &(0x7f0000000100)=0x8)
getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000140)={r3, 0x2}, &(0x7f0000000180)=0x8)

00:40:30 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x42, 0x0)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="5057b61baeed7524e57e3c10a542d4b38b05139cc48be9ac57cce95526db1d7d10ba84fb8249f0ced234cdd2e9a2b181bad53fd7b91ebb1f0633a92c154465f2b23059064cbc0b61c1d38e0d2fa2d951166e772fc46cb4e6d70c939462b42088862a95f2bf456bf3c425", 0x6a)

00:40:30 executing program 2:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x40000, 0x0)
ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000180))
rt_sigprocmask(0x2, &(0x7f0000000040)={[0x80000001]}, &(0x7f0000000080), 0x8)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x0, 0x0, 0x120828, &(0x7f0000000000)=ANY=[@ANYBLOB="f1"])

00:40:30 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@type={'type', 0x3d, "29d59191"}}]})

00:40:30 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='reno\x00', 0x5)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e23, 0x1ff, @mcast2, 0x401}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x25}}, @in6={0xa, 0x4e21, 0x8, @empty}], 0x58)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

[ 1016.472572] hfsplus: unable to find HFS+ superblock
00:40:30 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@nodecompose='nodecompose'}]})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'L-', 0x7fff}, 0x16, 0x2)

[ 1016.644974] hfsplus: unable to find HFS+ superblock
00:40:30 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:40:30 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
getsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f0000000040), &(0x7f0000000080)=0x4)
write$dsp(r3, &(0x7f0000000000)="d30df479ae50cd8eb88846a2fd292c", 0xf)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r6, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r6, 0x0)
getsockopt$inet_sctp_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000180)=0x8)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="00000000947d0000000000"])

00:40:30 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r1, 0x0, 0x0)
accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000)
r2 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=""/165, &(0x7f0000000140)=""/71, &(0x7f00000001c0)=""/78, 0x6000})

00:40:30 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x200, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000540), r4, 0x1, 0x1, 0x3f00}}, 0x20)
write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f00000000c0)={0x6, 0x118, 0xfa00, {{0x9, 0x3b91, "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", 0x7f, 0xff, 0xee, 0x6, 0x50, 0x1, 0xf9}, r4}}, 0x120)
ioctl$SIOCX25SDTEFACILITIES(r2, 0x89eb, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x0, 0x1, 0xf, 0x1a, "bf9ed7ec650fcc54f05135a8d57584706bba2f16", "9b6a6038788f62a228e9dfc32d27842427f62942"})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket$can_bcm(0x1d, 0x2, 0x2)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)

[ 1016.700986] hfsplus: unable to find HFS+ superblock
00:40:30 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x1004002, &(0x7f0000000000)=ANY=[@ANYBLOB="456d91b96d041c61fe9f6018afffa3e2d938c07ec4920c460074f045c216ee9a100c755205f5e3757cb8fc434ffbbc52664b5e47"])

[ 1016.899428] hfsplus: unable to parse mount options
[ 1016.929918] hfsplus: unable to parse mount options
00:40:31 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@type={'type', 0x3d, "29d59191"}}]})
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2000, 0x0)
write$cgroup_type(r2, &(0x7f0000000040)='threaded\x00', 0x9)

00:40:31 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x1)
r1 = accept4(r0, &(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, &(0x7f00000000c0)=0x80, 0xc0000)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00')
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x20, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004040)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x3, 0x0, 0x0, 0x8ad8d8, 0x0)

00:40:31 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000000)=0x8, 0x4)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@nodecompose='nodecompose'}]})

00:40:31 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r8, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:40:31 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:40:31 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

00:40:31 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r2, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)

[ 1017.335774] hfsplus: unable to find HFS+ superblock
[ 1017.340653] hfsplus: unable to find HFS+ superblock
[ 1017.413931] hfsplus: unable to find HFS+ superblock
00:40:31 executing program 0:
prctl$PR_SET_FPEXC(0xc, 0x40000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="747978653d29d591ee2c0099bbd6d84a50620941a792db18cf5ea6c9cbeaebca02122c1aa965765c7b275dd7f4eb"])

00:40:31 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r2, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00')
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x60, r5, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x60}}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r6, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r6, 0x0)
getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000080)={<r7=>0x0, @remote, @local}, &(0x7f00000000c0)=0xc)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00')
pipe(&(0x7f0000000ac0)={<r9=>0xffffffffffffffff})
vmsplice(r9, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
accept4$packet(r9, &(0x7f0000002940)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002980)=0x14, 0x80000)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000002a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002a40)={&(0x7f00000029c0)={0x5c, r8, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x80)
r11 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00')
pipe(&(0x7f0000000ac0)={<r12=>0xffffffffffffffff})
vmsplice(r12, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
accept4$packet(r12, &(0x7f0000002940)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002980)=0x14, 0x80000)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000002a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002a40)={&(0x7f00000029c0)={0x5c, r11, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r13}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x80)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={<r14=>0x0, @initdev, @multicast1}, &(0x7f0000000140)=0xc)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', <r15=>0x0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = dup(r16)
ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200)
getpeername$packet(r17, &(0x7f00000001c0)={0x11, 0x0, <r18=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14)
r19 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r19, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r19, 0x1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r19, 0x29, 0x22, &(0x7f0000000280)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r20=>0x0}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000380)=0xe8)
accept$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, <r21=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000400)=0x14)
r22 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00')
pipe(&(0x7f0000000ac0)={<r23=>0xffffffffffffffff})
vmsplice(r23, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
accept4$packet(r23, &(0x7f0000002940)={0x11, 0x0, <r24=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002980)=0x14, 0x80000)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000002a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002a40)={&(0x7f00000029c0)={0x5c, r22, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r24}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x80)
r25 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r25, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r25, 0x1)
ioctl$sock_SIOCGIFINDEX(r25, 0x8933, &(0x7f0000000480)={'macvtap0\x00', <r26=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000940)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000900)={&(0x7f00000004c0)={0x440, r5, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8, 0x1, r7}, {0x254, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x3f}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x567e}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r20}}, {0x8}}}]}}, {{0x8, 0x1, r21}, {0x1c8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r24}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x14, 0x4, [{0xfffe, 0x9, 0xf5}, {0x80, 0x81, 0x7, 0x4}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r26}}}]}}]}, 0x440}, 0x1, 0x0, 0x0, 0x880}, 0x20001000)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)

00:40:31 executing program 2:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, <r0=>0x0}, &(0x7f0000000380)=0xc)
r1 = getgid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, <r2=>0x0}, &(0x7f0000000400)=0xc)
setxattr$system_posix_acl(0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r0, @ANYBLOB='\b\x00', @ANYRES32=r1, @ANYBLOB="080002", @ANYRES32=r2, @ANYBLOB="10000500000000002000060000000000"], 0x9, 0x3)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, <r3=>0x0}, &(0x7f0000000380)=0xc)
r4 = getgid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, <r5=>0x0}, &(0x7f0000000400)=0xc)
setxattr$system_posix_acl(0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r3, @ANYBLOB='\b\x00', @ANYRES32=r4, @ANYBLOB="080002", @ANYRES32=r5, @ANYBLOB="10000500000000002000060000000000"], 0x9, 0x3)
getgroups(0x4, &(0x7f0000000000)=[r1, 0x0, r3, 0xee01])
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0xfffffffffffffffc, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@session={'session', 0x3d, 0x7}}]})

00:40:31 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2, 0x0)
read$rfkill(r2, &(0x7f0000000080), 0x8)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

00:40:31 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@type={'type', 0x3d, "29d59191"}}]})

00:40:31 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

[ 1017.684816] hfsplus: invalid session number or type of track
[ 1017.714375] hfsplus: unable to find HFS+ superblock
00:40:31 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@decompose='decompose'}], [{@subj_type={'subj_type', 0x3d, ']-9\xf1?\xb2\x99\x88\x94\x0f\xe4\x9b\xc0\v\\x\xd2\tW\xc4\xe6f\xf9\xf8\x81\x8f\xfa\xf1V\xbd\x00qn\xa4\xae\xfa\xb1\x00\xb1(\xd1_}8$+\xea3Z\x0f\xd4&\xb2\x059\x85\x84\xf1)\"\xff\xc9\x9f\xe9\twJV\x10\xcaj'}}, {@subj_user={'subj_user', 0x3d, 'wlan0-('}}]})
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000180)={{0x8, @loopback, 0x4e20, 0x1, 'dh\x00', 0x10, 0x8, 0x67}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x0, 0xffffffff, 0xdc, 0x1800}}, 0x44)

00:40:31 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0xb)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0xfffffffffffffffc, 0x0, 0x0, 0xa0020, &(0x7f0000000080)={[{@nodecompose='nodecompose'}]})

[ 1017.953702] hfsplus: unable to parse mount options
[ 1018.041800] hfsplus: unable to parse mount options
00:40:32 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r8, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:40:32 executing program 3:
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'})
setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000800), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x40000)
openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000540)={0x3})
socket$inet(0x2b, 0x1, 0x0)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, 0x0)
add_key(&(0x7f0000000580)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r6, 0x1)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r6, 0x8982, &(0x7f0000000340)={0x6, 'veth1_to_team\x00', {0x4}, 0xc26c})
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000000c0)={0x7, 0x8, 0x1, <r7=>0xffffffffffffffff})
ioctl$FS_IOC_ENABLE_VERITY(r7, 0x40806685, &(0x7f00000002c0)={0x1, 0x1, 0x1000, 0x2e, &(0x7f0000000100)="fcb4830997a3fb460c27565d1a28bdcc9a69454e4f2249d3a5dad49ab25e2660e6717226ec292024a3a9d116179f", 0x16, 0x0, &(0x7f0000000280)="13435ca67c19198c43521477eb5110cfe0254376bb76"})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r8, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

00:40:32 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:40:32 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
connect(0xffffffffffffffff, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x3, @local}}, 0x80)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000080)=@v1={0x0, @aes128, 0x0, "35d3c3b09f90ed45"})
r2 = msgget$private(0x0, 0x400)
msgrcv(r2, &(0x7f0000000500)=ANY=[], 0x0, 0x3, 0x1000)
msgctl$MSG_STAT_ANY(r2, 0xd, &(0x7f00000000c0)=""/30)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="747970653d29d591912c0043aa3845ec86d8c59e5fafce1a3d55cf646d2e061a4425e6f4ba9dc872e1240e49495928bd894f84282eabef7ecf59e3fb4d914493c10c972f5fe84d360ac51bcdd00d63a1bb723226fb4cff25ad98e951093f266e065018af366df29fe34333e28abfa5a27387869c96c47bee4c14ff6530e7f67eb81b43ae8eada5af59a0a51cca7b63f0bf93480ba56cc488595d49687d970b2d5132890f710e8a8816414739474d623b80c0da992a2620eeab57775b367f292be47534bf4270cc5cd0a4903c0c7dac046beebc31cd64c89b99311b"])

00:40:32 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$bfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x100, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r3, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r4, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r4, 0x0)
accept$netrom(r4, &(0x7f00000001c0)={{0x3, @default}, [@default, @remote, @remote, @bcast, @rose, @netrom, @netrom, @bcast]}, &(0x7f0000000000)=0x48)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r3, 0x0)
getsockopt$rose(r3, 0x104, 0x5, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r5 = openat(r1, &(0x7f0000000080)='./file0\x00', 0x80200, 0x2)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r5)

00:40:32 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@nodecompose='nodecompose'}]})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clock_gettime(0x0, &(0x7f0000000000)={<r2=>0x0, <r3=>0x0})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x2, 0x204000)
writev(r4, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r4, 0x0)
ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000040)={0x8, 0x6, 0x4, 0x1, 0x1, {r2, r3/1000+30000}, {0x2, 0xc, 0x5, 0x20, 0x3, 0x80, "e13ed267"}, 0xc811, 0x2, @fd=r4, 0x6e3, 0x0, <r5=>0xffffffffffffffff})
ioctl$sock_rose_SIOCDELRT(r5, 0x890c, &(0x7f0000000180)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @default, @netrom={'nr', 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})

00:40:32 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000300)=0xe8)
syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x9, 0x2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="c4f4a7d2c195bb822bc32875724bbe6cf4060130165269e396004f9e98b0da1de16770de9943120e200d90f11fc204b41f7af473719518487c2499c300318e9a65edcea637d8c4e235f05decc899193918efcaf5cfd09766e047a2ac009bf9ae9ce2", 0x62, 0x8}, {&(0x7f0000000140)="3125c12833a7892918d89fb1c04aa2dff3bd614d43005c023cd7e204b737158ce6ea6d857e875f3b93f79f7b7bd30a7f00135ac3c010181601f753001d6e432e3532449eed5f088d0e6b50304b5687d8da87cd3ec42045e136ee863b8de2e1deec42", 0x62, 0x1}], 0x2080040, &(0x7f0000000340)={[{@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@shortname_win95='shortname=win95'}, {@fat=@errors_remount='errors=remount-ro'}, {@utf8no='utf8=0'}, {@shortname_lower='shortname=lower'}, {@nonumtail='nnonumtail=1'}, {@uni_xlate='uni_xlate=1'}, {@numtail='nonumtail=0'}, {@utf8='utf8=1'}], [{@subj_type={'subj_type'}}, {@euid_eq={'euid', 0x3d, r4}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@seclabel='seclabel'}]})

[ 1018.244401] hfsplus: unable to find HFS+ superblock
00:40:32 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
bind$phonet(r1, &(0x7f0000000000)={0x23, 0x2, 0x43, 0x8}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

00:40:32 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, r3)
sendmsg$nl_netfilter(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r3], 0x1}}, 0x0)
add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f0000000000)={0x80, @dev={[], 0x23}})
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@nodecompose='nodecompose'}]})

00:40:32 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)
ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f0000000040)={0x10000, 0x5c4, 0x6a0b871b, 0x3})

00:40:32 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
dup(r0)
syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x80400)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x20800, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r1, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r2, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x8005)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

00:40:32 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

[ 1018.494291] hfsplus: unable to find HFS+ superblock
00:40:33 executing program 2:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x8001, 0x0)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00')
sendmsg$FOU_CMD_GET(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x8}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x5881)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x3f7, 0x100, 0x70bd28, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x14008800)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@nodecompose='nodecompose'}]})

00:40:33 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r2, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r2, 0x0, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r3, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r3, 0x0, 0x0)
ioctl$TCGETX(r3, 0x5432, &(0x7f0000000040))
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)

00:40:33 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r2, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r2, 0x0, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket$inet_sctp(0x2, 0x5, 0x84)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x5, 0x7, 0x6, 0x10, r1, 0x100, [], 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5}, 0x40)
r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r5, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r5, 0x0)
ioctl$SIOCRSACCEPT(r5, 0x89e3)
accept4(r4, 0x0, 0x0, 0x0)
r6 = gettid()
tkill(r6, 0x1000000000016)
tkill(r6, 0x1d)
ioctl$SIOCX25GCALLUSERDATA(r4, 0x89e4, &(0x7f0000000100)={0x4a, "9edf699857bf041c6e8749c5bd14bb3c99e54c1fab9126e8dd0b5513a9c23db7b6c403325997c32475541987206c3a0817251e10b86819eeaaf8fe12fc8077c485295ea57fe83fc9fd590bcc29ad33497a737adc7f2872137d04f6ff700c8636d672389b448520b724bc9445ee59b8f00847f4b8aa67f44347969cb630de6f7d"})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f0000000080)=0x4, 0x4)
fcntl$setpipe(r3, 0x407, 0x5)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r8, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r8, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r9, 0x1)
r10 = accept4(r9, 0x0, &(0x7f0000000200), 0x40800)
bind$inet(r10, &(0x7f00000001c0)={0x2, 0x4e22, @loopback}, 0x10)

00:40:33 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r2, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r2, 0x0)
clock_gettime(0x0, &(0x7f0000000000)={<r3=>0x0, <r4=>0x0})
ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000040)={0x3, 0x5, 0x4, 0x1000000, 0xff, {r3, r4/1000+30000}, {0x1, 0x2, 0x2, 0x9, 0xda, 0xff, "66102090"}, 0x1, 0x2, @userptr=0x3ff, 0xffff})
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2c81, &(0x7f0000000780)={[{@type={'type'}}]})

00:40:33 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100), 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r8, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

[ 1019.118433] hfsplus: unable to find HFS+ superblock
00:40:33 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@nodecompose='nodecompose'}]})
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0xdc, 0x3, &(0x7f0000000080)=[{&(0x7f0000000180)="741fc2ebc850a848689e5b3c05b0c47b30f5fe26c8fc1f5e2456d03a0492651ff5367cf0478ed3b22984850359d8f969f17fe58409a3a4f6a7c9c449dfc1de87b228c0e64674d9474190e89198736580aa2fc0948fac4f90d09966d64f334cb344af37740388a4d1c50f4c7c25a3927f9895aa288bc3e5115402f254b01d163065667ce166e4c37c57168b1f283706a110e9fb83518da44e7b2fd9be9a75e647ae21daf28f62353023da", 0xaa, 0x7fff}, {&(0x7f00000007c0)="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", 0x1000, 0xffff}, {&(0x7f00000017c0)="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", 0x1000, 0x7}], 0x800049, &(0x7f0000000240)={[{@hash_r5='hash=r5'}, {@noacl='noacl'}, {@balloc_border='block-allocator=border'}], [{@uid_gt={'uid>', 0xffffffffffffffff}}, {@hash='hash'}]})

[ 1019.315933] hfsplus: unable to find HFS+ superblock
00:40:33 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write$P9_RREADLINK(r3, 0x0, 0x0)
r4 = gettid()
socketpair(0x2c, 0x80000, 0x0, &(0x7f0000000180)={<r5=>0xffffffffffffffff})
r6 = socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
r8 = dup3(r6, r7, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r8, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, <r9=>0x0]}, &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0xe, &(0x7f000059aff8)={r9}, &(0x7f000034f000)=0x2059b38b)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000001c0)={<r10=>r9, 0x8, 0x20, 0x80000001, 0x5}, &(0x7f0000000200)=0x18)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000240)={r10, @in={{0x2, 0x4e24, @empty}}}, &(0x7f0000000300)=0x84)
tkill(r4, 0x1000000000016)
r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r11, &(0x7f0000000340)="2b5f12608384abab93fc86f4", 0xc)
write$P9_RREADLINK(r11, 0x0, 0x0)
r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r12, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r12, 0x0, 0x0)
r13 = gettid()
tkill(r13, 0x1000000000016)
r14 = gettid()
tkill(r14, 0x1000000000016)
r15 = gettid()
tkill(r15, 0x1000000000016)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000000780)=ANY=[@ANYPTR=&(0x7f0000000040)=ANY=[@ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYBLOB="08eddbbe29dce61c1d77891643fac5166827395b1c6f8075ba941c2b7c9bd5525595e57eb8eb948ecf78f99ab15b67848a2287c378fcfc6c45d622812197aa43cbd0088a08d48e0ccc205ec9b4cd72d1275aaea5feba7f2f77cf4596c6de4d3aabf90d13bc9a9c929f2c04894692a41b21d6f6f9d9139a1f6aaea68e1c90f56f3d7cc4136593577aad572753c5d882879531bc3141ef962cbcdde0a27c468d09da7963ed705e4ba8331d227202029645e0fd88", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYRES16, @ANYRESOCT, @ANYBLOB="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", @ANYRES16=r1, @ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYBLOB, @ANYRESOCT=r14, @ANYRESHEX=r15, @ANYBLOB="df0d87a463df1ca43a1e8b409fc2f4ffdcabd3cdd4ef0b7d6acb71a1050a2603ed142ee5ac783ff05d57cfbc299ce9df4e11d721da7d789dfd9ccfcd796dd12938d3d19a72830623cdddd035d94ebacc0a9c35d41cf6a318030592a574c7e25de6fb756fc27f3d5d5516000000000000000000"]], @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32=r4, @ANYRES64=0x0, @ANYRESHEX=0x0], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRESOCT=r12, @ANYRES64=r0], @ANYRES64=r0, @ANYBLOB="05", @ANYRES16=r13]]])
ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000140)={0x298e, 0x8, 0x3f, 0x100000000, 0x7, 0x8})

00:40:33 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

[ 1019.400900] REISERFS warning (device loop2): super-6502 reiserfs_getopt: unknown mount option "hash=r5"
[ 1019.485561] hfsplus: unable to find HFS+ superblock
00:40:33 executing program 2:
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x3, 0x4000])
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@nodecompose='nodecompose'}]})

[ 1019.556204] hfsplus: unable to find HFS+ superblock
00:40:33 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x10000, 0x0)
ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000180))
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@nodecompose='nodecompose'}]})

[ 1019.629358] hfsplus: unable to find HFS+ superblock
[ 1019.692521] hfsplus: unable to find HFS+ superblock
00:40:33 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0xfffffffffffff800, 0x0, 0x0, 0x2176064, &(0x7f0000000000)={[{@nls={'nls', 0x3d, 'koi8-r'}}]})

00:40:33 executing program 2:
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'vcan0\x00', 0x4000})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc)
syz_mount_image$hfsplus(&(0x7f0000000180)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x6, 0x0, 0x150000, &(0x7f00000000c0)={[{@creator={'creator', 0x3d, "be33748e"}}], [{@uid_eq={'uid', 0x3d, 0xee01}}]})
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x100, 0x0)
setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f00000001c0)=0x2ce8, 0x4)

00:40:33 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100), 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r8, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:40:34 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r0, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r0, 0x0, 0x0)
fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x4, 0xfffffffffffffef2, 0x0, 0x200000, &(0x7f0000000280)={[{@creator={'creator', 0x3d, "84db9d7c"}}, {@decompose='decompose'}, {@nobarrier='nobarrier'}, {@gid={'gid', 0x3d, r1}}, {@nls={'nls', 0x3d, 'iso8859-3'}}, {@umask={'umask', 0x3d, 0x2}}], [{@dont_appraise='dont_appraise'}, {@context={'context', 0x3d, 'root'}}]})

00:40:36 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10)

00:40:36 executing program 1:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r5, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r5, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00')
getsockname$packet(r4, &(0x7f00000004c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000500)=0x14)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00')
pipe(&(0x7f0000000ac0)={<r9=>0xffffffffffffffff})
vmsplice(r9, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
accept4$packet(r9, &(0x7f0000002940)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002980)=0x14, 0x80000)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000002a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002a40)={&(0x7f00000029c0)={0x5c, r8, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x80)
r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280)='batadv\x00')
pipe(&(0x7f0000000ac0)={<r12=>0xffffffffffffffff})
vmsplice(r12, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
accept4$packet(r12, &(0x7f0000002940)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002980)=0x14, 0x80000)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000002a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002a40)={&(0x7f00000029c0)={0x5c, r11, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r13}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x80)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@mcast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000000640)=0xe8)
sendmsg$NL80211_CMD_SET_MPATH(r5, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x50, r6, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r10}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r13}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r14}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000)
r15 = dup(r4)
prctl$PR_GET_CHILD_SUBREAPER(0x25)
ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200)
setsockopt$MISDN_TIME_STAMP(r15, 0x0, 0x1, &(0x7f0000000180)=0x1, 0x4)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={<r16=>0x0}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={r16, 0x38, &(0x7f0000000240)=[@in6={0xa, 0x4e23, 0x7fff, @rand_addr="00dc01fea7bc98326a32c0df6fde3598", 0x1}, @in6={0xa, 0x4e22, 0x4, @remote, 0x40}]}, &(0x7f0000000140)=0x10)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)

00:40:36 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:40:36 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100), 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r8, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:40:36 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@nodecompose='nodecompose'}]})
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x400000000000004a, [@rand_addr=0xcc6, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x24}, @rand_addr=0x408]}, 0x20)
prctl$PR_GET_KEEPCAPS(0x7)
getuid()
r1 = getuid()
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000240)={0x1, 'lo\x00', {}, 0x10e})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r2, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r2, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x11)
r3 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r4=>0x0}, &(0x7f0000cab000)=0xc)
setuid(r4)
syz_mount_image$btrfs(&(0x7f0000000180)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x8, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000200)="6bc4acf2a61fcb2a6695a81f354fa72e837bcbbf8f6133b715905f", 0x1b, 0x1}, {&(0x7f0000000240), 0x0, 0x7fe}], 0x180804, &(0x7f00000002c0)={[{@check_int='check_int'}, {@autodefrag='autodefrag'}, {@ref_verify='ref_verify'}, {@compress_force_algo={'compress-force', 0x3d, 'zlib'}}], [{@appraise_type='appraise_type=imasig'}, {@pcr={'pcr', 0x3d, 0x1b}}, {@uid_lt={'uid<', r4}}, {@euid_lt={'euid<', r1}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}]})
lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.evm\x00', &(0x7f00000000c0)=@sha1={0x1, "c53c11221825c510ed6e1cc2773e41b64f801609"}, 0x15, 0x3)

00:40:36 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x198, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x478}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd41}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x400}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffdb8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff8001}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8dc}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER={0x4}]}, 0x198}, 0x1, 0x0, 0x0, 0xc0}, 0x8000004)

00:40:36 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='\x00'/11])

00:40:36 executing program 1:
lsetxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'U-', 0x20}, 0x16, 0x3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)

[ 1022.438913] hfsplus: unable to find HFS+ superblock
00:40:36 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xa)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)

00:40:36 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r1, 0x0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r2, &(0x7f0000c34fff), 0xffffff0b)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
write$P9_RREADLINK(r2, 0x0, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
epoll_create(0xe2a)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r3, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r3, 0x0, 0x0)
r4 = socket$kcm(0x29, 0x2, 0x0)
r5 = geteuid()
stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
fchown(r4, r5, r6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
accept4$rose(r8, &(0x7f0000000000)=@short={0xb, @dev, @default, 0x1, @rose}, &(0x7f0000000080)=0x1c, 0x0)
r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r9, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r9, 0x0, 0x0)
r10 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400204)
r11 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r11, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

00:40:36 executing program 0:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="747970653d29d5c1b02741"])

00:40:36 executing program 2:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80, 0x0)
ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0x21, 0x3})
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@nodecompose='nodecompose'}]})

00:40:36 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540))
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r0, &(0x7f0000c34fff), 0xffffff0b)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r1, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000bc0)={{0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e22, 0x1cc, @mcast1, 0x4}, 0x4, [0xffffffff, 0x28, 0x3ff, 0x1f, 0x2, 0x0, 0xffffffff, 0x9c0]}, 0x5c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r1, 0x0)
r2 = accept4$nfc_llcp(r1, &(0x7f0000000040), &(0x7f0000000100)=0x60, 0x80000)
ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000140)={'ip6_vti0\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}})
write$P9_RREADLINK(r0, 0x0, 0x0)
r3 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, &(0x7f0000000500)={0x0, 0x0, 0x2, 0x4, {0xffffffc1, 0x8000, 0x82b0, 0x8}})
write(r4, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r4, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = dup(r5)
sysinfo(&(0x7f0000000ac0)=""/245)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000980)={0x9, 0x0, [{0x4, 0x89, &(0x7f0000000540)=""/137}, {0x4, 0x1000, &(0x7f0000001700)=""/4096}, {0x10000, 0xf5, &(0x7f0000000600)=""/245}, {0x103000, 0x1000, &(0x7f0000002700)=""/4096}, {0x2000, 0x6, &(0x7f0000000700)=""/6}, {0x2000, 0x33, &(0x7f0000000740)=""/51}, {0x4, 0xe7, &(0x7f0000000780)=""/231}, {0x2000, 0x34, &(0x7f0000000880)=""/52}, {0x0, 0xad, &(0x7f00000008c0)=""/173}]})
pwritev(r4, &(0x7f00000004c0)=[{&(0x7f00000001c0)="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", 0xff}, {&(0x7f00000002c0)="75b763076870299563b4c3867dbb6e560ecf9645e39f1aacfb1aed7731fc87f59eb26051c313acc9b53761745f21c214489cc5bb5a9940d902d47713653bd3481608ed758bbaddf196f109e204c0f547aea19f44c8101e558c8eea787a062753213db531bf9ca72410ca825136db1767985554e65f23d92d41ae5b9961d45d88fa009e0267b43d1f425221418163f83f8628ed1e806e0886fc1d47ce243b9030fe842969f0fea791930240b1b751acaf63d09a1ac4232f67d1829a1d9fbba0ac5efd047559ed49e65394fe5d488b696912158430b62590f52960148caea4192b5cb7b240b2b0", 0xe6}, {&(0x7f00000003c0)="d3a8ce383710a53a3958975e18ba206afb198f9a60b442491616ec0e34f6d07311fbda7a99d567c87264287b3c692bec21525bff9d06b7bb027c3ef51eb31ec5b902f9e61294f7232b4e2e36b6f60c01f14f6a6d41b081bd9e79f890a8ff0e4a10e87f91378042989a95f369084bf23c2ddf45e224a39d7fdf3dbf526212371ae6b5de7156a41cd0cbf478a49ddf8c1a5ae0bac9deddcddc2f91b8567fc15846765715b07fd7981be0a4e6565903f095731ea175d74a1c76c00980138ed5059a0f4b2092dab267ff8cd7f469315354d92e0a9c0ce51803f238", 0xd9}], 0x3, 0x2)

[ 1022.668218] hfsplus: unable to find HFS+ superblock
00:40:36 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x286042, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r2 = socket$inet(0x2, 0x4000000805, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r3, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r3, 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r3)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
r5 = dup3(r2, r4, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="f921ffff", @ANYRES32=0x0, @ANYRES32=<r6=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0xe, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b38b)
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000240)={r6, 0x6618, 0x0, 0x40, 0x7fff, 0x80}, &(0x7f0000000280)=0x14)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r7, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r7, 0x0, 0x0)
r8 = dup3(r7, 0xffffffffffffffff, 0x0)
sendto$inet(r8, &(0x7f00000002c0)="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", 0x1000, 0x10, &(0x7f00000012c0)={0x2, 0x4e22, @loopback}, 0x10)
r9 = dup(r0)
ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x3)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="e1e170653d29d591912c0017e0aa7773d44fe38d0bd356700c466401b1c474343197c5429014f9dddd6c4648cc7e4e364c71b3bdd08b63bd8c776833cf79aa33559e6126c91a326f562cccef27781c31315e993ae42e818ecda7ffcb47dfe30cc165e2774a89363354deb11bf669bdc60f734dc7d48a2970868071c10ec529194da05130a8a57dfcc7a1d84305cfaa46141609c17a279afe3052caa43a472e9dcd4ac26d646c3f4c8c9e4cdebb109b4c38edd84c952d57dc81989623771d9f47629632039d7f1b8b9337535660cde6f3ee553533894c67cfd2759a4f11f7b3e9cf0fb5"])

[ 1022.763782] hfsplus: unable to find HFS+ superblock
00:40:37 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, 0x0, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:40:37 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@nodecompose='nodecompose'}]})
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r0, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000000)={0xfffff000, 0x7, 0x4, 0x40, 0x7, {0x0, 0x7530}, {0x3, 0xc, 0x1, 0x0, 0x90, 0x10, "a06f72c9"}, 0x2, 0x4, @fd=r2, 0x2, 0x0, <r3=>0xffffffffffffffff})
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f0000000080)={{0x0, 0x7}, 0x0, 0x4, 0x55a8, {0x81, 0x7}, 0x2f, 0x9})

00:40:37 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r8, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

[ 1023.048511] hfsplus: unable to find HFS+ superblock
[ 1023.094678] hfsplus: unable to parse mount options
00:40:37 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = openat$cgroup_ro(r3, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0)
r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x282000, 0x0)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000100)=0x40, 0x4)
connect$rxrpc(r4, &(0x7f0000000080)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e21, 0x1, @ipv4={[], [], @loopback}, 0x7bf}}, 0x24)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r6 = openat$md(0xffffffffffffff9c, &(0x7f0000000140)='/dev/md0\x00', 0xc285f428b18a5c71, 0x0)
fcntl$notify(r6, 0x402, 0x7)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r7, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

00:40:37 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000040)={0x1, 0x0, {0xffffff87, 0x1, 0x2021, 0x0, 0xa, 0x3, 0x1, 0x6}})
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x2, 0x0, 0x0, 0x52000, &(0x7f0000000780)=ANY=[])
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$USBDEVFS_GET_SPEED(r2, 0x551f)

00:40:37 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r4, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r4, 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000080)={0x0, r4, 0x6, 0x1, 0x100, 0x1912d16b})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = dup(r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f00000001c0)={'broute\x00', 0x0, 0x3, 0x16, [], 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)=""/22}, &(0x7f0000000180)=0x78)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r7, &(0x7f0000000040)={0x2, 0x4, @local}, 0x10)

00:40:37 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@nodecompose='nodecompose'}]})
r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xffffffffffffffff, 0x84000)
getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000040)=""/170, &(0x7f0000000180)=0xaa)

[ 1023.410667] hfsplus: unable to find HFS+ superblock
[ 1023.454157] hfsplus: unable to find HFS+ superblock
00:40:37 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x100a06a, &(0x7f0000000240)=ANY=[@ANYBLOB="6e6f6465636f6d706f73652c001277f37fcc990a6a43afe9a6f94f2dac04bc645e6fd7288d766376e9e38714227de016f37da6fc0b8a56e50796959e376ddbb32bec0032e03474e257ee07b8deddf870ee4cf162b66832465426c3bfaff30606d33e525c8197d3836e58995b0148"])
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000000))
r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0)
recvfrom$phonet(r1, &(0x7f0000000040)=""/150, 0x96, 0x12002, &(0x7f0000000180)={0x23, 0x0, 0x40, 0x1e}, 0x10)

00:40:37 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/validatetrans\x00', 0x1, 0x0)
r1 = dup(r0)
setsockopt$sock_void(r1, 0x1, 0x0, 0x0, 0x0)
r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0)
ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f00000000c0)={0x101, 0x43, 0x1})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)

00:40:37 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x8000, 0x0)

00:40:37 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)
mount(&(0x7f0000000100)=ANY=[@ANYBLOB="2f6465762f731f00003341fb645ce3a155bc0853e106cb41eb6e5495343e32fa5a5cdf4f44539f16ab7e5a304e290280112797635576f2d7c08586cc2bd0c70d9164cffde61e3a073ff62be9b625919164ad26cbf8d21fe8aaf495df9b98b2a59d0170249af26e390dc22257856c649c5cad105bcbec775610e5ea184773a0d688aef0"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ceph\x00', 0x4c810, 0x0)

00:40:37 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3e, 0x0, 0x8000, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0])
syz_open_dev$char_usb(0xc, 0xb4, 0x1)

00:40:37 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, 0x0, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:40:37 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$isdn(0x22, 0x3, 0x4)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r3, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r3, 0x0)
ioctl$BLKRRPART(r3, 0x125f, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x804, 0x4)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000001000/0x2000)=nil, 0x2000}, 0x1})
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)

00:40:37 executing program 4:
socketpair(0x26, 0x1, 0x81, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r6 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r6, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r6, 0x0, 0x20000102000003)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r8, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x48041)

00:40:37 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@nodecompose='nodecompose'}]})
r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x42240, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nvram\x00', 0x0, 0x0)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$LOOP_CTL_ADD(r1, 0x7041, r3)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3)

[ 1023.863691] hfsplus: unable to parse mount options
[ 1023.931612] hfsplus: unable to find HFS+ superblock
00:40:38 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="867970653d29d591912c00d1d49c15fa365c878e4ec922f9f44d9cf134a8b83fb93b9b951306158dbb6d597dd4bfc3275ea7c4f269ca0b7bd8e6b84cb8a0ba540824948635f96da8369e76bbf3593ccae437ad93626653fcafec7abbc9a3801f404a845da5b24344f9674e2563829d13f926110b377e57ccc67c162133933cb23b0e22400b90bc56f192d48904d1ac84d37b1508b1b58095093f7b123f08880116dd68c0f86acde0670d3e28fbcd5e2caec934a56719a4081b55f721c8819d0c972fe39615456e0a4cb23c375e1f0e7afdd821ce329bf02ea1c1eb536967da0f750877934fc0fda3a49c284bda395b7329"])

[ 1024.111546] hfsplus: unable to find HFS+ superblock
00:40:38 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r2, &(0x7f0000c34fff), 0xffffff0b)
write$P9_RREADLINK(r2, 0x0, 0x0)
fsetxattr$security_evm(r2, &(0x7f0000000040)='security.evm\x00', &(0x7f0000000080)=@sha1={0x1, "1f399ca137537c5a53e974a769706c683fbbefbc"}, 0x15, 0x0)
syz_mount_image$bfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x829050, 0x0)

00:40:38 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000), 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
dup(r2)
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x40000, 0x0)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x200102, 0x0)
r5 = socket$inet(0x2, 0x4000000805, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
r7 = dup3(r5, r6, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000200)=ANY=[@ANYBLOB="5e8c9a02000000f5b508f0d7279e50e7c98ff88fb50bb672f496d4d78303528a44586abb0c8eed05b592829a7b530b5d4be32e8ddfbb835bb9c088904ca616104e4e1cfaffd96c72925b0f7125e286afe0270116a8", @ANYRES32=0x0, @ANYRES32=<r8=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0xe, &(0x7f000059aff8)={r8}, &(0x7f000034f000)=0x2059b38b)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000180)={r8, 0x6c, "07e3d4d61e4de06fdc6a0356ebe9a82d9322c3428a747fb407f0b399a89cd8277fe84c601309254f8d6138445c80b53e45fa6187c063af1acc60da02d12be9a8e8bf61b9f3225d09e015e49bb6b7d30fac94127f00e0accbe5fb4850eab119cfde232a4cdce62230133cec1a"}, &(0x7f00000000c0)=0x74)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="749d2c00"])

00:40:38 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="ffffffff636f6da21146"])
newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x2800)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='overlay\x00', 0x202000, &(0x7f0000000200)={[{@redirect_dir={'redirect_dir', 0x3d, './file0/file0'}}, {@nfs_export_off='nfs_export=off'}, {@xino_on='xino=on'}, {@nfs_export_on='nfs_export=on'}], [{@fowner_gt={'fowner>', r0}}, {@appraise='appraise'}, {@fsmagic={'fsmagic', 0x3d, 0x1000}}, {@smackfsroot={'smackfsroot', 0x3d, 'hfsplus\x00'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]})
syz_mount_image$ntfs(&(0x7f0000000340)='ntfs\x00', &(0x7f0000000380)='./file0/file1\x00', 0x5, 0x9, &(0x7f0000000a00)=[{&(0x7f00000003c0)="cbaf9585eab6cb13d05a7b3dcc6645fe6790cc644a6e606325e09078f494908d9d945eb8368a52f79a42aac8b8e1addd88625f667da5297cfb88a204192b991ba2721c4b627b069349e4c6b504edad7d413dc153b1b5b8fd08f3c4724345fa861d4c2c4f666ca30797e44b6ca26c140aa1ef280564177df73a5becf04ec86309873b26e443ea4cbe5b52c4aab29cfb1c73176e", 0x93, 0x8}, {&(0x7f0000000480)="4cae97a14e9ecc7e848c31bd901c7dfd2dd96e661c3a20720812efdcdbf3e409325d1caa44263de37f34c6535682571151121f8fb1097ada57cbfee1c3becd41b097270e39cb440dc179aebb301e60cbdb9f0b84254967acf693e0f8711e34032c6eee8f1f2eb3853c", 0x69, 0x1}, {&(0x7f0000000500)="5ff11f4ddc9d0af7f8d0a3b2263504cff05cf67c97b6406b41ca062169addd47b5833fe95f0e794557ac4ec4c597daa21e9c3c638a752b25f87ec3af22e70320d48e5364a1078c4fcccce71e98a11c7d943d87403ca2225775f5bcf8025e8ce2f29655ccc8d0b1cf22dcc10e1f3027e37c1cc1861ba18d98fc0cec76d3701f02ed21ac19ae0e630adcd11427f491281b9fb6ef26d7f69148f2298c552ebfa9cd66ebaef0b0124ffb9dd46223f90d85fa", 0xb0, 0x73c8}, {&(0x7f00000005c0)="c5d0eeaaebe4da00a6ca3fae9f79c7847121f09cabcfbd756dff7a776ec143c42213b6b3e37d969476e5a8ba8f547bf4719178fe218fdf0ff73a", 0x3a, 0x2}, {&(0x7f0000000600)="f1891334ec4a0bb5fef2e6e97735d4420bc6f013df2c7d83c895cd8bc823f1e505d4af141e8358301b097be0fb5870196edf61fe5c055070b92bb696e3061fc36fac5bc6be9cdf36965ac253d3f52078e8d59a7c9d99211e13378d760597dfb87814dfe8e4d93befd009066cc5d659e1d892d680778224f2612688e85a74d45c50caf8e0c429fa4ae97a080a3d2689e7ff7675392d873d4e8ccb5ac685e3655d0cba462d084c343063984a43fdaa279549f332ed126071cc3cdc61b66741dcfa", 0xc0, 0x4}, {&(0x7f00000007c0)="4f18b20e350a49087521bddef9b448e488e1f124f189c586e0c3e59a4f47cbdae9856d863e58435bc88b60644a85cb3560f46a35ec4ce597716fbf516d88ac1a2f69421d2c99125de1ca23e630df307048987d27ac3ccdb82c535cd90fa29036f85d2061cc6c8ce2bf27b66cd723584f9d3edd832a9b2c76d1e5497e6c83824eb71dafbe978e542453c69b1b4a56deca93bbd2d4a4d33b9295236c85fa6dbce7febb1d2f8547a94905ed7ce4d044da56d2a510744837ccf8c28fb5da8c03b66b8300db6be094a83999f32b6c177c008c84bf14a0018900d5accf03964ac880eb", 0xe0, 0x8}, {&(0x7f00000006c0)="02feff2837db6b8f8d70d286f0c039baa22af3d5d52483682d399ceeac8492284ffb2b2f27f6442808fbf1a54a0b42f6c0dce541bfcc1b6061939645fb01c39eed7a71ec003a0637f2b2e016b57868e5998987352ecb3534bce5734465d2c0af09917ff5b9bf4337d5a4373b35", 0x6d}, {&(0x7f00000008c0)="0fcb0be0d63b88461ca074c13fd91cf007a8cd18fe3572d58e220f31aef575db99ea6db7ce3545f96cd8a58f9e0849e46b0e4c927988c25b6bf6018b1516dcdad007946293c885a2bc4cdaa87d9d5b14806427eb3faf9488a9f7a9388f4fd99d9103539d0a71dc21f16fa0a8e666a1f0b436915327", 0x75, 0x3}, {&(0x7f0000000940)="6ca8454ff22bb45c3722de816874f6a979be816a7f33e4e99eff16e28f20bd71257b13de101bb4a67f5d79d9f3b696929b7abcca554ca6a85a8f6025d706f96785a0c5240fec1f3e72f176fab08831ccdebf525b7aec5358aeed5ef00b81e428fbfa35b81a09873a68564b2b5ab322907ae27cba22402ca700f9c2d5fbcc149ca910d6f91d20402486ed5746713f324748faebae6ec413ef68b72cac37a666faa102bfb73f4f74a80283a2f813e7656bf93a56da", 0xb4, 0x7}], 0x24, &(0x7f0000000b00)={[{@utf8='utf8'}, {@case_sensitive_yes='case_sensitive=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@errors_continue='errors=continue'}], [{@pcr={'pcr', 0x3d, 0x1e}}]})
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0xffff, 0x200, {<r1=>0xffffffffffffffff}, {r0}, 0x3, 0x4})
lsetxattr$security_capability(&(0x7f0000000740)='./file0/file0\x00', &(0x7f0000000b80)='security.capability\x00', &(0x7f0000000bc0)=@v1={0x1000000, [{0x7fff, 0xc55}]}, 0xc, 0x0)
ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000300)=0x3f)
syz_open_procfs$namespace(r1, &(0x7f00000002c0)='ns/cgroup\x00')

00:40:38 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r4, &(0x7f00000016c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r4, 0x0)
ioctl$VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000240)={0x7, 0x0, 0x4, 0x1000000, 0x9, {0x77359400}, {0x5, 0xc, 0xff, 0xb7, 0x3f, 0x7f, "3e858037"}, 0x9, 0x3, @planes=&(0x7f0000000200)={0x6, 0xb6, @mem_offset=0x1000, 0x7}, 0x7ff, 0x0, <r5=>r1})
openat$cgroup_subtree(r5, &(0x7f00000002c0)='cgroup.subtree_control\x00', 0x2, 0x0)
getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r6, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10)
clock_getres(0x6, &(0x7f0000000000))
r7 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0xd64, 0x80002)
ioctl$PPPIOCGL2TPSTATS(r7, 0x80487436, &(0x7f00000000c0)="d181662b7e477f9ce4122e5dd3a9987918e7d29cfcc1f73af41a5259ce778438ca0ec3240ee40cedf1f101f85ffe121eaa6c35879675426c675bcf1d532b30f78aabac5e321f7f3ed91c2d9d7a1848f914ca3545494055095063e5d3e92f9f77965ecbed762447ed244fd1321b4c2bbee74772e63536afeeb1f3c0e701341dc3f97f406d257392b2bd85e28c9d6f05a2abb83503")

[ 1024.288837] hfsplus: unable to parse mount options
00:40:38 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000))
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

[ 1024.321538] hfsplus: unable to parse mount options
00:40:38 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r2, &(0x7f0000c34fff), 0xffffff0b)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r3, 0x1)
getsockopt$IP_SET_OP_GET_FNAME(r3, 0x1, 0x53, &(0x7f0000000040)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000080)=0x2c)
write$P9_RREADLINK(r2, 0x0, 0x0)
ioctl$TCSETXW(r2, 0x5435, &(0x7f0000000000)={0x9, 0x2, [0x40, 0x400, 0x14, 0x1, 0x4], 0x6a})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@type={'type', 0x3d, "29d59191"}}]})

[ 1024.385889] hfsplus: unable to parse mount options
00:40:38 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)

00:40:38 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x40)
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x401, 0x5, 0x8})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, 0x0, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r5 = memfd_create(&(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00', 0x0)
pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
socket$caif_seqpacket(0x25, 0x5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r5, 0x0, 0x20000102000003)

00:40:38 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x12c20c0, &(0x7f0000000000)={[{@umask={'umask', 0x3d, 0x6}}]})

[ 1024.760330] kasan: CONFIG_KASAN_INLINE enabled
[ 1024.765374] kasan: GPF could be caused by NULL-ptr deref or user memory access
[ 1024.772866] general protection fault: 0000 [#1] PREEMPT SMP KASAN
[ 1024.779098] Modules linked in:
[ 1024.782292] CPU: 1 PID: 13282 Comm: syz-executor.4 Not tainted 4.14.171-syzkaller #0
[ 1024.790209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1024.799547] task: ffff8880a551e480 task.stack: ffff8880a4000000
[ 1024.805585] RIP: 0010:kobject_uevent_env+0xa4/0xc80
[ 1024.810578] RSP: 0018:ffff8880a4007b60 EFLAGS: 00010206
[ 1024.815921] RAX: 0000000000000018 RBX: ffff888097c2fb40 RCX: 1ffff11014aa3d9e
[ 1024.823171] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000000000c0
[ 1024.830425] RBP: ffff8880a4007be0 R08: ffff8880a551e480 R09: 0000000000000003
[ 1024.837696] R10: 0000000000000000 R11: ffff8880a551e480 R12: dffffc0000000000
[ 1024.844946] R13: 00000000000000a0 R14: 00000000000000a0 R15: ffff888097c2fc88
[ 1024.852195] FS:  0000000002103940(0000) GS:ffff8880aed00000(0000) knlGS:0000000000000000
[ 1024.860486] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1024.866346] CR2: 0000000001a14c10 CR3: 000000008f0c9000 CR4: 00000000001426e0
[ 1024.873608] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1024.880880] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1024.888130] Call Trace:
[ 1024.890703]  ? lock_downgrade+0x740/0x740
[ 1024.894842]  kobject_uevent+0x20/0x30
[ 1024.898632]  loop_clr_fd+0x4a7/0xae0
[ 1024.902333]  lo_release+0x112/0x1b0
[ 1024.905952]  ? loop_clr_fd+0xae0/0xae0
[ 1024.909826]  __blkdev_put+0x434/0x7f0
[ 1024.913610]  ? bd_set_size+0xb0/0xb0
[ 1024.917307]  ? wait_for_completion+0x420/0x420
[ 1024.921871]  blkdev_put+0x88/0x510
[ 1024.925396]  ? fcntl_setlk+0xb90/0xb90
[ 1024.929559]  ? blkdev_put+0x510/0x510
[ 1024.933351]  blkdev_close+0x8b/0xb0
[ 1024.936960]  __fput+0x275/0x7a0
[ 1024.940228]  ____fput+0x16/0x20
[ 1024.943494]  task_work_run+0x114/0x190
[ 1024.947374]  exit_to_usermode_loop+0x1da/0x220
[ 1024.951951]  do_syscall_64+0x4bc/0x640
[ 1024.955838]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1024.960665]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1024.965843] RIP: 0033:0x415fc1
[ 1024.969019] RSP: 002b:00007fffa4368070 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[ 1024.976705] RAX: 0000000000000000 RBX: 0000000000000007 RCX: 0000000000415fc1
[ 1024.983958] RDX: 0000000000000000 RSI: 00000000000000e4 RDI: 0000000000000006
[ 1024.991220] RBP: 0000000000000001 R08: 00000000ae3040e4 R09: 00000000ae3040e8
[ 1024.998470] R10: 00007fffa4368150 R11: 0000000000000293 R12: 000000000076c920
[ 1025.005719] R13: 000000000076c920 R14: 00000000000fa089 R15: 000000000076c10c
[ 1025.012972] Code: c1 e8 03 42 80 3c 20 00 0f 85 6c 0a 00 00 4d 8b 76 18 4d 85 f6 0f 84 27 02 00 00 e8 17 02 fa fa 49 8d 7e 20 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 0f 85 3a 0a 00 00 4d 8b 7e 20 4d 85 ff 74 b4 e8 
[ 1025.032049] RIP: kobject_uevent_env+0xa4/0xc80 RSP: ffff8880a4007b60
[ 1025.038870] ---[ end trace ef8c8cd4232ccb6e ]---
[ 1025.043710] Kernel panic - not syncing: Fatal exception
[ 1025.050324] Kernel Offset: disabled
[ 1025.053956] Rebooting in 86400 seconds..