0x1, 0x1b, 0x36, 0x12, 0x6c, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x7, 0xff, 0x2ab, 0x2, 0x0, 0x4d3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x30]}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x5, 0x0, 0x2, 0x2, 0x1, 0x66, 0xb, 0x3f, 0x6, 0x1b, 0x6c, 0x18, 0x4, 0x16, 0x6c, 0x3, 0x6c, 0x0, 0xb, 0x25, 0x5, 0x4, 0x3, 0x30, 0xc, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2602, 0x0, 0x5, 0x100, 0x8000, 0x4, 0x5, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x0, 0x8}, {0x0, 0xa}, {0x0, 0x8}, {0x0, 0xa}, {0x3, 0x8}, {0x6}, {0x6, 0x8}, {0x1, 0x3}, {0x1, 0x7}, {0x5, 0x3}, {0x4}, {0x3, 0x3}, {0x1, 0x1e}, {0x4, 0x5}, {0x1, 0x1}, {0x6, 0xa}, {0x4}, {0x4, 0x4}, {0x1, 0x6}, {0x6, 0x7}, {0x6, 0x5}, {0x1, 0x8}, {0x0, 0xa}, {0x7}, {0x1, 0x7}, {0x1, 0x1}, {0x2, 0x7}, {0x2, 0x7}, {0x3, 0xa}, {0x6, 0x6}, {0x2, 0x8}, {0x3, 0x6}, {0x5, 0x4}, {0x5}, {0x0, 0x4}, {0x5, 0x6}, {0x0, 0x2}, {0x5, 0x8}, {0x2}, {0x2}, {0x5, 0x7}, {0x2, 0x5}, {0x7, 0xa}, {0x0, 0x5}]}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x4, 0x60, 0x4, 0x9, 0xb, 0x1]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x453, 0x2, 0xe0a8, 0xaa, 0x7, 0x0, 0x2]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x3, 0x24, 0x24, 0x24, 0x6c, 0x4, 0x12, 0x5, 0x6, 0x12, 0x60, 0x24, 0x30, 0x5, 0xc, 0x9, 0x24, 0x1]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x7, 0x6, 0x1, 0x3, 0x5, 0x7fff, 0x509]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x81, 0xe4, 0xb1eb, 0x1, 0x4, 0x893a, 0x5]}}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x3, 0x2}, {0x5, 0x6}, {0x5, 0x5}, {}, {0x5, 0x5}, {0x5, 0x3}, {0x7, 0x7}, {0x7, 0x9}, {0x7, 0x1}, {0x6, 0x7}, {0x4, 0x4}, {0x2, 0x1}, {0x5, 0x8}, {0x4}, {0x2, 0x9}, {0x2}, {0x7, 0x9}, {0x7, 0x4}, {0x4, 0x6}, {0x1, 0x7}, {0x6, 0x6}, {0x3}, {0x0, 0x7}, {0x0, 0x4}, {0x1, 0x2}, {0x5, 0x6}, {0x0, 0x6}, {0x3, 0x3}, {0x1, 0x8}, {0x6, 0x8}, {0x6, 0x3}, {0x1, 0xa}, {0x7, 0x8}, {0x1}, {0x6, 0x2}, {0x3, 0x9}, {0x7, 0x4}, {0x4, 0x2}, {0x4, 0x1}, {0x0, 0x7}, {0x0, 0x2}, {0x1, 0x7}, {0x2, 0x3}, {0x3, 0x3}, {0x1, 0x3}, {0x1, 0x1}, {0x3, 0x5}, {0x3, 0x2}, {0x0, 0x7}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x18, 0x9, 0x24, 0x1, 0x9, 0x5, 0x16, 0x36, 0x30, 0x4, 0x1, 0xb, 0x12, 0x16, 0x6, 0x0, 0x2, 0x12, 0x48, 0x9, 0x1b, 0x36, 0x66, 0x60, 0x6, 0xc, 0x5c, 0x4, 0x1b, 0x5, 0x1b]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xa4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x7, 0x2}, {0x6, 0x8}, {0x0, 0x2}, {0x6, 0x9}, {0x6, 0x5}, {0x7, 0x9}, {0x0, 0x3}, {0x7, 0x3}, {0x0, 0x3}, {0x3, 0x3}, {0x0, 0x5}, {0x2, 0x1}, {0x7, 0x3}, {0x1, 0x9}, {0x2}, {0x0, 0x2}, {0x2, 0x2}, {0x1, 0x6}, {0x4, 0x1}, {0x3, 0x3}, {0x2, 0x3}, {0x1, 0x7}, {0x3, 0x2}, {0x1, 0x6}, {0x7}, {0x0, 0x8}, {0x3, 0x6}, {0x1}, {0x7, 0x2}, {0x2, 0x7}, {0x5}, {0x7, 0x9}, {0x4, 0x9}, {}, {0x4, 0x4}, {0x7, 0x7}, {0x6, 0x4}, {0x3, 0x9}, {0x6, 0x8}, {0x0, 0x1}, {0x3, 0x6}, {0x3, 0xa}, {0x4, 0x8}, {0x7, 0x5}, {0x4, 0x3}, {0x7, 0xa}, {0x1, 0xa}, {0x1, 0xa}, {0x5, 0x3}, {0x4, 0x9}, {0x0, 0x2}, {0x3, 0x5}, {0x6, 0x3}, {0x4, 0x9}, {0x1, 0x1}, {0x2}, {0x7, 0x2}, {0x4, 0x2}, {0x5, 0x4}, {}, {0x7, 0x1}, {0x2, 0x9}, {0x5, 0xa}, {0x2, 0x5}, {0x1, 0x4}, {0x2, 0x2}, {0x1, 0x9}, {0x1, 0x8}, {0x1, 0x9}, {0x1, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x9f4d, 0x6, 0x5, 0x45, 0x31e, 0xf001, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1, 0x800, 0x2, 0x1f, 0x60, 0xffff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x7, 0xffff, 0x40, 0x101, 0x1f, 0xbb1, 0x80]}}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x2, 0x2, 0xc, 0xc, 0x6c, 0x6c, 0x2, 0x18, 0x5, 0x6c, 0xc, 0x12, 0x1b, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffc, 0x9, 0x80, 0x8, 0x3, 0x8, 0x5, 0x6aa]}}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x4, 0x3}, {0x2, 0x4}, {0x4, 0x5}, {0x6, 0x5}, {0x5, 0x6}]}]}, @NL80211_BAND_2GHZ={0x9c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x3, 0x48, 0x30, 0x24, 0x1, 0x4, 0x18, 0x1, 0xc, 0x5b, 0x12, 0xb, 0xdc8b772ab01f97ff, 0x30, 0x5, 0x24, 0xc, 0x1b, 0x1, 0x60]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x16, 0x1, 0x48, 0x3, 0xb, 0x36, 0x36, 0x16, 0xb, 0x6, 0x48, 0x0, 0x16, 0x2, 0x18, 0x1, 0x8]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x30, 0x3, 0x48, 0x6, 0x60, 0x36, 0x36, 0x1, 0x1, 0x9, 0x1b, 0x1, 0x5, 0x7, 0x30, 0x48, 0x12, 0x18, 0x12, 0x1, 0x2, 0xc, 0xc, 0x24, 0x6, 0x60]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x7ff, 0x81, 0x5704, 0x81, 0x4, 0x8000, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0xfff9, 0x7, 0x7, 0x7f, 0x20, 0xc2f8, 0xc6d7]}}]}]}, @NL80211_ATTR_TX_RATES={0x16c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x48, 0x2, 0x3, 0x4, 0xffff, 0xf800, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3f, 0x0, 0x8, 0x3ff, 0x1, 0x4, 0x401, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7, 0x80, 0x8, 0x4, 0x713, 0x5, 0x6]}}]}, @NL80211_BAND_2GHZ={0x70, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x1, 0x7, 0x8, 0xeba8, 0x3, 0x67ef, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x1b, 0x1, 0x16, 0x26, 0x36, 0x6c, 0x3, 0x18, 0x1b, 0x6, 0xc, 0x12, 0x60, 0x30, 0x12, 0x48, 0x6, 0x1b, 0x6c, 0x1b, 0x4, 0x16, 0x48, 0xc, 0x6, 0x1b, 0x24, 0x48, 0x9]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2c98, 0x2, 0x800, 0xe73d, 0x63, 0x6, 0xeb36, 0x5]}}]}, @NL80211_BAND_2GHZ={0xac, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x24, 0x2, [{0x3, 0x4}, {0x2, 0x4}, {0x3, 0x5}, {0x3, 0x3}, {0x3, 0x6}, {0x7, 0x3}, {0x1, 0xa}, {0x5, 0x5}, {0x3, 0x8}, {0x2, 0x1}, {0x1, 0xa}, {0x2, 0x9}, {}, {0x3, 0xa}, {0x5, 0xa}, {0x7, 0x3}, {0x7, 0x8}, {0x0, 0x8}, {0x0, 0x6}, {0x6, 0x5}, {0x3, 0x4}, {0x1, 0x9}, {0x3, 0x1}, {0x6, 0x7}, {0x0, 0x3}, {0x3, 0x8}, {0x6, 0xa}, {0x3, 0xa}, {0x5, 0x4}, {0x6, 0x9}, {0x5, 0x7}, {0x7}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x8, 0xffff, 0x200, 0x0, 0xfffe, 0x6, 0x5]}}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x5, 0x8}, {0x0, 0x3}, {0x3, 0x8}, {0x6, 0x2}, {0x3, 0x5}, {0x0, 0x6}, {0x1, 0x3}, {0x0, 0x8}, {0x6, 0x9}, {0x4, 0x3}, {0x7, 0x2}, {0x7, 0x8}, {0x7, 0x9}, {0x4, 0x2}, {0x2, 0x9}, {0x2}, {0x3}, {0x7, 0x1}, {0x3, 0x7}, {0x4}, {0x0, 0xa}, {0x6, 0x9}, {0x1, 0x4}, {0x1, 0x5}, {0x1}, {0x2, 0x2}, {0x1, 0x9}, {0x4, 0x7}, {0x2, 0x3}, {0x5, 0x1}, {0x7, 0xa}, {0x6, 0x9}, {0x2, 0x4}, {0x5, 0x2}, {0x3, 0x1}, {0x1, 0x8}, {0x0, 0x6}, {0x0, 0x9}, {0x7}, {0x1, 0xa}, {0x2, 0x7}, {0x1}, {0x2, 0x2}, {0x5, 0x5}, {0x0, 0x6}, {0x6, 0x9}, {0x5, 0x4}, {0x6, 0x2}, {0x1, 0x5}, {0x6}, {0x3}, {0x3}, {0x3, 0xa}, {0x2, 0x3}, {0x5, 0x2}, {0x0, 0x4}, {0x3, 0x1}, {0x3, 0x2}, {0x5, 0x5}, {0x0, 0x8}, {0x0, 0xa}, {0x2, 0x3}, {0x0, 0x7}, {0x1, 0x3}, {0x7, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x1e8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x4e}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x2, 0x8, 0x6, 0x1, 0x6, 0x2, 0x100]}}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x2, 0x6}, {0x7, 0x4}, {0x0, 0x2}, {0x4, 0x3}, {0x7, 0x8}, {0x6, 0xa}, {0x3, 0xa}, {0x4, 0xa}, {0x2, 0x9}, {0x3, 0x2}, {0x0, 0x9}, {0x4, 0x7}, {0x2, 0x5}, {0x2, 0xa}, {0x7}, {0x4, 0x5}, {0x5, 0x5}, {0x7, 0x3}, {0x0, 0x7}, {0x4, 0x8}, {0x5}, {}, {0x2, 0x8}, {0x0, 0x1}, {0x7, 0x6}, {0x2, 0x2}, {0x1, 0x4}, {0x0, 0x2}, {0x6, 0x1}, {0x6}, {0x3, 0x6}, {0x1}, {0x1, 0x3}, {0x7, 0x7}, {0x3, 0x5}, {0x3, 0x5}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x7, 0x6}, {0x6, 0x5}, {0x2, 0xa}, {0x4}, {0x0, 0x5}, {0x7, 0x8}, {0x5, 0x9}, {0x2, 0x5}, {0x0, 0x9}, {0x4, 0xa}, {0x5, 0x7}, {0x0, 0x7}, {0x7, 0x2}, {0x4, 0x3}, {}, {0x1, 0x9}, {0x2, 0x3}, {0x5, 0x8}, {0x0, 0x4}, {0x2, 0x2}, {0x2, 0x8}, {0x1, 0x9}, {0x2, 0xa}, {0x5, 0x6}, {0x5}, {0x1, 0x8}, {0x2, 0x9}, {0x3, 0x9}, {0x1, 0x3}, {0x1, 0x8}, {0x0, 0xa}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x6}, {0x1, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6399, 0xf726, 0x6, 0x3, 0xff, 0xc33, 0x800, 0x1]}}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0xc, 0x24]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x24, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x1, 0xfff, 0xfc, 0xa5, 0x6, 0x1, 0xfffa]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x9, 0x81, 0x7ff, 0x57b4, 0x7, 0x395c, 0xa9a8]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x1b, 0x0, 0x60, 0x18, 0x12, 0x1, 0x30, 0x16, 0x6, 0x9, 0x9, 0x9, 0x1b, 0x5, 0x12, 0xb, 0x3]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x6c, 0x36]}]}, @NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xfffc, 0x6, 0xff, 0x0, 0x6, 0x6, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x7, 0x8, 0x1, 0xfff, 0x2, 0xffff, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x2, 0x3}, {0x1, 0x6}, {0x7, 0x7}, {0x5}, {0x4, 0xa}, {0x4, 0x9}, {0x0, 0x8}, {0x7, 0x1}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x2}, {0x1, 0x8}, {0x1, 0x4}, {0x0, 0x4}, {0x7, 0x9}, {0x5, 0x2}, {0x2, 0x5}, {0x2, 0x5}, {0x7, 0x3}, {0x6}, {0x0, 0x2}, {0x6, 0x8}, {0x0, 0x2}, {0x1, 0x1}, {0x0, 0x5}, {0x2, 0x9}, {0x3, 0xa}, {0x6, 0x1}, {0x1, 0xa}, {0x1, 0x5}, {0x2, 0xa}, {0x2}, {0x5, 0x1}, {0x0, 0x9}, {0x7, 0x2}, {0x1, 0xa}, {0x1, 0x2}, {0x0, 0x5}]}]}]}, @NL80211_ATTR_TX_RATES={0xac, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xd3, 0x1c23, 0xff, 0x5, 0x2, 0x9, 0x4]}}]}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x3ff, 0x0, 0x7, 0x7ff, 0x8, 0x40, 0x400]}}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x2, 0x1}, {0x7, 0x8}, {0x5, 0x4}, {0x0, 0x8}, {0x0, 0x7}, {0x0, 0x7}, {0x4, 0x2}, {0x3, 0x3}, {0x7, 0x8}, {0x4, 0xa}, {0x2, 0x6}, {0x7, 0x8}, {0x5, 0x7}, {0x0, 0x2}, {0x4, 0xa}, {0x0, 0x8}, {0x0, 0x1}, {0x3, 0x3}, {0x2, 0x7}, {0x4}, {0x7, 0x6}, {0x3, 0xa}, {0x2, 0x2}, {0x6, 0x2}, {0x1, 0x1}, {0x0, 0x2}, {0x6, 0xa}, {0x2, 0x6}, {0x6, 0xa}, {0x3, 0x1}, {0x5, 0x3}, {0x1}, {0x0, 0x3}, {0x1, 0x2}, {0x1, 0x9}, {0x5, 0x9}, {0x3, 0x7}, {0x5, 0x4}, {0x2, 0x4}, {0x1, 0xa}, {0x1}, {0x7, 0x2}, {0x7, 0x1}, {0x6, 0x4}, {0x5, 0x7}, {0x2, 0x9}, {0x1, 0x4}, {0x7, 0x4}, {0x3, 0x2}, {0x6, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x53be, 0x40, 0x358, 0x401, 0x0, 0x0, 0xfffc]}}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x7, 0x7}, {0x5, 0x1e}, {0x0, 0x7}, {0x0, 0x6}, {0x6, 0x8}, {0x5, 0xa}, {0x3, 0x5}]}]}]}]}, 0x88c}, 0x1, 0x0, 0x0, 0x50}, 0x810) 17:36:03 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x1, 0xa, 0x2, 0x0, 0x0, 0x80) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0xa}]}}}]}, 0x3c}}, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 17:36:03 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x206a00) 17:36:03 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000000), 0x0, 0x2, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000080), 0x2) [ 506.802081] hfs: part requires an argument [ 506.808144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 506.836998] attempt to access beyond end of device [ 506.857399] hfs: unable to parse mount options [ 506.870248] loop1: rw=1, want=16, limit=15 [ 506.884296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 506.892427] Buffer I/O error on dev loop1, logical block 15, lost async page write [ 506.900475] attempt to access beyond end of device [ 506.905677] loop1: rw=1, want=128, limit=15 17:36:03 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async, rerun: 64) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async, rerun: 64) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f0000000000), 0x0, 0x2, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000080), 0x2) 17:36:03 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x8, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0xc266a4723dd56b93}, 0x14}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r3, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b40)='/sys/module/dvb_usb_dibusb_common', 0x800, 0x60) syz_genetlink_get_family_id$tipc2(&(0x7f0000000b00), r6) (async, rerun: 64) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x88c, r4, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x5dee, 0x1}}}}, [@NL80211_ATTR_TX_RATES={0x120, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0xc, 0x24, 0x12, 0xc, 0x3, 0x36, 0x24, 0x48, 0xb, 0x12, 0x1b, 0x60, 0x9, 0x1, 0x9, 0xc, 0x0, 0x1, 0xc, 0x1, 0x12, 0x30, 0x24, 0x16, 0xb, 0x18, 0x60, 0x6c, 0x16, 0xc]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x30, 0xc, 0x48, 0x30, 0x48, 0xc, 0x60, 0x3, 0xc, 0x30, 0x48, 0x72, 0xc, 0x1, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x26, 0x6, 0x7, 0x1f, 0x6, 0x9, 0x6]}}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x2, 0xa}, {0x4, 0xc}, {0x0, 0x3}, {0x2, 0x8}, {0x3, 0x4}, {0x1, 0x7}, {0x2, 0xa}, {0x6, 0x1}, {0x4, 0x3}, {0x6, 0x5}, {0x0, 0x8}, {0x7, 0xa}, {0x7, 0x5}, {0x0, 0x2}, {0x0, 0x7}, {0x3, 0x6}, {0x0, 0x5}, {0x3, 0x4}, {0x4, 0x8}, {0x5, 0xa}, {0x1, 0x8}, {0x2, 0x8}, {0x2, 0x5}, {0x5, 0x1}, {0x1}, {0x6, 0x9}, {0x4}, {0x0, 0x9}, {0x7, 0x8}, {0x1, 0xa}, {0x6, 0x5}, {0x0, 0x3}, {0x4, 0xa}, {0x0, 0x9}]}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7ff, 0x2, 0x800, 0x1, 0x0, 0x100, 0x5]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x16, 0x60, 0x5, 0xc, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x0, 0x1, 0x5, 0x0, 0x8, 0x100, 0x3f7]}}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x1b, 0x14, 0x5, 0xb, 0x6c, 0x4, 0x0, 0x18, 0x6c, 0x1, 0x12, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0xc, 0x31, 0xc, 0xb, 0x23, 0x3, 0x5, 0x12, 0x36, 0x24, 0x12, 0x1, 0x24, 0x0, 0x18, 0x24, 0xc, 0x48, 0x36, 0x6c]}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x344, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x24, 0x1, 0x1, 0x1, 0xc, 0x6c, 0x6c, 0x24, 0x24, 0x1, 0x1b, 0x36, 0x12, 0x6c, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x7, 0xff, 0x2ab, 0x2, 0x0, 0x4d3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x30]}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x5, 0x0, 0x2, 0x2, 0x1, 0x66, 0xb, 0x3f, 0x6, 0x1b, 0x6c, 0x18, 0x4, 0x16, 0x6c, 0x3, 0x6c, 0x0, 0xb, 0x25, 0x5, 0x4, 0x3, 0x30, 0xc, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2602, 0x0, 0x5, 0x100, 0x8000, 0x4, 0x5, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x0, 0x8}, {0x0, 0xa}, {0x0, 0x8}, {0x0, 0xa}, {0x3, 0x8}, {0x6}, {0x6, 0x8}, {0x1, 0x3}, {0x1, 0x7}, {0x5, 0x3}, {0x4}, {0x3, 0x3}, {0x1, 0x1e}, {0x4, 0x5}, {0x1, 0x1}, {0x6, 0xa}, {0x4}, {0x4, 0x4}, {0x1, 0x6}, {0x6, 0x7}, {0x6, 0x5}, {0x1, 0x8}, {0x0, 0xa}, {0x7}, {0x1, 0x7}, {0x1, 0x1}, {0x2, 0x7}, {0x2, 0x7}, {0x3, 0xa}, {0x6, 0x6}, {0x2, 0x8}, {0x3, 0x6}, {0x5, 0x4}, {0x5}, {0x0, 0x4}, {0x5, 0x6}, {0x0, 0x2}, {0x5, 0x8}, {0x2}, {0x2}, {0x5, 0x7}, {0x2, 0x5}, {0x7, 0xa}, {0x0, 0x5}]}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x4, 0x60, 0x4, 0x9, 0xb, 0x1]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x453, 0x2, 0xe0a8, 0xaa, 0x7, 0x0, 0x2]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x3, 0x24, 0x24, 0x24, 0x6c, 0x4, 0x12, 0x5, 0x6, 0x12, 0x60, 0x24, 0x30, 0x5, 0xc, 0x9, 0x24, 0x1]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x7, 0x6, 0x1, 0x3, 0x5, 0x7fff, 0x509]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x81, 0xe4, 0xb1eb, 0x1, 0x4, 0x893a, 0x5]}}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x3, 0x2}, {0x5, 0x6}, {0x5, 0x5}, {}, {0x5, 0x5}, {0x5, 0x3}, {0x7, 0x7}, {0x7, 0x9}, {0x7, 0x1}, {0x6, 0x7}, {0x4, 0x4}, {0x2, 0x1}, {0x5, 0x8}, {0x4}, {0x2, 0x9}, {0x2}, {0x7, 0x9}, {0x7, 0x4}, {0x4, 0x6}, {0x1, 0x7}, {0x6, 0x6}, {0x3}, {0x0, 0x7}, {0x0, 0x4}, {0x1, 0x2}, {0x5, 0x6}, {0x0, 0x6}, {0x3, 0x3}, {0x1, 0x8}, {0x6, 0x8}, {0x6, 0x3}, {0x1, 0xa}, {0x7, 0x8}, {0x1}, {0x6, 0x2}, {0x3, 0x9}, {0x7, 0x4}, {0x4, 0x2}, {0x4, 0x1}, {0x0, 0x7}, {0x0, 0x2}, {0x1, 0x7}, {0x2, 0x3}, {0x3, 0x3}, {0x1, 0x3}, {0x1, 0x1}, {0x3, 0x5}, {0x3, 0x2}, {0x0, 0x7}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x18, 0x9, 0x24, 0x1, 0x9, 0x5, 0x16, 0x36, 0x30, 0x4, 0x1, 0xb, 0x12, 0x16, 0x6, 0x0, 0x2, 0x12, 0x48, 0x9, 0x1b, 0x36, 0x66, 0x60, 0x6, 0xc, 0x5c, 0x4, 0x1b, 0x5, 0x1b]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xa4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x7, 0x2}, {0x6, 0x8}, {0x0, 0x2}, {0x6, 0x9}, {0x6, 0x5}, {0x7, 0x9}, {0x0, 0x3}, {0x7, 0x3}, {0x0, 0x3}, {0x3, 0x3}, {0x0, 0x5}, {0x2, 0x1}, {0x7, 0x3}, {0x1, 0x9}, {0x2}, {0x0, 0x2}, {0x2, 0x2}, {0x1, 0x6}, {0x4, 0x1}, {0x3, 0x3}, {0x2, 0x3}, {0x1, 0x7}, {0x3, 0x2}, {0x1, 0x6}, {0x7}, {0x0, 0x8}, {0x3, 0x6}, {0x1}, {0x7, 0x2}, {0x2, 0x7}, {0x5}, {0x7, 0x9}, {0x4, 0x9}, {}, {0x4, 0x4}, {0x7, 0x7}, {0x6, 0x4}, {0x3, 0x9}, {0x6, 0x8}, {0x0, 0x1}, {0x3, 0x6}, {0x3, 0xa}, {0x4, 0x8}, {0x7, 0x5}, {0x4, 0x3}, {0x7, 0xa}, {0x1, 0xa}, {0x1, 0xa}, {0x5, 0x3}, {0x4, 0x9}, {0x0, 0x2}, {0x3, 0x5}, {0x6, 0x3}, {0x4, 0x9}, {0x1, 0x1}, {0x2}, {0x7, 0x2}, {0x4, 0x2}, {0x5, 0x4}, {}, {0x7, 0x1}, {0x2, 0x9}, {0x5, 0xa}, {0x2, 0x5}, {0x1, 0x4}, {0x2, 0x2}, {0x1, 0x9}, {0x1, 0x8}, {0x1, 0x9}, {0x1, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x9f4d, 0x6, 0x5, 0x45, 0x31e, 0xf001, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1, 0x800, 0x2, 0x1f, 0x60, 0xffff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x7, 0xffff, 0x40, 0x101, 0x1f, 0xbb1, 0x80]}}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x2, 0x2, 0xc, 0xc, 0x6c, 0x6c, 0x2, 0x18, 0x5, 0x6c, 0xc, 0x12, 0x1b, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffc, 0x9, 0x80, 0x8, 0x3, 0x8, 0x5, 0x6aa]}}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x4, 0x3}, {0x2, 0x4}, {0x4, 0x5}, {0x6, 0x5}, {0x5, 0x6}]}]}, @NL80211_BAND_2GHZ={0x9c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x3, 0x48, 0x30, 0x24, 0x1, 0x4, 0x18, 0x1, 0xc, 0x5b, 0x12, 0xb, 0xdc8b772ab01f97ff, 0x30, 0x5, 0x24, 0xc, 0x1b, 0x1, 0x60]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x16, 0x1, 0x48, 0x3, 0xb, 0x36, 0x36, 0x16, 0xb, 0x6, 0x48, 0x0, 0x16, 0x2, 0x18, 0x1, 0x8]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x30, 0x3, 0x48, 0x6, 0x60, 0x36, 0x36, 0x1, 0x1, 0x9, 0x1b, 0x1, 0x5, 0x7, 0x30, 0x48, 0x12, 0x18, 0x12, 0x1, 0x2, 0xc, 0xc, 0x24, 0x6, 0x60]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x7ff, 0x81, 0x5704, 0x81, 0x4, 0x8000, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0xfff9, 0x7, 0x7, 0x7f, 0x20, 0xc2f8, 0xc6d7]}}]}]}, @NL80211_ATTR_TX_RATES={0x16c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x48, 0x2, 0x3, 0x4, 0xffff, 0xf800, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3f, 0x0, 0x8, 0x3ff, 0x1, 0x4, 0x401, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7, 0x80, 0x8, 0x4, 0x713, 0x5, 0x6]}}]}, @NL80211_BAND_2GHZ={0x70, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x1, 0x7, 0x8, 0xeba8, 0x3, 0x67ef, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x1b, 0x1, 0x16, 0x26, 0x36, 0x6c, 0x3, 0x18, 0x1b, 0x6, 0xc, 0x12, 0x60, 0x30, 0x12, 0x48, 0x6, 0x1b, 0x6c, 0x1b, 0x4, 0x16, 0x48, 0xc, 0x6, 0x1b, 0x24, 0x48, 0x9]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2c98, 0x2, 0x800, 0xe73d, 0x63, 0x6, 0xeb36, 0x5]}}]}, @NL80211_BAND_2GHZ={0xac, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x24, 0x2, [{0x3, 0x4}, {0x2, 0x4}, {0x3, 0x5}, {0x3, 0x3}, {0x3, 0x6}, {0x7, 0x3}, {0x1, 0xa}, {0x5, 0x5}, {0x3, 0x8}, {0x2, 0x1}, {0x1, 0xa}, {0x2, 0x9}, {}, {0x3, 0xa}, {0x5, 0xa}, {0x7, 0x3}, {0x7, 0x8}, {0x0, 0x8}, {0x0, 0x6}, {0x6, 0x5}, {0x3, 0x4}, {0x1, 0x9}, {0x3, 0x1}, {0x6, 0x7}, {0x0, 0x3}, {0x3, 0x8}, {0x6, 0xa}, {0x3, 0xa}, {0x5, 0x4}, {0x6, 0x9}, {0x5, 0x7}, {0x7}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x8, 0xffff, 0x200, 0x0, 0xfffe, 0x6, 0x5]}}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x5, 0x8}, {0x0, 0x3}, {0x3, 0x8}, {0x6, 0x2}, {0x3, 0x5}, {0x0, 0x6}, {0x1, 0x3}, {0x0, 0x8}, {0x6, 0x9}, {0x4, 0x3}, {0x7, 0x2}, {0x7, 0x8}, {0x7, 0x9}, {0x4, 0x2}, {0x2, 0x9}, {0x2}, {0x3}, {0x7, 0x1}, {0x3, 0x7}, {0x4}, {0x0, 0xa}, {0x6, 0x9}, {0x1, 0x4}, {0x1, 0x5}, {0x1}, {0x2, 0x2}, {0x1, 0x9}, {0x4, 0x7}, {0x2, 0x3}, {0x5, 0x1}, {0x7, 0xa}, {0x6, 0x9}, {0x2, 0x4}, {0x5, 0x2}, {0x3, 0x1}, {0x1, 0x8}, {0x0, 0x6}, {0x0, 0x9}, {0x7}, {0x1, 0xa}, {0x2, 0x7}, {0x1}, {0x2, 0x2}, {0x5, 0x5}, {0x0, 0x6}, {0x6, 0x9}, {0x5, 0x4}, {0x6, 0x2}, {0x1, 0x5}, {0x6}, {0x3}, {0x3}, {0x3, 0xa}, {0x2, 0x3}, {0x5, 0x2}, {0x0, 0x4}, {0x3, 0x1}, {0x3, 0x2}, {0x5, 0x5}, {0x0, 0x8}, {0x0, 0xa}, {0x2, 0x3}, {0x0, 0x7}, {0x1, 0x3}, {0x7, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x1e8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x4e}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x2, 0x8, 0x6, 0x1, 0x6, 0x2, 0x100]}}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x2, 0x6}, {0x7, 0x4}, {0x0, 0x2}, {0x4, 0x3}, {0x7, 0x8}, {0x6, 0xa}, {0x3, 0xa}, {0x4, 0xa}, {0x2, 0x9}, {0x3, 0x2}, {0x0, 0x9}, {0x4, 0x7}, {0x2, 0x5}, {0x2, 0xa}, {0x7}, {0x4, 0x5}, {0x5, 0x5}, {0x7, 0x3}, {0x0, 0x7}, {0x4, 0x8}, {0x5}, {}, {0x2, 0x8}, {0x0, 0x1}, {0x7, 0x6}, {0x2, 0x2}, {0x1, 0x4}, {0x0, 0x2}, {0x6, 0x1}, {0x6}, {0x3, 0x6}, {0x1}, {0x1, 0x3}, {0x7, 0x7}, {0x3, 0x5}, {0x3, 0x5}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x7, 0x6}, {0x6, 0x5}, {0x2, 0xa}, {0x4}, {0x0, 0x5}, {0x7, 0x8}, {0x5, 0x9}, {0x2, 0x5}, {0x0, 0x9}, {0x4, 0xa}, {0x5, 0x7}, {0x0, 0x7}, {0x7, 0x2}, {0x4, 0x3}, {}, {0x1, 0x9}, {0x2, 0x3}, {0x5, 0x8}, {0x0, 0x4}, {0x2, 0x2}, {0x2, 0x8}, {0x1, 0x9}, {0x2, 0xa}, {0x5, 0x6}, {0x5}, {0x1, 0x8}, {0x2, 0x9}, {0x3, 0x9}, {0x1, 0x3}, {0x1, 0x8}, {0x0, 0xa}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x6}, {0x1, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6399, 0xf726, 0x6, 0x3, 0xff, 0xc33, 0x800, 0x1]}}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0xc, 0x24]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x24, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x1, 0xfff, 0xfc, 0xa5, 0x6, 0x1, 0xfffa]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x9, 0x81, 0x7ff, 0x57b4, 0x7, 0x395c, 0xa9a8]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x1b, 0x0, 0x60, 0x18, 0x12, 0x1, 0x30, 0x16, 0x6, 0x9, 0x9, 0x9, 0x1b, 0x5, 0x12, 0xb, 0x3]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x6c, 0x36]}]}, @NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xfffc, 0x6, 0xff, 0x0, 0x6, 0x6, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x7, 0x8, 0x1, 0xfff, 0x2, 0xffff, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x2, 0x3}, {0x1, 0x6}, {0x7, 0x7}, {0x5}, {0x4, 0xa}, {0x4, 0x9}, {0x0, 0x8}, {0x7, 0x1}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x2}, {0x1, 0x8}, {0x1, 0x4}, {0x0, 0x4}, {0x7, 0x9}, {0x5, 0x2}, {0x2, 0x5}, {0x2, 0x5}, {0x7, 0x3}, {0x6}, {0x0, 0x2}, {0x6, 0x8}, {0x0, 0x2}, {0x1, 0x1}, {0x0, 0x5}, {0x2, 0x9}, {0x3, 0xa}, {0x6, 0x1}, {0x1, 0xa}, {0x1, 0x5}, {0x2, 0xa}, {0x2}, {0x5, 0x1}, {0x0, 0x9}, {0x7, 0x2}, {0x1, 0xa}, {0x1, 0x2}, {0x0, 0x5}]}]}]}, @NL80211_ATTR_TX_RATES={0xac, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xd3, 0x1c23, 0xff, 0x5, 0x2, 0x9, 0x4]}}]}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x3ff, 0x0, 0x7, 0x7ff, 0x8, 0x40, 0x400]}}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x2, 0x1}, {0x7, 0x8}, {0x5, 0x4}, {0x0, 0x8}, {0x0, 0x7}, {0x0, 0x7}, {0x4, 0x2}, {0x3, 0x3}, {0x7, 0x8}, {0x4, 0xa}, {0x2, 0x6}, {0x7, 0x8}, {0x5, 0x7}, {0x0, 0x2}, {0x4, 0xa}, {0x0, 0x8}, {0x0, 0x1}, {0x3, 0x3}, {0x2, 0x7}, {0x4}, {0x7, 0x6}, {0x3, 0xa}, {0x2, 0x2}, {0x6, 0x2}, {0x1, 0x1}, {0x0, 0x2}, {0x6, 0xa}, {0x2, 0x6}, {0x6, 0xa}, {0x3, 0x1}, {0x5, 0x3}, {0x1}, {0x0, 0x3}, {0x1, 0x2}, {0x1, 0x9}, {0x5, 0x9}, {0x3, 0x7}, {0x5, 0x4}, {0x2, 0x4}, {0x1, 0xa}, {0x1}, {0x7, 0x2}, {0x7, 0x1}, {0x6, 0x4}, {0x5, 0x7}, {0x2, 0x9}, {0x1, 0x4}, {0x7, 0x4}, {0x3, 0x2}, {0x6, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x53be, 0x40, 0x358, 0x401, 0x0, 0x0, 0xfffc]}}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x7, 0x7}, {0x5, 0x1e}, {0x0, 0x7}, {0x0, 0x6}, {0x6, 0x8}, {0x5, 0xa}, {0x3, 0x5}]}]}]}]}, 0x88c}, 0x1, 0x0, 0x0, 0x50}, 0x810) (rerun: 64) [ 506.949757] netlink: 364 bytes leftover after parsing attributes in process `syz-executor.3'. 17:36:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0xa}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:36:03 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc)=0x1, 0xa, 0x2, 0x0, 0x0, 0x80) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0xa}]}}}]}, 0x3c}}, 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 17:36:03 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x206b00) [ 507.133040] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 507.162136] attempt to access beyond end of device [ 507.165056] hfs: part requires an argument [ 507.177157] loop1: rw=1, want=16, limit=15 [ 507.180432] hfs: unable to parse mount options [ 507.184399] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 507.196484] Buffer I/O error on dev loop1, logical block 15, lost async page write [ 507.211930] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 507.218893] attempt to access beyond end of device [ 507.225925] loop1: rw=1, want=128, limit=15 17:36:03 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x9, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:03 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x206d00) 17:36:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0xc}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:36:03 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x1, 0xa, 0x2, 0x0, 0x0, 0x80) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0xa}]}}}]}, 0x3c}}, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc)=0x1, 0xa, 0x2, 0x0, 0x0, 0x80) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0xa}]}}}]}, 0x3c}}, 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) [ 507.377712] attempt to access beyond end of device [ 507.384390] loop1: rw=1, want=16, limit=15 [ 507.401523] attempt to access beyond end of device [ 507.415282] hfs: part requires an argument [ 507.428252] loop1: rw=1, want=128, limit=15 [ 507.441343] hfs: unable to parse mount options [ 507.487950] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 507.516488] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 17:36:04 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x10, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) [ 507.532928] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 17:36:04 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x206e00) [ 507.642357] attempt to access beyond end of device [ 507.647329] loop1: rw=1, want=16, limit=15 [ 507.664770] hfs: part requires an argument [ 507.675921] hfs: unable to parse mount options [ 507.678005] attempt to access beyond end of device [ 507.690954] loop1: rw=1, want=128, limit=15 17:36:04 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f0000000000), 0x0, 0x2, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000080), 0x2) 17:36:04 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x2, &(0x7f0000000040)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x2}], &(0x7f0000000080)='syzkaller\x00', 0x3f, 0x8c, &(0x7f0000000140)=""/140, 0x41000, 0x1f, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xc, 0x0, 0xe6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x8, 0xa0, 0x3, 0x4, 0x0, 0xf9b, 0x10000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000600), 0x4}, 0x80, 0xbd, 0x1000, 0x8, 0x0, 0xdac0, 0x7, 0x0, 0xff, 0x0, 0x3}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x3) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r3, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=ANY=[@ANYBLOB="7288b4cfb7387823c7f32dbb5ee594129744739de6ec4f4f173e5d1135a9a65c1ec1f1e313f5afe58af3b3d9ea79e907b9c3780b70c91637736f59a31dc7c95072f3e18e9c7f2ae44a8c2aff1f4bcb3ea7bd8fc1c5eb5bf39da91a8bc3797b095ed85853e3f0f83a7b3cdf0daf046c094361c98a46dbf0c48e0a90e2b0a8227dc39a9e4678a17f4b286cd3931ca1e9e1a6593ab0beee905af45b20e4712f8a11431daf33adecc77bb96f9305a0123a4f7b333b9353aa464b673ae0bc856d15dcfe6ebf40365dc75604ab17b57d46f65137eacf434c0e6f8621251acd18d6d81f00"/238, @ANYRES16=r5, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) r6 = syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x101, 0x8, &(0x7f0000000400)=[{&(0x7f0000000080)="96fe6d00f6ab9a5a57b777fa1c76bcabba9acf83d4ab3577ae698dd3a767ec49bfeefd127718ee631e53c7b7178ecc67b73f901b24d49ba1875ee7cde0949b46d9e32501f7e65673cf1c1b61ac3ee2", 0x4f, 0x133b}, {&(0x7f0000000100)="95d3bd4283565c7e173d5f101e8d232d3f5984eaa5ed180a2319ab1710226b7ece51b0845af3ce2cb03d91fc3b02321b01c894611e482ccf6fa2eed20aea2a6550cf86fa15a7a4f50c040895bf6265be5d089d69a7e8fe6c4359d33aeab4782e33cd4195eb945b868a80d445f5d05432e98a8ceaf26f0d6b632ebb5a5ab9ddd742e36c5b11bd3aef0f1c20b87355edef9da035d3c026187782", 0x99, 0x81}, {&(0x7f00000001c0)="445cf6258d25f5e95cfdc515364bce04d3bf8e425f69d416a208993c0acbc234174131df0018f9b31da8817021985e5bad", 0x31, 0xdd9}, {&(0x7f0000000200)="38022e367a3f94f97705ed57704985bcd9464e2f99", 0x15, 0x1}, {&(0x7f0000000240)="b60e567a6a62f4b97a90d8d2752a401349d45a6a4163e04b1f9d297a6205ad62deca8cd8b0f30a20bf530df5ef10ff986434ef1a39a55c3b1151c4def398420f6fdb7aaf7664f1fd9960af84d2a38187aee8f71efcf0d95d7b0c8f94600951af", 0x60}, {&(0x7f00000002c0)="ba2911fbcd7e780f328eff792c4cff89f1a64f1975010b0e15a0ff8ee0afada6ec127db55d238844fda04d1d50afe736456c5c6918a467c2", 0x38, 0x1}, {&(0x7f0000000300)="158fd3d98451512895710c78dccb235408f6a1b02327c4f88827b404cba24996bc121e60c97b49e8c7fcc5c5b20c5b6f44104fc8068ba0bd54d2fd8896bf2dfc8b7e9634137c70c492305974a4", 0x4d, 0x200}, {&(0x7f0000000380)="155711942cb6195e7ffcdbe3f7109616d4fcebff93c991ceb6050215c4baab3174ac4f8e21e4dbe2cda805a0b9124ad9f3449166abc49b5ff142a4c713125ee8766a9cc156c83e287f59c4b6db2cba23df325879", 0x54, 0x9}], 0x2140034, &(0x7f00000004c0)={[{@gid_ignore}], [{@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r8, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x3024}, {r1, 0x8141}, {0xffffffffffffffff, 0x8647}, {r4, 0x4}, {r2, 0x281}, {0xffffffffffffffff, 0xa560}, {0xffffffffffffffff, 0x308}, {r4, 0x6404}, {r2, 0x20}, {r7, 0x2200}, {r6, 0x5010}], 0xb, &(0x7f0000000580), &(0x7f00000005c0)={[0x3]}, 0x8) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 17:36:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0xe}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:36:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB='\x00'/14], 0x14}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) sendmsg$NL80211_CMD_STOP_NAN(r3, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x20, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6e}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x55f10fff01ecb9ed) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000001500)={r0, 0x4, 0x7fffffff, 0x9}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r6, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$IMCTRLREQ(r3, 0x80044945, &(0x7f0000001680)={0x1, 0x4, 0x1, 0x6}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x400}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)={0x50, r6, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}, @key_params=[@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "e8dbd1c3314ad0ce1abf2372bc"}]]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0xb4, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x23d}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3d}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f00000013c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001380)={&(0x7f0000000340)={0x1034, r11, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x38}}}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x1004, 0xac, "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"}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}]}, 0x1034}, 0x1, 0x0, 0x0, 0x20000044}, 0xd49bbc1292397d03) 17:36:04 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x48, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:04 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x207000) [ 507.827800] attempt to access beyond end of device [ 507.838574] loop1: rw=1, want=16, limit=15 [ 507.845087] attempt to access beyond end of device [ 507.850191] loop1: rw=1, want=128, limit=15 [ 507.925247] hfs: part requires an argument [ 507.940959] hfs: unable to parse mount options [ 507.955994] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 17:36:04 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x4c, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:04 executing program 0: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000e40)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x23, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000500000009088575e3e7144c86e7000000000000"], &(0x7f0000000300)='GPL\x00', 0xffffff01, 0x1, &(0x7f0000000380)=""/1, 0x0, 0x1e, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x84, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x3, 0x4, 0x80, 0x2}, 0x10, r0, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x15, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xe1, &(0x7f0000000340)=""/225, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000cf134000ffffffff95174b1d1c515fac6161fb"], &(0x7f0000000040)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x0, 0x4, 0x1, 0x1}, 0x10, r0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r1, 0x1, 0xffffffffffffffff, r2, 0xffffffffffffffff]}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r3, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r4, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r5, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x2, &(0x7f0000000040)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x2}], &(0x7f0000000080)='syzkaller\x00', 0x3f, 0x8c, &(0x7f0000000140)=""/140, 0x41000, 0x1f, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xc, 0x0, 0xe6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[r3, 0x1, r4, r5, 0xffffffffffffffff]}, 0x80) ioctl$EVIOCGBITSND(r3, 0x80404532, &(0x7f0000000000)=""/190) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) [ 507.976785] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 508.001863] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 17:36:04 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x207100) [ 508.062164] attempt to access beyond end of device [ 508.066897] netlink: 364 bytes leftover after parsing attributes in process `syz-executor.3'. [ 508.067626] loop1: rw=1, want=16, limit=15 [ 508.097947] netlink: 364 bytes leftover after parsing attributes in process `syz-executor.4'. [ 508.108318] hfs: part requires an argument 17:36:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x10}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:36:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB='\x00'/14], 0x14}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) sendmsg$NL80211_CMD_STOP_NAN(r3, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x20, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6e}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x55f10fff01ecb9ed) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000001500)={r0, 0x4, 0x7fffffff, 0x9}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r6, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$IMCTRLREQ(r3, 0x80044945, &(0x7f0000001680)={0x1, 0x4, 0x1, 0x6}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x400}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)={0x50, r6, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}, @key_params=[@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "e8dbd1c3314ad0ce1abf2372bc"}]]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0xb4, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x23d}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3d}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f00000013c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001380)={&(0x7f0000000340)={0x1034, r11, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x38}}}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x1004, 0xac, "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"}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}]}, 0x1034}, 0x1, 0x0, 0x0, 0x20000044}, 0xd49bbc1292397d03) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB='\x00'/14], 0x14}}, 0x0) (async) pipe2(&(0x7f0000000040), 0x80800) (async) sendmsg$NL80211_CMD_STOP_NAN(r3, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x20, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6e}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x55f10fff01ecb9ed) (async) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000001500)={r0, 0x4, 0x7fffffff, 0x9}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r6, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$IMCTRLREQ(r3, 0x80044945, &(0x7f0000001680)={0x1, 0x4, 0x1, 0x6}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x400}]}, 0x2c}}, 0x0) (async) sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)={0x50, r6, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}, @key_params=[@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "e8dbd1c3314ad0ce1abf2372bc"}]]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x40) (async) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0xb4, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x23d}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3d}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) (async) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f00000013c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001380)={&(0x7f0000000340)={0x1034, r11, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x38}}}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x1004, 0xac, "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"}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}]}, 0x1034}, 0x1, 0x0, 0x0, 0x20000044}, 0xd49bbc1292397d03) (async) [ 508.116961] attempt to access beyond end of device [ 508.118130] hfs: unable to parse mount options [ 508.156734] loop1: rw=1, want=128, limit=15 17:36:04 executing program 0: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000e40)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x23, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000500000009088575e3e7144c86e7000000000000"], &(0x7f0000000300)='GPL\x00', 0xffffff01, 0x1, &(0x7f0000000380)=""/1, 0x0, 0x1e, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x84, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x3, 0x4, 0x80, 0x2}, 0x10, r0, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x15, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xe1, &(0x7f0000000340)=""/225, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000cf134000ffffffff95174b1d1c515fac6161fb"], &(0x7f0000000040)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x0, 0x4, 0x1, 0x1}, 0x10, r0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r1, 0x1, 0xffffffffffffffff, r2, 0xffffffffffffffff]}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r3, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r4, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r5, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x2, &(0x7f0000000040)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x2}], &(0x7f0000000080)='syzkaller\x00', 0x3f, 0x8c, &(0x7f0000000140)=""/140, 0x41000, 0x1f, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xc, 0x0, 0xe6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[r3, 0x1, r4, r5, 0xffffffffffffffff]}, 0x80) ioctl$EVIOCGBITSND(r3, 0x80404532, &(0x7f0000000000)=""/190) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000e40), 0x8) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r0, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x23, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000500000009088575e3e7144c86e7000000000000"], &(0x7f0000000300)='GPL\x00', 0xffffff01, 0x1, &(0x7f0000000380)=""/1, 0x0, 0x1e, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x84, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x3, 0x4, 0x80, 0x2}, 0x10, r0, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x15, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xe1, &(0x7f0000000340)=""/225, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000cf134000ffffffff95174b1d1c515fac6161fb"], &(0x7f0000000040)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x0, 0x4, 0x1, 0x1}, 0x10, r0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r1, 0x1, 0xffffffffffffffff, r2, 0xffffffffffffffff]}, 0x80) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async) openat$cgroup(r3, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async) openat$cgroup(r4, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async) openat$cgroup(r5, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x2, &(0x7f0000000040)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x2}], &(0x7f0000000080)='syzkaller\x00', 0x3f, 0x8c, &(0x7f0000000140)=""/140, 0x41000, 0x1f, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xc, 0x0, 0xe6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[r3, 0x1, r4, r5, 0xffffffffffffffff]}, 0x80) (async) ioctl$EVIOCGBITSND(r3, 0x80404532, &(0x7f0000000000)=""/190) (async) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) [ 508.179581] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 508.190349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 508.198507] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 17:36:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x60}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) [ 508.222434] netlink: 364 bytes leftover after parsing attributes in process `syz-executor.3'. [ 508.254505] netlink: 364 bytes leftover after parsing attributes in process `syz-executor.4'. 17:36:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB='\x00'/14], 0x14}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) sendmsg$NL80211_CMD_STOP_NAN(r3, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x20, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6e}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x55f10fff01ecb9ed) (async) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000001500)={r0, 0x4, 0x7fffffff, 0x9}) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r6, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$IMCTRLREQ(r3, 0x80044945, &(0x7f0000001680)={0x1, 0x4, 0x1, 0x6}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x400}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)={0x50, r6, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}, @key_params=[@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "e8dbd1c3314ad0ce1abf2372bc"}]]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x40) (async) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0xb4, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x23d}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3d}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f00000013c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001380)={&(0x7f0000000340)={0x1034, r11, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x38}}}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x1004, 0xac, "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"}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}]}, 0x1034}, 0x1, 0x0, 0x0, 0x20000044}, 0xd49bbc1292397d03) 17:36:04 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x2, &(0x7f0000000040)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x2}], &(0x7f0000000080)='syzkaller\x00', 0x3f, 0x8c, &(0x7f0000000140)=""/140, 0x41000, 0x1f, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xc, 0x0, 0xe6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x8, 0xa0, 0x3, 0x4, 0x0, 0xf9b, 0x10000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000600), 0x4}, 0x80, 0xbd, 0x1000, 0x8, 0x0, 0xdac0, 0x7, 0x0, 0xff, 0x0, 0x3}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x3) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r3, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=ANY=[@ANYBLOB="7288b4cfb7387823c7f32dbb5ee594129744739de6ec4f4f173e5d1135a9a65c1ec1f1e313f5afe58af3b3d9ea79e907b9c3780b70c91637736f59a31dc7c95072f3e18e9c7f2ae44a8c2aff1f4bcb3ea7bd8fc1c5eb5bf39da91a8bc3797b095ed85853e3f0f83a7b3cdf0daf046c094361c98a46dbf0c48e0a90e2b0a8227dc39a9e4678a17f4b286cd3931ca1e9e1a6593ab0beee905af45b20e4712f8a11431daf33adecc77bb96f9305a0123a4f7b333b9353aa464b673ae0bc856d15dcfe6ebf40365dc75604ab17b57d46f65137eacf434c0e6f8621251acd18d6d81f00"/238, @ANYRES16=r5, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) r6 = syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x101, 0x8, &(0x7f0000000400)=[{&(0x7f0000000080)="96fe6d00f6ab9a5a57b777fa1c76bcabba9acf83d4ab3577ae698dd3a767ec49bfeefd127718ee631e53c7b7178ecc67b73f901b24d49ba1875ee7cde0949b46d9e32501f7e65673cf1c1b61ac3ee2", 0x4f, 0x133b}, {&(0x7f0000000100)="95d3bd4283565c7e173d5f101e8d232d3f5984eaa5ed180a2319ab1710226b7ece51b0845af3ce2cb03d91fc3b02321b01c894611e482ccf6fa2eed20aea2a6550cf86fa15a7a4f50c040895bf6265be5d089d69a7e8fe6c4359d33aeab4782e33cd4195eb945b868a80d445f5d05432e98a8ceaf26f0d6b632ebb5a5ab9ddd742e36c5b11bd3aef0f1c20b87355edef9da035d3c026187782", 0x99, 0x81}, {&(0x7f00000001c0)="445cf6258d25f5e95cfdc515364bce04d3bf8e425f69d416a208993c0acbc234174131df0018f9b31da8817021985e5bad", 0x31, 0xdd9}, {&(0x7f0000000200)="38022e367a3f94f97705ed57704985bcd9464e2f99", 0x15, 0x1}, {&(0x7f0000000240)="b60e567a6a62f4b97a90d8d2752a401349d45a6a4163e04b1f9d297a6205ad62deca8cd8b0f30a20bf530df5ef10ff986434ef1a39a55c3b1151c4def398420f6fdb7aaf7664f1fd9960af84d2a38187aee8f71efcf0d95d7b0c8f94600951af", 0x60}, {&(0x7f00000002c0)="ba2911fbcd7e780f328eff792c4cff89f1a64f1975010b0e15a0ff8ee0afada6ec127db55d238844fda04d1d50afe736456c5c6918a467c2", 0x38, 0x1}, {&(0x7f0000000300)="158fd3d98451512895710c78dccb235408f6a1b02327c4f88827b404cba24996bc121e60c97b49e8c7fcc5c5b20c5b6f44104fc8068ba0bd54d2fd8896bf2dfc8b7e9634137c70c492305974a4", 0x4d, 0x200}, {&(0x7f0000000380)="155711942cb6195e7ffcdbe3f7109616d4fcebff93c991ceb6050215c4baab3174ac4f8e21e4dbe2cda805a0b9124ad9f3449166abc49b5ff142a4c713125ee8766a9cc156c83e287f59c4b6db2cba23df325879", 0x54, 0x9}], 0x2140034, &(0x7f00000004c0)={[{@gid_ignore}], [{@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r8, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x3024}, {r1, 0x8141}, {0xffffffffffffffff, 0x8647}, {r4, 0x4}, {r2, 0x281}, {0xffffffffffffffff, 0xa560}, {0xffffffffffffffff, 0x308}, {r4, 0x6404}, {r2, 0x20}, {r7, 0x2200}, {r6, 0x5010}], 0xb, &(0x7f0000000580), &(0x7f00000005c0)={[0x3]}, 0x8) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x2, &(0x7f0000000040)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x2}], &(0x7f0000000080)='syzkaller\x00', 0x3f, 0x8c, &(0x7f0000000140)=""/140, 0x41000, 0x1f, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xc, 0x0, 0xe6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x8, 0xa0, 0x3, 0x4, 0x0, 0xf9b, 0x10000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000600), 0x4}, 0x80, 0xbd, 0x1000, 0x8, 0x0, 0xdac0, 0x7, 0x0, 0xff, 0x0, 0x3}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x3) (async) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r3, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=ANY=[@ANYBLOB="7288b4cfb7387823c7f32dbb5ee594129744739de6ec4f4f173e5d1135a9a65c1ec1f1e313f5afe58af3b3d9ea79e907b9c3780b70c91637736f59a31dc7c95072f3e18e9c7f2ae44a8c2aff1f4bcb3ea7bd8fc1c5eb5bf39da91a8bc3797b095ed85853e3f0f83a7b3cdf0daf046c094361c98a46dbf0c48e0a90e2b0a8227dc39a9e4678a17f4b286cd3931ca1e9e1a6593ab0beee905af45b20e4712f8a11431daf33adecc77bb96f9305a0123a4f7b333b9353aa464b673ae0bc856d15dcfe6ebf40365dc75604ab17b57d46f65137eacf434c0e6f8621251acd18d6d81f00"/238, @ANYRES16=r5, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) (async) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x101, 0x8, &(0x7f0000000400)=[{&(0x7f0000000080)="96fe6d00f6ab9a5a57b777fa1c76bcabba9acf83d4ab3577ae698dd3a767ec49bfeefd127718ee631e53c7b7178ecc67b73f901b24d49ba1875ee7cde0949b46d9e32501f7e65673cf1c1b61ac3ee2", 0x4f, 0x133b}, {&(0x7f0000000100)="95d3bd4283565c7e173d5f101e8d232d3f5984eaa5ed180a2319ab1710226b7ece51b0845af3ce2cb03d91fc3b02321b01c894611e482ccf6fa2eed20aea2a6550cf86fa15a7a4f50c040895bf6265be5d089d69a7e8fe6c4359d33aeab4782e33cd4195eb945b868a80d445f5d05432e98a8ceaf26f0d6b632ebb5a5ab9ddd742e36c5b11bd3aef0f1c20b87355edef9da035d3c026187782", 0x99, 0x81}, {&(0x7f00000001c0)="445cf6258d25f5e95cfdc515364bce04d3bf8e425f69d416a208993c0acbc234174131df0018f9b31da8817021985e5bad", 0x31, 0xdd9}, {&(0x7f0000000200)="38022e367a3f94f97705ed57704985bcd9464e2f99", 0x15, 0x1}, {&(0x7f0000000240)="b60e567a6a62f4b97a90d8d2752a401349d45a6a4163e04b1f9d297a6205ad62deca8cd8b0f30a20bf530df5ef10ff986434ef1a39a55c3b1151c4def398420f6fdb7aaf7664f1fd9960af84d2a38187aee8f71efcf0d95d7b0c8f94600951af", 0x60}, {&(0x7f00000002c0)="ba2911fbcd7e780f328eff792c4cff89f1a64f1975010b0e15a0ff8ee0afada6ec127db55d238844fda04d1d50afe736456c5c6918a467c2", 0x38, 0x1}, {&(0x7f0000000300)="158fd3d98451512895710c78dccb235408f6a1b02327c4f88827b404cba24996bc121e60c97b49e8c7fcc5c5b20c5b6f44104fc8068ba0bd54d2fd8896bf2dfc8b7e9634137c70c492305974a4", 0x4d, 0x200}, {&(0x7f0000000380)="155711942cb6195e7ffcdbe3f7109616d4fcebff93c991ceb6050215c4baab3174ac4f8e21e4dbe2cda805a0b9124ad9f3449166abc49b5ff142a4c713125ee8766a9cc156c83e287f59c4b6db2cba23df325879", 0x54, 0x9}], 0x2140034, &(0x7f00000004c0)={[{@gid_ignore}], [{@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}]}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r8, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) (async) ppoll(&(0x7f0000000680)=[{r0, 0x3024}, {r1, 0x8141}, {0xffffffffffffffff, 0x8647}, {r4, 0x4}, {r2, 0x281}, {0xffffffffffffffff, 0xa560}, {0xffffffffffffffff, 0x308}, {r4, 0x6404}, {r2, 0x20}, {r7, 0x2200}, {r6, 0x5010}], 0xb, &(0x7f0000000580), &(0x7f00000005c0)={[0x3]}, 0x8) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) 17:36:04 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x60, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:05 executing program 0: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000e40)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r0, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x23, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000500000009088575e3e7144c86e7000000000000"], &(0x7f0000000300)='GPL\x00', 0xffffff01, 0x1, &(0x7f0000000380)=""/1, 0x0, 0x1e, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x84, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x3, 0x4, 0x80, 0x2}, 0x10, r0, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x15, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xe1, &(0x7f0000000340)=""/225, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async, rerun: 32) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000cf134000ffffffff95174b1d1c515fac6161fb"], &(0x7f0000000040)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x0, 0x4, 0x1, 0x1}, 0x10, r0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r1, 0x1, 0xffffffffffffffff, r2, 0xffffffffffffffff]}, 0x80) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r3, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r4, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r5, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x2, &(0x7f0000000040)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x2}], &(0x7f0000000080)='syzkaller\x00', 0x3f, 0x8c, &(0x7f0000000140)=""/140, 0x41000, 0x1f, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xc, 0x0, 0xe6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[r3, 0x1, r4, r5, 0xffffffffffffffff]}, 0x80) (async) ioctl$EVIOCGBITSND(r3, 0x80404532, &(0x7f0000000000)=""/190) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async, rerun: 32) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async, rerun: 32) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 17:36:05 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x207300) 17:36:05 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x68, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) [ 508.449196] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 508.466692] attempt to access beyond end of device [ 508.472708] loop1: rw=1, want=16, limit=15 [ 508.478427] attempt to access beyond end of device [ 508.493465] loop1: rw=1, want=128, limit=15 [ 508.509640] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 508.532156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 17:36:05 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x6c, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:05 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x207400) 17:36:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) [ 508.776863] netlink: 364 bytes leftover after parsing attributes in process `syz-executor.4'. [ 508.823840] attempt to access beyond end of device [ 508.828847] loop1: rw=1, want=16, limit=15 17:36:05 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x74, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:05 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x2, &(0x7f0000000040)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x2}], &(0x7f0000000080)='syzkaller\x00', 0x3f, 0x8c, &(0x7f0000000140)=""/140, 0x41000, 0x1f, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xc, 0x0, 0xe6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x8, 0xa0, 0x3, 0x4, 0x0, 0xf9b, 0x10000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000600), 0x4}, 0x80, 0xbd, 0x1000, 0x8, 0x0, 0xdac0, 0x7, 0x0, 0xff, 0x0, 0x3}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x3) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r3, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=ANY=[@ANYBLOB="7288b4cfb7387823c7f32dbb5ee594129744739de6ec4f4f173e5d1135a9a65c1ec1f1e313f5afe58af3b3d9ea79e907b9c3780b70c91637736f59a31dc7c95072f3e18e9c7f2ae44a8c2aff1f4bcb3ea7bd8fc1c5eb5bf39da91a8bc3797b095ed85853e3f0f83a7b3cdf0daf046c094361c98a46dbf0c48e0a90e2b0a8227dc39a9e4678a17f4b286cd3931ca1e9e1a6593ab0beee905af45b20e4712f8a11431daf33adecc77bb96f9305a0123a4f7b333b9353aa464b673ae0bc856d15dcfe6ebf40365dc75604ab17b57d46f65137eacf434c0e6f8621251acd18d6d81f00"/238, @ANYRES16=r5, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) r6 = syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x101, 0x8, &(0x7f0000000400)=[{&(0x7f0000000080)="96fe6d00f6ab9a5a57b777fa1c76bcabba9acf83d4ab3577ae698dd3a767ec49bfeefd127718ee631e53c7b7178ecc67b73f901b24d49ba1875ee7cde0949b46d9e32501f7e65673cf1c1b61ac3ee2", 0x4f, 0x133b}, {&(0x7f0000000100)="95d3bd4283565c7e173d5f101e8d232d3f5984eaa5ed180a2319ab1710226b7ece51b0845af3ce2cb03d91fc3b02321b01c894611e482ccf6fa2eed20aea2a6550cf86fa15a7a4f50c040895bf6265be5d089d69a7e8fe6c4359d33aeab4782e33cd4195eb945b868a80d445f5d05432e98a8ceaf26f0d6b632ebb5a5ab9ddd742e36c5b11bd3aef0f1c20b87355edef9da035d3c026187782", 0x99, 0x81}, {&(0x7f00000001c0)="445cf6258d25f5e95cfdc515364bce04d3bf8e425f69d416a208993c0acbc234174131df0018f9b31da8817021985e5bad", 0x31, 0xdd9}, {&(0x7f0000000200)="38022e367a3f94f97705ed57704985bcd9464e2f99", 0x15, 0x1}, {&(0x7f0000000240)="b60e567a6a62f4b97a90d8d2752a401349d45a6a4163e04b1f9d297a6205ad62deca8cd8b0f30a20bf530df5ef10ff986434ef1a39a55c3b1151c4def398420f6fdb7aaf7664f1fd9960af84d2a38187aee8f71efcf0d95d7b0c8f94600951af", 0x60}, {&(0x7f00000002c0)="ba2911fbcd7e780f328eff792c4cff89f1a64f1975010b0e15a0ff8ee0afada6ec127db55d238844fda04d1d50afe736456c5c6918a467c2", 0x38, 0x1}, {&(0x7f0000000300)="158fd3d98451512895710c78dccb235408f6a1b02327c4f88827b404cba24996bc121e60c97b49e8c7fcc5c5b20c5b6f44104fc8068ba0bd54d2fd8896bf2dfc8b7e9634137c70c492305974a4", 0x4d, 0x200}, {&(0x7f0000000380)="155711942cb6195e7ffcdbe3f7109616d4fcebff93c991ceb6050215c4baab3174ac4f8e21e4dbe2cda805a0b9124ad9f3449166abc49b5ff142a4c713125ee8766a9cc156c83e287f59c4b6db2cba23df325879", 0x54, 0x9}], 0x2140034, &(0x7f00000004c0)={[{@gid_ignore}], [{@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r8, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x3024}, {r1, 0x8141}, {0xffffffffffffffff, 0x8647}, {r4, 0x4}, {r2, 0x281}, {0xffffffffffffffff, 0xa560}, {0xffffffffffffffff, 0x308}, {r4, 0x6404}, {r2, 0x20}, {r7, 0x2200}, {r6, 0x5010}], 0xb, &(0x7f0000000580), &(0x7f00000005c0)={[0x3]}, 0x8) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x2, &(0x7f0000000040)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x2}], &(0x7f0000000080)='syzkaller\x00', 0x3f, 0x8c, &(0x7f0000000140)=""/140, 0x41000, 0x1f, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xc, 0x0, 0xe6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x8, 0xa0, 0x3, 0x4, 0x0, 0xf9b, 0x10000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000600), 0x4}, 0x80, 0xbd, 0x1000, 0x8, 0x0, 0xdac0, 0x7, 0x0, 0xff, 0x0, 0x3}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x3) (async) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r3, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=ANY=[@ANYBLOB="7288b4cfb7387823c7f32dbb5ee594129744739de6ec4f4f173e5d1135a9a65c1ec1f1e313f5afe58af3b3d9ea79e907b9c3780b70c91637736f59a31dc7c95072f3e18e9c7f2ae44a8c2aff1f4bcb3ea7bd8fc1c5eb5bf39da91a8bc3797b095ed85853e3f0f83a7b3cdf0daf046c094361c98a46dbf0c48e0a90e2b0a8227dc39a9e4678a17f4b286cd3931ca1e9e1a6593ab0beee905af45b20e4712f8a11431daf33adecc77bb96f9305a0123a4f7b333b9353aa464b673ae0bc856d15dcfe6ebf40365dc75604ab17b57d46f65137eacf434c0e6f8621251acd18d6d81f00"/238, @ANYRES16=r5, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) (async) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x101, 0x8, &(0x7f0000000400)=[{&(0x7f0000000080)="96fe6d00f6ab9a5a57b777fa1c76bcabba9acf83d4ab3577ae698dd3a767ec49bfeefd127718ee631e53c7b7178ecc67b73f901b24d49ba1875ee7cde0949b46d9e32501f7e65673cf1c1b61ac3ee2", 0x4f, 0x133b}, {&(0x7f0000000100)="95d3bd4283565c7e173d5f101e8d232d3f5984eaa5ed180a2319ab1710226b7ece51b0845af3ce2cb03d91fc3b02321b01c894611e482ccf6fa2eed20aea2a6550cf86fa15a7a4f50c040895bf6265be5d089d69a7e8fe6c4359d33aeab4782e33cd4195eb945b868a80d445f5d05432e98a8ceaf26f0d6b632ebb5a5ab9ddd742e36c5b11bd3aef0f1c20b87355edef9da035d3c026187782", 0x99, 0x81}, {&(0x7f00000001c0)="445cf6258d25f5e95cfdc515364bce04d3bf8e425f69d416a208993c0acbc234174131df0018f9b31da8817021985e5bad", 0x31, 0xdd9}, {&(0x7f0000000200)="38022e367a3f94f97705ed57704985bcd9464e2f99", 0x15, 0x1}, {&(0x7f0000000240)="b60e567a6a62f4b97a90d8d2752a401349d45a6a4163e04b1f9d297a6205ad62deca8cd8b0f30a20bf530df5ef10ff986434ef1a39a55c3b1151c4def398420f6fdb7aaf7664f1fd9960af84d2a38187aee8f71efcf0d95d7b0c8f94600951af", 0x60}, {&(0x7f00000002c0)="ba2911fbcd7e780f328eff792c4cff89f1a64f1975010b0e15a0ff8ee0afada6ec127db55d238844fda04d1d50afe736456c5c6918a467c2", 0x38, 0x1}, {&(0x7f0000000300)="158fd3d98451512895710c78dccb235408f6a1b02327c4f88827b404cba24996bc121e60c97b49e8c7fcc5c5b20c5b6f44104fc8068ba0bd54d2fd8896bf2dfc8b7e9634137c70c492305974a4", 0x4d, 0x200}, {&(0x7f0000000380)="155711942cb6195e7ffcdbe3f7109616d4fcebff93c991ceb6050215c4baab3174ac4f8e21e4dbe2cda805a0b9124ad9f3449166abc49b5ff142a4c713125ee8766a9cc156c83e287f59c4b6db2cba23df325879", 0x54, 0x9}], 0x2140034, &(0x7f00000004c0)={[{@gid_ignore}], [{@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}]}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r8, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) (async) ppoll(&(0x7f0000000680)=[{r0, 0x3024}, {r1, 0x8141}, {0xffffffffffffffff, 0x8647}, {r4, 0x4}, {r2, 0x281}, {0xffffffffffffffff, 0xa560}, {0xffffffffffffffff, 0x308}, {r4, 0x6404}, {r2, 0x20}, {r7, 0x2200}, {r6, 0x5010}], 0xb, &(0x7f0000000580), &(0x7f00000005c0)={[0x3]}, 0x8) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) 17:36:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x98, r1, 0xc266a4723dd56b93, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0xe4e545d4bdd18c79}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8001}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffa}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_L_THRESH={0x36, 0x6, 0xffffffff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x800}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}]}, 0x98}, 0x1, 0x0, 0x0, 0x48800}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r3, 0xc266a4723dd56b93}, 0x14}}, 0x0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x50200000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x68, r3, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x39}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r2) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x93}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x61}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000800) [ 508.864121] buffer_io_error: 5 callbacks suppressed [ 508.864130] Buffer I/O error on dev loop1, logical block 15, lost async page write [ 508.880178] attempt to access beyond end of device [ 508.886464] loop1: rw=1, want=128, limit=15 17:36:05 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x7a, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x98, r1, 0xc266a4723dd56b93, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0xe4e545d4bdd18c79}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8001}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffa}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_L_THRESH={0x36, 0x6, 0xffffffff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x800}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}]}, 0x98}, 0x1, 0x0, 0x0, 0x48800}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r3, 0xc266a4723dd56b93}, 0x14}}, 0x0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x50200000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x68, r3, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x39}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r2) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x93}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x61}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000800) [ 509.042023] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 17:36:05 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x207600) [ 509.114609] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 509.137461] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 509.154849] attempt to access beyond end of device [ 509.159821] loop1: rw=1, want=16, limit=15 [ 509.176195] Buffer I/O error on dev loop1, logical block 15, lost async page write [ 509.193223] attempt to access beyond end of device [ 509.198634] loop1: rw=1, want=128, limit=15 17:36:05 executing program 0: futex(&(0x7f000000cffc)=0x1, 0x100, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x80001) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 17:36:05 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0xe0, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x2}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:36:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x98, r1, 0xc266a4723dd56b93, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0xe4e545d4bdd18c79}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8001}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffa}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_L_THRESH={0x36, 0x6, 0xffffffff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x800}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}]}, 0x98}, 0x1, 0x0, 0x0, 0x48800}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r3, 0xc266a4723dd56b93}, 0x14}}, 0x0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x50200000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x68, r3, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x39}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r2) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x93}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x61}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000800) 17:36:05 executing program 4: futex(&(0x7f0000000000)=0x1, 0x80000000000b, 0xfffe, 0x0, &(0x7f0000048000), 0xfffffffc) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) [ 509.281034] nla_parse: 1 callbacks suppressed [ 509.281044] netlink: 364 bytes leftover after parsing attributes in process `syz-executor.4'. [ 509.301872] netlink: 364 bytes leftover after parsing attributes in process `syz-executor.4'. 17:36:05 executing program 0: futex(&(0x7f000000cffc)=0x1, 0x100, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x80001) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 17:36:05 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x207700) [ 509.429170] attempt to access beyond end of device [ 509.434470] loop1: rw=1, want=16, limit=15 [ 509.454620] Buffer I/O error on dev loop1, logical block 15, lost async page write [ 509.468110] attempt to access beyond end of device 17:36:06 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x300, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:06 executing program 4: futex(&(0x7f0000000000)=0x1, 0x80000000000b, 0xfffe, 0x0, &(0x7f0000048000), 0xfffffffc) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000000)=0x1, 0x80000000000b, 0xfffe, 0x0, &(0x7f0000048000), 0xfffffffc) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) [ 509.481438] loop1: rw=1, want=128, limit=15 17:36:06 executing program 0: futex(&(0x7f000000cffc)=0x1, 0x100, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x80001) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x1, 0x100, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x80001) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) 17:36:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="f9d22763eee0d568de18da2b3f7c31a6b08a31be61b3296b87d5fd3cdee44cd43b95a77bb796b6572128e8c52d32c068c9c1683aa5d447e1cd12913b90477121b05afd084e8b8e4aa49fddfff29d8c2f9dfebcd6c361f9dc80564800"/107, @ANYRES16=r1, @ANYBLOB="936bfeffffff000000000b000000"], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r3, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01800000", @ANYRES16=0x0, @ANYBLOB="000326bd7000fedbdf257c00000008000300", @ANYRES32=0x0, @ANYBLOB="0a00060008021100000000000a000600ffffffffffff00000a000600ffffffffffff00000a0006000802110000010000"], 0x4c}, 0x1, 0x0, 0x0, 0x8800}, 0x40000) 17:36:06 executing program 4: futex(&(0x7f0000000000)=0x1, 0x80000000000b, 0xfffe, 0x0, &(0x7f0000048000), 0xfffffffc) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000000)=0x1, 0x80000000000b, 0xfffe, 0x0, &(0x7f0000048000), 0xfffffffc) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) [ 509.556496] hfs: part requires an argument [ 509.561031] hfs: unable to parse mount options [ 509.584977] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 17:36:06 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x500, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:06 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) writev(r0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="5c21d13b64a0542010b3e84d44640442d10625830de10f42", 0x18}, {&(0x7f0000000100)="53f19e2475a24e1960773ab1a71e13bf64d7ff94fc2a12036b653c1d2698beab699c377ded1c1421089511caf39d57205da99c4d93ff490d835e3c98f8593da8c11e975671c05c48fa169a479a795cf1a49e50d6457c19a05954d87fd0054dcfb4d4dc50c6a3c45801c6", 0x6a}, {&(0x7f0000000400)="b8b16bdd0cca34a996d0ee08a828528a2088191d30c290550365c92588afb09988015912720cc3a41d2d91f94de76b24c91c0da0abe49f48ac5f34ebf46dc72dadefeea3aaa8f2ed3d3244104199e6facd2aedefbc08500d39d79a333db18a9f472b7901000000b7a5b716ea1f8bb603dd0900000000000000f7a2e7618df6bebb6603146e53d475de6afdeafa379d798c812dc1d332fc76f45b943f809812aa13f14dd5ffc850ae3b6816ee2f71e26868edbb768fc9eedb93f1b8da4df8488f22dc16dbbbe315606c54e0577d3a27590902994011614f9fbc04bf", 0xdb}], 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="03000000", @ANYRES16=r2, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000500)) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) rt_sigtimedwait(&(0x7f00000002c0)={[0x87]}, &(0x7f0000000300), &(0x7f0000000380)={0x0, 0x3938700}, 0x8) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r4, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000740)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f0000000280)={0x14, r4, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000180), 0xa, 0x0, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000200)=0x1, 0x2) futex(&(0x7f0000000000)=0x2, 0x1, 0x2, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080), 0x2) [ 509.673398] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 509.704940] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 509.721039] hfs: part requires an argument [ 509.745099] attempt to access beyond end of device [ 509.745449] hfs: unable to parse mount options [ 509.771795] loop1: rw=1, want=16, limit=15 [ 509.779837] Buffer I/O error on dev loop1, logical block 15, lost async page write [ 509.799840] attempt to access beyond end of device [ 509.828013] loop1: rw=1, want=128, limit=15 17:36:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x3}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:36:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x207900) 17:36:06 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000000), 0x5, 0x1, &(0x7f0000000040), &(0x7f0000000080), 0x1) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) futex(&(0x7f0000000180)=0x1, 0xf, 0x1, &(0x7f0000000200)={r0, r1+60000000}, &(0x7f0000000240)=0x2, 0x2) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f00000000c0)=0x1, 0x8, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x2, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 17:36:06 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x600, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:06 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) writev(r0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="5c21d13b64a0542010b3e84d44640442d10625830de10f42", 0x18}, {&(0x7f0000000100)="53f19e2475a24e1960773ab1a71e13bf64d7ff94fc2a12036b653c1d2698beab699c377ded1c1421089511caf39d57205da99c4d93ff490d835e3c98f8593da8c11e975671c05c48fa169a479a795cf1a49e50d6457c19a05954d87fd0054dcfb4d4dc50c6a3c45801c6", 0x6a}, {&(0x7f0000000400)="b8b16bdd0cca34a996d0ee08a828528a2088191d30c290550365c92588afb09988015912720cc3a41d2d91f94de76b24c91c0da0abe49f48ac5f34ebf46dc72dadefeea3aaa8f2ed3d3244104199e6facd2aedefbc08500d39d79a333db18a9f472b7901000000b7a5b716ea1f8bb603dd0900000000000000f7a2e7618df6bebb6603146e53d475de6afdeafa379d798c812dc1d332fc76f45b943f809812aa13f14dd5ffc850ae3b6816ee2f71e26868edbb768fc9eedb93f1b8da4df8488f22dc16dbbbe315606c54e0577d3a27590902994011614f9fbc04bf", 0xdb}], 0x3) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="03000000", @ANYRES16=r2, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000500)) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async, rerun: 32) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async, rerun: 32) rt_sigtimedwait(&(0x7f00000002c0)={[0x87]}, &(0x7f0000000300), &(0x7f0000000380)={0x0, 0x3938700}, 0x8) (async, rerun: 32) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r4, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000740)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f0000000280)={0x14, r4, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f0000000180), 0xa, 0x0, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000200)=0x1, 0x2) (async) futex(&(0x7f0000000000)=0x2, 0x1, 0x2, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080), 0x2) 17:36:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="f9d22763eee0d568de18da2b3f7c31a6b08a31be61b3296b87d5fd3cdee44cd43b95a77bb796b6572128e8c52d32c068c9c1683aa5d447e1cd12913b90477121b05afd084e8b8e4aa49fddfff29d8c2f9dfebcd6c361f9dc80564800"/107, @ANYRES16=r1, @ANYBLOB="936bfeffffff000000000b000000"], 0x14}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r3, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) (async) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01800000", @ANYRES16=0x0, @ANYBLOB="000326bd7000fedbdf257c00000008000300", @ANYRES32=0x0, @ANYBLOB="0a00060008021100000000000a000600ffffffffffff00000a000600ffffffffffff00000a0006000802110000010000"], 0x4c}, 0x1, 0x0, 0x0, 0x8800}, 0x40000) [ 509.878981] netlink: 364 bytes leftover after parsing attributes in process `syz-executor.3'. [ 509.935112] hfs: part requires an argument [ 509.945143] hfs: unable to parse mount options 17:36:06 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) writev(r0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="5c21d13b64a0542010b3e84d44640442d10625830de10f42", 0x18}, {&(0x7f0000000100)="53f19e2475a24e1960773ab1a71e13bf64d7ff94fc2a12036b653c1d2698beab699c377ded1c1421089511caf39d57205da99c4d93ff490d835e3c98f8593da8c11e975671c05c48fa169a479a795cf1a49e50d6457c19a05954d87fd0054dcfb4d4dc50c6a3c45801c6", 0x6a}, {&(0x7f0000000400)="b8b16bdd0cca34a996d0ee08a828528a2088191d30c290550365c92588afb09988015912720cc3a41d2d91f94de76b24c91c0da0abe49f48ac5f34ebf46dc72dadefeea3aaa8f2ed3d3244104199e6facd2aedefbc08500d39d79a333db18a9f472b7901000000b7a5b716ea1f8bb603dd0900000000000000f7a2e7618df6bebb6603146e53d475de6afdeafa379d798c812dc1d332fc76f45b943f809812aa13f14dd5ffc850ae3b6816ee2f71e26868edbb768fc9eedb93f1b8da4df8488f22dc16dbbbe315606c54e0577d3a27590902994011614f9fbc04bf", 0xdb}], 0x3) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="03000000", @ANYRES16=r2, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000500)) (async) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) rt_sigtimedwait(&(0x7f00000002c0)={[0x87]}, &(0x7f0000000300), &(0x7f0000000380)={0x0, 0x3938700}, 0x8) (async) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r4, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000740)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f0000000280)={0x14, r4, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f0000000180), 0xa, 0x0, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000200)=0x1, 0x2) (async) futex(&(0x7f0000000000)=0x2, 0x1, 0x2, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080), 0x2) 17:36:06 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x700, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:06 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f0000000000), 0x5, 0x1, &(0x7f0000000040), &(0x7f0000000080), 0x1) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) futex(&(0x7f0000000180)=0x1, 0xf, 0x1, &(0x7f0000000200)={r0, r1+60000000}, &(0x7f0000000240)=0x2, 0x2) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) (async) futex(&(0x7f00000000c0)=0x1, 0x8, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x2, 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 17:36:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x207a00) 17:36:06 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000000), 0x5, 0x1, &(0x7f0000000040), &(0x7f0000000080), 0x1) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) futex(&(0x7f0000000180)=0x1, 0xf, 0x1, &(0x7f0000000200)={r0, r1+60000000}, &(0x7f0000000240)=0x2, 0x2) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f00000000c0)=0x1, 0x8, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x2, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f0000000000), 0x5, 0x1, &(0x7f0000000040), &(0x7f0000000080), 0x1) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) clock_gettime(0x0, &(0x7f00000001c0)) (async) futex(&(0x7f0000000180)=0x1, 0xf, 0x1, &(0x7f0000000200)={r0, r1+60000000}, &(0x7f0000000240)=0x2, 0x2) (async) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) (async) futex(&(0x7f00000000c0)=0x1, 0x8, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x2, 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) 17:36:06 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x1, 0xc, 0x3, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) [ 510.087009] hfs: part requires an argument [ 510.099205] hfs: unable to parse mount options [ 510.117785] attempt to access beyond end of device [ 510.124209] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 510.132941] loop1: rw=1, want=16, limit=15 [ 510.158263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 510.159483] Buffer I/O error on dev loop1, logical block 15, lost async page write [ 510.173419] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 510.271737] attempt to access beyond end of device [ 510.292980] loop1: rw=1, want=128, limit=15 17:36:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x4}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:36:06 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x900, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:06 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x1, 0xc, 0x3, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc)=0x1, 0xc, 0x3, 0x0, &(0x7f0000048000), 0x0) (async) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) 17:36:06 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x8, 0xb, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000000)=0x1, 0x2, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x2) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 17:36:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="f9d22763eee0d568de18da2b3f7c31a6b08a31be61b3296b87d5fd3cdee44cd43b95a77bb796b6572128e8c52d32c068c9c1683aa5d447e1cd12913b90477121b05afd084e8b8e4aa49fddfff29d8c2f9dfebcd6c361f9dc80564800"/107, @ANYRES16=r1, @ANYBLOB="936bfeffffff000000000b000000"], 0x14}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r3, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) (async) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01800000", @ANYRES16=0x0, @ANYBLOB="000326bd7000fedbdf257c00000008000300", @ANYRES32=0x0, @ANYBLOB="0a00060008021100000000000a000600ffffffffffff00000a000600ffffffffffff00000a0006000802110000010000"], 0x4c}, 0x1, 0x0, 0x0, 0x8800}, 0x40000) [ 510.385549] netlink: 364 bytes leftover after parsing attributes in process `syz-executor.3'. 17:36:07 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x207c00) [ 510.474562] attempt to access beyond end of device [ 510.480551] loop1: rw=1, want=16, limit=15 [ 510.480814] hfs: part requires an argument [ 510.491794] hfs: unable to parse mount options [ 510.499747] Buffer I/O error on dev loop1, logical block 15, lost async page write 17:36:07 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x8, 0xb, 0x0, 0x0, 0x0, 0x0) (async) futex(&(0x7f0000000000)=0x1, 0x2, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x2) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) [ 510.535979] attempt to access beyond end of device 17:36:07 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x1f00, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:07 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async, rerun: 32) futex(&(0x7f000000cffc)=0x1, 0xc, 0x3, 0x0, &(0x7f0000048000), 0x0) (async, rerun: 32) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) [ 510.572758] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 510.583259] loop1: rw=1, want=128, limit=15 17:36:07 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async, rerun: 64) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async, rerun: 64) futex(&(0x7f000000cffc)=0x8, 0xb, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000000)=0x1, 0x2, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x2) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) [ 510.627274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 510.637786] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 17:36:07 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x2000, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:07 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x207d00) [ 510.743768] netlink: 364 bytes leftover after parsing attributes in process `syz-executor.3'. 17:36:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x5}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:36:07 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x3f00, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:07 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000011000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup3(r0, r1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup2(r1, r2) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f00000002c0), 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) recvmmsg(r3, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@un=@abs, 0x80, 0xfffffffffffffffe, 0x0, &(0x7f0000000080)=""/223, 0xdf}, 0x4000800}, {{&(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000001580)=[{&(0x7f0000000200)=""/143, 0x8f}, {&(0x7f0000003f80)=""/213, 0xd5}, {&(0x7f00000003c0)=""/147, 0x93}, {&(0x7f0000000480)=""/99, 0x63}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/128, 0x80}], 0x6, &(0x7f0000001600)=""/73, 0x49}, 0x2}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001680)=""/14, 0xe}, {&(0x7f00000016c0)=""/158, 0x9e}, {&(0x7f0000001780)=""/204, 0xcc}, {&(0x7f0000001880)=""/213, 0xd5}, {&(0x7f0000001980)=""/72, 0x48}, {&(0x7f0000001a00)=""/147, 0x93}, {&(0x7f0000001ac0)=""/33, 0x21}, {&(0x7f0000001b00)=""/217, 0xd9}], 0x8, &(0x7f0000001c80)=""/253, 0xfd}, 0x1}, {{&(0x7f0000001d80)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001e00)=""/66, 0x42}, {&(0x7f0000001e80)=""/175, 0xaf}, {&(0x7f0000001f40)=""/93, 0x5d}], 0x3}, 0x40}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000002000)=""/238, 0xee}, {&(0x7f0000002100)=""/160, 0xa0}, {&(0x7f00000021c0)=""/60, 0x3c}, {&(0x7f0000002200)=""/235, 0xeb}], 0x4, &(0x7f0000002340)=""/125, 0x7d}, 0x9}, {{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f00000023c0)=""/226, 0xe2}, {&(0x7f00000024c0)=""/167, 0xa7}, {&(0x7f0000002580)=""/72, 0x48}], 0x3, &(0x7f0000002640)=""/157, 0x9d}, 0x1}, {{&(0x7f0000002700)=@phonet, 0x80, &(0x7f0000003d00)=[{&(0x7f0000002780)=""/12, 0xc}, {&(0x7f00000027c0)=""/124, 0x7c}, {&(0x7f0000002840)=""/125, 0x7d}, {&(0x7f00000028c0)=""/211, 0xd3}, {&(0x7f00000029c0)=""/37, 0x25}, {&(0x7f0000002a00)=""/221, 0xdd}, {&(0x7f0000002b00)=""/229, 0xe5}, {&(0x7f0000002c00)=""/4096, 0x1000}, {&(0x7f0000003c00)=""/215, 0xd7}], 0x9}}], 0x7, 0x60010001, 0x0) [ 510.787184] attempt to access beyond end of device [ 510.796811] loop1: rw=1, want=16, limit=15 [ 510.806498] Buffer I/O error on dev loop1, logical block 15, lost async page write [ 510.827558] attempt to access beyond end of device 17:36:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002380)=ANY=[@ANYBLOB="1ebbe34bd1ccd40e8bc180010089f22c9700", @ANYRES16=r1, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x22, 0x2, 0x6c, 0x3f, 0x0, 0x7fffffffffffffff, 0x81659, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x81, 0x3, @perf_config_ext={0x8000000000000000, 0x1f}, 0x40180, 0x3, 0x6, 0x6, 0x101, 0x3ff, 0x20, 0x0, 0xfffffffe, 0x0, 0x7}, r2, 0xb, 0xffffffffffffffff, 0x0) getgroups(0x6, &(0x7f0000000140)=[0xee01, 0xee00, 0xee01, 0x0, 0xee01, 0xee00]) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x22, 0x2, 0x6c, 0x3f, 0x0, 0x7ffbffffffffffff, 0x81659, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x81, 0x3, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40180, 0x3, 0x5, 0x6, 0x8, 0x3ff, 0x20, 0x0, 0xfffffffe, 0x0, 0x7}, r3, 0xb, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001840)=ANY=[], 0x180}}, 0x40000) r6 = syz_mount_image$befs(&(0x7f0000001740), &(0x7f0000001780)='./file0\x00', 0x8, 0x3, &(0x7f00000024c0)=[{&(0x7f00000017c0)="3914a058f1f5fc5d75e1b32d30755838cd65f93186958670e63485ed2addde9a57e6", 0x22, 0x1}, {&(0x7f0000001800)="42a6ee6b6e4c64023da30a80b70aaf4ecb3c23a76c6107404d490774d6", 0x1d, 0x2}, {&(0x7f00000023c0)="b18e86448be912eea19f88be0c499356730e707780c515e600247c55dd3d574198d0299d4860593bbdcb2e9fdac013636f64b69305cd3928b8ea4bffcbecda09d74b1483bb1e44f7d995c934c3deacbe336fda9aa26e6236fde2c27759dc38cb0eb02c956b342a857d16992c9f42596998c84f0173580a95a0f4889d692dcf422bf0c11b68260479d23087ba69978bd578af0ea2eca6545b3ae6e7dc917be3133819dd04dd70cea4dcc7554cb4de3e2820449b5e9e1c95f97807c8ac8532e6544f0c7718ef5a8da7", 0xc8, 0x6}], 0x10011, &(0x7f0000001880)={[{'IPVS\x00'}, {}, {}, {'IPVS\x00'}, {'-w*'}, {'#}:'}, {'-}\\.+/'}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfshat={'smackfshat', 0x3d, 'IPVS\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'IPVS\x00'}}]}) r7 = syz_mount_image$ocfs2(&(0x7f0000001900), &(0x7f0000001940)='./file0\x00', 0x0, 0x7, &(0x7f0000001f40)=[{&(0x7f0000001980)="badd60c0097d219f04ba5e260ac50cf68af0be026ffe0e8ff268830fa238c9d456b135b0fdfa9304e4ea84618ca04f60f804359fc49932b5da039936e91a30b37f48eee9d7a6f927ea33d9a9602f66b3b213d15201f5782c123e73a9b4", 0x5d, 0x58}, {&(0x7f0000001a00)="351891edcdb7806e97d759ad44a05eb8bddc7c7b986132f32717455de4f8bc2dda5a9b9f57fddec4bfbbd83f1c96c308502d1959029c5f1364d9960d45211863f6f15df7830b2d8878f122c90c7837cbb7e57a1dbed5b56370e0ac4b6c38aada7f17c20ecd6f696047dfb8f9b1b16ea218e8c649685c46996bc7370cacf05287404e462d12ada619ee96db4dabd60682642c69e6527129eeae54eefe22fca4ca969b7f0f9a435ea1236c7ccba432b1c58547afcc644c042c2df025fdcce2ff5a36103e51a213f88f", 0xc8, 0x1}, {&(0x7f0000001b00)="126cd17d8f352bbfe816a7d9de5a0f6657352a9da316c19fc0c9c1029b9115043f0b227052383942c2b082a57033c5e2c9dc8c2baf1739cdb074bb988d204310c1f12815019212a43dc1558fcdd005c0e81a07b2d80d483a516f1e0edac792fa4df7a46dcf282944689d5dc03482326282502093f9a02fbed50ca19e9ab26bcaa099853005fe5075012ae6edd2d5f73ced9004844b734e456b3bd456", 0x9c, 0x8001}, {&(0x7f0000001bc0)="fe64595ad8a87d8a86a66420fdd2a4558cd0c92067f5e736035bb318515ac88d974ea2e8c3b5b1260970c99c15a4cd9f371bcf42a5614c98a81b1f31b47e521082620dedf8d564e2f63769dfc88f35662f3b6d0342bcc611d2d46ff222fccccb9093d7e2fc96b78ee2e29f45ae75aaf4157eb3a2c967f06762088d8b2eaf01142d7b143e494a2f1ebc79f1d60ebc2dc1740d97604c88bc792f60f1c852c8eb1c1e179b496fe83e90ef3e56f40ebb852dfaeb167431de10b587d105a485824cbc8ddca77f236b9fd28e22b57bd1f3f1cc580301d3a49703", 0xd7, 0x200}, {&(0x7f0000001cc0)="4ca63814d872531a13056207b993d6b2171dd2b6d0e398023f9b167655f5ab6d8000e4d58138925319b4f82bf5c3f0e410765561371e976355c9a33d27284e00bdaf8f6d2833cccf7e43497dcb7b484b26851b59cf713ca7d3f016e90068cd8a48bdf6f085a61541f9e31453ca0c3396141e4fd1764d3fb51cdba7e8d781e178fcaf9898b49cad83fe1d7ec4c17a634a13f9a2407efbea2d92db8db9a6c813a214da68f0dc9177bbdf6684043255c54b8023c7be73e06cb7acea60aba39c9404dd8ed9599b8d7979", 0xc8, 0x100000001}, {&(0x7f0000001dc0)="296ec02b94d8b4b9870901da6860df39156325abfe8ad8b7ef1096385dd9af20f0d34f7b6749e46e3b63a327f487f46343059245c483263c7344382b1e62f0a37864df05c44d2deba8344973c8abbcebb3a93076f4913927cf10a1d75e6ffc5d468e491e26f057a02de046f278ed685eb338a099c9d57c5897d8fc05bf7848e2f95ede4e4234d56b6a30af131e6501785024d5905afa572a79a9e752d7916d52d5bb0b3b5bc17a6c562c1cab6954800a947977aaa91ecbc93cc33fc8e6a9253604cd78b800aa84e38759d097161c42f1e2629b8b0434ad11", 0xd8, 0x4}, {&(0x7f0000001ec0)="96b2d92faaaa953ede1064fa86b6b9b1a8d5cde230b5b649444fade3543f7432d2fa3419fcdc9b57538b4bb6e6ee66edef5469bc45a2272a90429b6aa84788de0bd44e9317c875667b40", 0x4a, 0x5}], 0x0, &(0x7f0000002000)={[{}, {'+'}], [{@subj_user={'subj_user', 0x3d, '\xb6\\\'}\x00@!'}}, {@uid_eq={'uid', 0x3d, 0xee01}}]}) r8 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000002040)='ns/user\x00') sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002340)=[{&(0x7f0000000040)={0x18, 0x12, 0x10, 0x70bd29, 0x25dfdbfd, "", [@typed={0x8, 0x4f, 0x0, 0x0, @u32=0x7}]}, 0x18}, {&(0x7f0000002540)={0x1474, 0x2e, 0x100, 0x70bd2d, 0x25dfdbfe, "", [@typed={0x3f, 0x6, 0x0, 0x0, @binary="ddea0dd62b62335382c54ab099cf1840005610a45353ae5c238a87b8ba8364ee8353af2b8fee40c3057004d4a5ef27f6bc7f851f274a0e394d8562"}, @generic="a89dfba3394d1ab392151d1642e91084ed77e7e2bfd27997812a9737af07e84608756f3cd5b01cf047e77e51a7c712af90b6f2c18d4ee62a7b817088cb5c379c8c028b0aab4c01b0e11647386197587068627e48a200d29d1fe72d7adaa2a6611e61965f7504a046cb40f89fbe4c8ee1b01af49643f0ca43b2f918477c4d2b345cbf92eae6965a605493dc77dfb371010517e7ce0cc581dcb75c2ff696fc1683e6e0821d7e565e86cc7cd054574470be887cdd7a0a83ac0e6128fe94ce26b1a93088ec3155144eb51e83", @typed={0x8, 0x23, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x40}}, @nested={0x12c4, 0x1d, 0x0, 0x1, [@generic="10c9ffa4e27d1f6632998e950a4615e4d49a1fa8836ee2a96b2700bc6a961210e261a6eeffebdfdcebd91462f83ff996b070f95d7eb8cac7f8b4b1523655e20fde828c7e5d42cd88fdd047b1379b6a9f077b9c84055002d64350e81cafe3d8902ccd8ea6696e0768ddf8dcd5e8525a013f2991ec47dd0f5d5c36e7a615e5091f8a6fbf563ef33e075444e0c8492693f7801eb533de9db88d52c4fecc25eba21124ac967582a0b94e0f2453347156beaced6d94ff273d63de612b91e510acb5f00535d4d0add2d8a433c4521572cc1286c50e544698e2d8a47e8f5fbc0d9784b6fe3dbffc07ae5012e1b4b41d312e9d3837e7aab311ecbcba8c5f29028f5a6e74cf90e7559cf09e9bb7a38e9a5f7545d63d49886f6fb187001b9588561ec07e9376d4f495250aa144243351289bee7e7488dfe5b28b3bc9c9e9c20477954cc2bee1610ac875beb820d89c07050092786d96963d10e34bc62037285f35f1faa1daa3db208cabfc0d825b6377332ae9315ef3e87b18ad9139b006d99b15220205ec165c3fd3d65762fdd54318a7788f7c8a4921a66f5d2739467dc381b5786616dadeff6f5dfbf04d494345858b1b0c151d93943562d1ba3d46519a2fff807206a0c334a5f69680adcc41df7334e5e24ad5d832b0ae725434f606ca23c8191213ddc6bead139327c489be7226a2add7da36af17853c4a33e2add2739f9bb48b8ff2cb145f896783eec1d1742e36c8113626d0fe877e51b373847c3ac10df1bdfb12530d9edfb4df6f0f7cf80f92dacacee0bb7568c3bcd6b4d2cc1064a73deaa39df70addfc041713798c1963aaeaecd07b05db340f5f73ef54d9d53fa01928fc8936963b208e02b2f8b9c5be697c07de7575c384a4fb8ea678aa5c1fe2c93df914bf9ad67b038c6d258a1a3b93551b99b65d10babd8ca01f5ab186954efd5b9f5b0dd6a003b12aaf3617c574b950e3051e557b8375aefec791992c61356ff39c42eb213b9ed0d9221b3e2d701852da7446ca5420edd4a6dd090229868819ef02d4449888efa1b15c883be6926ceead0a93fc7cf28cb14bb4174ebd3f4b8e4fe9ffe2458c07dd0482f2d226a710f272387c5f601387c6cb624fec63593ee27e023c5ca4cf35512958a748ce4f33d90444c120a85437c28d84ed9fdcb51c2a5e80cd1d7b7270710de99586812e96d6db22db84a1beefe8c1d2a0d9b61cf3045961a00bed31d100fe0fa6f768709e155efe39d2be06aad11602ce8d411cdc29fa9a55496959a9ae9cd3cbabfc84bbd048b181f3a44c62b7cc5657e88e92d0e018da7a1867d82f7c44c1f7f6b98b96e076c936f24ae7834f784ae75f77fb66b3f2bea8f976072f71bb8122f4115f8c1ea151902a6639e830098928f4da43921a58c78ba30a28f64536a4b24d1bd0ff1896794bf6ea07e616dbf8d94cbc9b0bd30587e9936cdaee7dfe95f85cd3495a57a36c7c9417a75dc21a4bd38d01252883f913fbb00557aa077497a32f5f973f212d53da6f0c53428985205e716c966946ece20b80cebbe85e87174260c57f63f405952fe4a2b7bca354babb09261de22165cdeeefe42b2572d782a41407ece5043b7f319e926b838574838be1b876625c11705247719eba8a41257fc79cd4f6a7f8da55cab22d1580636e9fdc10a3c2a573e5a98cd1a0507aca46e2714b397cbdb093df564d7738a36c999bcd3559a4bedcffffcc2e6b7586027003ad1ee0776d9267336c7d1a02be18332b7e14f329ca18b6112a01e23c759d2e1443306e99aeb40e249b5dc8b49764915538e369ce5bb7f2872196eeb810c6120f9fc075eceed823dd6417e189ed44902f24be09b94ef4e5589ecfb67836e4368a01fd197802f73fdd50d1f22c51e57e9accb5e8b12e23019772f8fbf5f3e50e5b4403d985165080de88725a6c33139e6500a0110db2de04777570aa95c026468ce1b1360f5559e12c4f026bf2f1d5276f086d45cf630778dcd66ec7bdaddd1bcc5930ec5067a1d391fa9ca961480e2fc55b7cb9fe5427c5f7d13c229f2269f9f5210aa67a9dc84e6a4a4ac089114d6a1f998e3f3ed61e519fcc871e7737b21291043ed46f02bc16d2bed2d93d8b88d0fd45c9fa0a7107e8b19dc527c89f91e3df2703d0c3727c99aab676649909cbf516a2d5014eb1882e278c748d44f9585c880ec4794a4424ede4d2081a3e305bae72869a2729dead811d536c4653446e668440844a285aa08510bed7b8e682c00d2b64458f34d0ca83e2e779c83863f597ccb59db40147a86ef8827ade12d0ebbf5a17e00fac8b9e39144a6361d76bc90bfb384afa69b01f5b988f1dcd6cb00bf9d38e07d9ba0869559231a7ad7267887856cf9fac67fcb6e1e7e829b05142cd3c8c39f099323d49ac535fb58408e85f51908bdadfae03e957a99a89f9c6f3dd25031b3eedc8df6ab73d4e7670336094f17e278573437a5650f031380aa4ebba3ef34a7aa03081730e5d445c8d637eb108979a19c0a1034b5db363cadba72c0d31bfefcbc575365725267b57c7df6350ae6662dc52beff4567847403ad30b092f429bd686837274423b9133d7ea040a15f5b90671194bc46e0ed9b6d6f056b7799e59933ae144010b1af12a1142d84b0d4515bd2df3ee9dfef1e3faf2d5f9cf44bd0af1f6b10b8392f908e7133eed9e3fb5e1b8dccfd85af7b9d2b2cec4e1bfbf82fb94203485d9677f96846960451e695fbd0a880dcb24846a66324d3fe58e523450cb850da8afe4e54dfe41ea337512880901376b082be2835c5ba22b81b87c451309ce7928d0861cd1a451ebaec3a6907b4524e4222c1970640b96861088804f9eb6d55d64af232265ef9f5b7810787982436cb07d1540509f9edbdd671ae766314541715c9c8432ff0866afd11250252c99645633e85c270703ce1d92cce7047f4a11a28dd50e4340c937be4e3c323f86792d76bf43d16e18cec7a0929119fa4258a71839ca4f87eb3c2360e964f56c0e969f62090daba6726763b1ef979c777265c2090c618067b93cdf426b8f87c5995296ab034a61e0299a8af644a875581f842b6abab06cccf0a718030bc828038b4046a5de8e2a736d1202c18c55f11fa4060dd50a6352a2e1f2b5c36f4f0b2d9e3c1b99883f9f6d0cebef7ef8ef6ab40619fbf014ebcd2729827918d812682fd9c2a0598b2e8a1f1ebe8b2cec5e50df80e8d0c56ab7853c9adee2ccfea81ded39998d4518c2cd91a500e4b3885be94c088be6908517ea764be7ef5a635c23e023df4021bff2172deb8e94c5dda36291e90b75e25cdf5c310e6e06f426e1e4c97cd67e5947e2e40166d1637679f21b76e7207c358df039b5b3e194ff9bb31a839bde52c74cefa575c498e6a631cc80e468cafdf2d78b60036bfee559f6ea7df2a53791b1fd52e9d7a7f40fda5b9ac223ac2fd6191f4585f313f1748f005a9e2e5e90ad772f18cf4683d7977eca85668196c6218aa6e9a92b9d8e54eb1c99ab06dcc1f9ec72f95546add4d8af92a3fc161f84ed172d1b28a854201add1d28955c7cd2d9d45b0ca59fd9f8475ad897a563b3f9f73632f2ae2093781ec04b55be1dea18f6abf9ef21eb6ed81ec84b50dc6ea8cea735f50db81b9ff6fb28289ad3e24d3ff6eebc679b36d1fe136102dfa146e9e2586902360ef8c24d7a33897443edd70def980e665fc03ca4f4278ca72183805223e3086b0559e1062ceb96e26b9dca43d0f94ade40c9548fcefc0a73194bc8ed5faf63d122948e2b38c7c891f1ad8dcd1121eb33a267072a0c7826ddfeed4cc6ea1f86fba63a90dfb25e169dda489cc9a6955cf0b3aec1dba217201a44d08705a8d7416ea0aa72a74870e3bff1752836383a9842902b8301303472a9111d7c9ecb064df3511e838d27342f2a799568b62ff0518efb4242ef166f758270b4e0983d8484b7d9a636f1fb5323009b30a3faafd5c46d661b32a6499b263c755223e7fdf10f5c9203de24ab7e17567e7a9ab4682f65947ac5077f75e417935ed9fc49300bda899eb4b94b16eb837aff8b099a4be3979c452da74d6a6691ea53d4d6b7d35a5f8392eaaf1f61f2df9a846b2d1da74cb5d60cba5ad5b9b537703e6429a0d4660135449cb133ea22583e533d2b091f0f918aff1e2312e1167b3b23dab8f3bf6e013764a0d51e2e236a0b977bc3cb2022027b0d0d0c04562c403204b16918ff348596b6678066cb4dca3a9de0aed9dcf5c6e6e46533695d7a4d64946a3016391fb60855fc1a786b272ef0abb6550e40c86937cb0902835772dee14e15b53ecf4f45e7820f43c76e26ba03b0df458e1f5cad540e5d7dde60c5e8899231f6d58546cf6d89039997915624c13342142dd460fa64934fe8b6c43e22036c9dff87db854a9e3ccee5224c830cbcefcbbcd62d8b18801968bd0095ff7328deb38500c08ee635bce895c61da5bc5ff83dfdcd53cd49817f01b2bde7bd43bc093d29c4439c5a6de19cb145fde2401b628b94209f90dd9c6c168ac4a4ecf1f9854d2f83721135a083c15b9d567a9abf18fad8a89bcdc450f7a145d945aaca8b9f27cdf7ae389d07c4ee0338efed1eabcfdf054a024a02d6500af74f62d5c0e37666de0e8940d6f98b62807c21260c3f12122751381443586f6d2616e081f51dddf88d3f2dd7b40f625bd8b4e17e00a939eaef5bd42c40098643eaf5de9e310ed437d4fe6550cb4dfe8104c65f5475da0eba683f002d995f991c04c9cc13ff35eeafd0ef2422545b7326cd0feaf3689ba8c5442f882d1445d07fae0b81b2158d61c063ea6ab242e226506ab863b8f01e6982be24d694ec4c40ff9eef6133d231a21c25fbbe6319eb955d266e2bff03c226a3f191f3a930c522e91c273a05759ef56ec4d42c7a1a6c51255191b02857f1849ed77b7709ad8ace3b0eb5f3f854ee93efa2abf2fb41673b96b0b7cc15455ef6bc356534540e99c22fc3ccee276d4d1ff97fe9b0137f4763114ed161bb142420a16fed0e2adbd607ae857192ac512009cb15e6bf395ba809448b444a5a9d9c89a1b3ad612042b11c6e503ee121a0156aa2f3ee8059b2f66106bab643a8c8deff8311b1f43c37bfa331ea52309cb91a343ec0914eb625ff5ba3846ff0fb04aafc43be21a79d5a1f5485aa2482c9e4b6b15e04137ece04965524371c223bb5c65cb75e73470806413fa42edb7e4c4292406058437ba602654fea87203586051573c639fa5ca8c7bd3b7e03faac4e026050163bcd174e476d94180b68aa36c2556aa244e25f44fa33d51e35f781335136b5099fa7fa5d4f6a6363f12c6bb0485d2c81ad06694c7cc068fe44a8650fc15e8c208089018ec1f0367365b1af2e42cfc8b42a1f8a8dbfeb6dfdd5e3be63b4a9615024e1fe43db5f97634bebec2d5b6a2ae263a1a4838a43494f1dc0ff04d62cc4579951d5fe3817af2f97401c0fdd7fe46fed0628833002f168561d9c049c4f35cd81aaf2cb35c32233be1b884ccbcb3c6b8008b5821e955c81ca74f1e608e2938982dbf96bacbc7b3d4a9ba283731e9190b9d83fbec79aea302a15aa534a9a0e31a5c3c41245f4c2346a8e2ff416414cb89f586104f59b8154a4533434cbf3c554b56e1cb0f44ad4088dfeee04e9bb35a445b3fa2b8427ed42139d2abfc42425ce9caf94a22720943fc699b08141cab9732e763ce6a9806a024352604de1fa79427d6b698328021d9f5c70a778d1e8027db274323253e4e9429a9fc714cd383e9d884689a4fa0110bf9f861c1665393848cb9bfbabce998aa6194fd4311bff59dd8e669cf5fac5ea0a0", @typed={0x8, 0x6c, 0x0, 0x0, @fd=r0}, @generic="7795cfd796459ad29a7daa3144039c7d8a028cce0a5aa9fc5cea13d61b7a540b7d97cd59642424f32013a17d9d7c604cf9f8292844726e40c4c2cb92adb6c2bbd42a8ddb1957f4a31e2a5389194e66dce73223a2d2ff3a", @generic="1f936bc96ab1ad90e5a801d49de1e8704514f05b4a54e48dfc84773766d0b66d058c08e3d00b8d2cb9b1939b7b4820ec1d94c245e35c8d08620eb8431e3a7aae356c4c30b44d60313822b01b69a1c3f4bf96ae13288e8656355c0b33cda0431306380118a08ceb9d9220e4e4ad9b279afe80cf4ab44d6897a27ea738fe79b73e8cf2f46b720b97d4d2a42c7e0c5f93b16320d8bd284f02c9e3880f6d3f7a309b653c43ea26be9a7a2dffd6982ce6c87d4ce6dad248ba3ba4925a19373d", @generic="33890fa33f82b9d599a1d1587a8d3912e3890bd93916e134397b7f9e3e6c2cc547366f7a8c519a5bc46ea1da90ce23453dbd8c22b783b9ab28d4dae9ba7dd61f5a690e7b282726ab25807aecae67535cef43ce4d81ee7e6a43ab610160f503d2c50d3098ab69b572b7341ca5f6fd8a8234b861b19df942bf15d3bc301e7634999ac09764a0899137a9462815805f5fdafb59b3f412b38fc446", @generic="e970cd3869a7f417189622dba674f3fc97c5901f3d4782feed52ba918c74ed1494204f57126f5a389181e9daafc941812193df0067f034a9e3e5943aa1eccd790227d0d69c135f676876fdbb6bfd40", @generic="3e320bf59e4bb9fb55dafddb500b06cce01083cfba070f277b329e9fd7914eaa3f83070501e90d681d2e8b17354923ab8eeb9fd77d28a129d65465080ecbd923e8d6dd18f196d729540a6fb6ee16a2e9b4ec54792f188882bf1a75bb55fa80509e6daaf8b32ab27a30db23e90b5166330bbd2259ff854bc3a8d085f48009a450628a91e5a461de9afba78ae5bbc05615e26e246d7123d09b2e2bb1d33ca08823b40ffd4187bbb4d97b4563b5801d7f6d67221ea5c044746d47d84988"]}, @generic="8b0e2497b03dec7540102573ef08b9f76ded8856f149756cb264062ccb72e624a40305a3a438a6f17e95baddeb00a753e27f801d51eae3731c6af30a65d6954d7b89606354e03164ff4da17727eac5ba17b1d35072cff9431320bfd834976efe75d70422398f96009f4e78f4e85d6b1e1b9ad4733c40b980fb5c0ef8577145b5ee177a02b46acb25abea36"]}, 0x1474}, {&(0x7f0000001640)={0xf8, 0x28, 0x0, 0x70bd29, 0x25dfdbfd, "", [@typed={0x8, 0x62, 0x0, 0x0, @pid=r2}, @nested={0x4, 0x72}, @generic="1303dcecaeab17b172e341e4023ff731c7b5e587bddf8143c407bb84aab0c729d7e092575260f7a92dcc07065f2a23a309e824b7aed8819fb2917cd057f328ba3dd68936075a3684089187cdb55eb0bf86d08e7557885cd0662d87c613c1c5cff1dcec43", @typed={0x8, 0x93, 0x0, 0x0, @ipv4=@private=0xa010100}, @generic="b8d3bc3a918adacae774ea3645106093bf657afa45c7474e6a81fe50db614c162d6359ad69ea868034597e509fe77fc37f7648ec5cf23a5196071e5914a30931dbe4649aafa15951217dd3b9b22a6d340bf3d6bdb0f46747cec78ccf628fd486e65300"/110]}, 0xf8}, {&(0x7f0000002140)=ANY=[@ANYBLOB="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"], 0x1e0}], 0x4, &(0x7f0000002080)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r3, 0xffffffffffffffff, r4}}}, @rights={{0x2c, 0x1, 0x1, [r5, r6, r7, r8, r0, r0, r0]}}], 0x68, 0x40084}, 0x40000) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r9, 0xc266a4723dd56b93}, 0x14}}, 0x0) [ 510.863610] loop1: rw=1, want=128, limit=15 [ 510.884123] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 510.893064] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 510.901854] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 17:36:07 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x4000, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x6}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:36:07 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000011000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup3(r0, r1, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) dup2(r1, r2) (async, rerun: 64) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f00000002c0), 0x0) (async) r3 = socket$pptp(0x18, 0x1, 0x2) recvmmsg(r3, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@un=@abs, 0x80, 0xfffffffffffffffe, 0x0, &(0x7f0000000080)=""/223, 0xdf}, 0x4000800}, {{&(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000001580)=[{&(0x7f0000000200)=""/143, 0x8f}, {&(0x7f0000003f80)=""/213, 0xd5}, {&(0x7f00000003c0)=""/147, 0x93}, {&(0x7f0000000480)=""/99, 0x63}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/128, 0x80}], 0x6, &(0x7f0000001600)=""/73, 0x49}, 0x2}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001680)=""/14, 0xe}, {&(0x7f00000016c0)=""/158, 0x9e}, {&(0x7f0000001780)=""/204, 0xcc}, {&(0x7f0000001880)=""/213, 0xd5}, {&(0x7f0000001980)=""/72, 0x48}, {&(0x7f0000001a00)=""/147, 0x93}, {&(0x7f0000001ac0)=""/33, 0x21}, {&(0x7f0000001b00)=""/217, 0xd9}], 0x8, &(0x7f0000001c80)=""/253, 0xfd}, 0x1}, {{&(0x7f0000001d80)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001e00)=""/66, 0x42}, {&(0x7f0000001e80)=""/175, 0xaf}, {&(0x7f0000001f40)=""/93, 0x5d}], 0x3}, 0x40}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000002000)=""/238, 0xee}, {&(0x7f0000002100)=""/160, 0xa0}, {&(0x7f00000021c0)=""/60, 0x3c}, {&(0x7f0000002200)=""/235, 0xeb}], 0x4, &(0x7f0000002340)=""/125, 0x7d}, 0x9}, {{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f00000023c0)=""/226, 0xe2}, {&(0x7f00000024c0)=""/167, 0xa7}, {&(0x7f0000002580)=""/72, 0x48}], 0x3, &(0x7f0000002640)=""/157, 0x9d}, 0x1}, {{&(0x7f0000002700)=@phonet, 0x80, &(0x7f0000003d00)=[{&(0x7f0000002780)=""/12, 0xc}, {&(0x7f00000027c0)=""/124, 0x7c}, {&(0x7f0000002840)=""/125, 0x7d}, {&(0x7f00000028c0)=""/211, 0xd3}, {&(0x7f00000029c0)=""/37, 0x25}, {&(0x7f0000002a00)=""/221, 0xdd}, {&(0x7f0000002b00)=""/229, 0xe5}, {&(0x7f0000002c00)=""/4096, 0x1000}, {&(0x7f0000003c00)=""/215, 0xd7}], 0x9}}], 0x7, 0x60010001, 0x0) [ 510.955434] befs: Unrecognized mount option "IPVS" or missing value [ 510.978787] befs: (loop3): cannot parse mount options 17:36:07 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x207f00) [ 511.038459] (syz-executor.3,6804,0):ocfs2_parse_options:1499 ERROR: Unrecognized mount option "+" or missing value [ 511.049625] hfs: part requires an argument [ 511.059273] (syz-executor.3,6804,0):ocfs2_fill_super:1225 ERROR: status = -22 [ 511.064148] hfs: unable to parse mount options [ 511.098164] attempt to access beyond end of device [ 511.107453] loop1: rw=1, want=16, limit=15 [ 511.118500] Buffer I/O error on dev loop1, logical block 15, lost async page write [ 511.127480] attempt to access beyond end of device [ 511.138167] loop1: rw=1, want=128, limit=15 [ 511.195146] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 511.232201] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 511.245337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 511.400723] attempt to access beyond end of device [ 511.405704] loop1: rw=1, want=16, limit=15 [ 511.416836] Buffer I/O error on dev loop1, logical block 15, lost async page write 17:36:08 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000040)=0x2, 0x2) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xb, 0xfffffffe, 0x0, &(0x7f0000000000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 17:36:08 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x4800, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:08 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x208200) 17:36:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x7}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:36:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002380)=ANY=[@ANYBLOB="1ebbe34bd1ccd40e8bc180010089f22c9700", @ANYRES16=r1, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x22, 0x2, 0x6c, 0x3f, 0x0, 0x7fffffffffffffff, 0x81659, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x81, 0x3, @perf_config_ext={0x8000000000000000, 0x1f}, 0x40180, 0x3, 0x6, 0x6, 0x101, 0x3ff, 0x20, 0x0, 0xfffffffe, 0x0, 0x7}, r2, 0xb, 0xffffffffffffffff, 0x0) getgroups(0x6, &(0x7f0000000140)=[0xee01, 0xee00, 0xee01, 0x0, 0xee01, 0xee00]) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x22, 0x2, 0x6c, 0x3f, 0x0, 0x7ffbffffffffffff, 0x81659, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x81, 0x3, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40180, 0x3, 0x5, 0x6, 0x8, 0x3ff, 0x20, 0x0, 0xfffffffe, 0x0, 0x7}, r3, 0xb, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001840)=ANY=[], 0x180}}, 0x40000) r6 = syz_mount_image$befs(&(0x7f0000001740), &(0x7f0000001780)='./file0\x00', 0x8, 0x3, &(0x7f00000024c0)=[{&(0x7f00000017c0)="3914a058f1f5fc5d75e1b32d30755838cd65f93186958670e63485ed2addde9a57e6", 0x22, 0x1}, {&(0x7f0000001800)="42a6ee6b6e4c64023da30a80b70aaf4ecb3c23a76c6107404d490774d6", 0x1d, 0x2}, {&(0x7f00000023c0)="b18e86448be912eea19f88be0c499356730e707780c515e600247c55dd3d574198d0299d4860593bbdcb2e9fdac013636f64b69305cd3928b8ea4bffcbecda09d74b1483bb1e44f7d995c934c3deacbe336fda9aa26e6236fde2c27759dc38cb0eb02c956b342a857d16992c9f42596998c84f0173580a95a0f4889d692dcf422bf0c11b68260479d23087ba69978bd578af0ea2eca6545b3ae6e7dc917be3133819dd04dd70cea4dcc7554cb4de3e2820449b5e9e1c95f97807c8ac8532e6544f0c7718ef5a8da7", 0xc8, 0x6}], 0x10011, &(0x7f0000001880)={[{'IPVS\x00'}, {}, {}, {'IPVS\x00'}, {'-w*'}, {'#}:'}, {'-}\\.+/'}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfshat={'smackfshat', 0x3d, 'IPVS\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'IPVS\x00'}}]}) r7 = syz_mount_image$ocfs2(&(0x7f0000001900), &(0x7f0000001940)='./file0\x00', 0x0, 0x7, &(0x7f0000001f40)=[{&(0x7f0000001980)="badd60c0097d219f04ba5e260ac50cf68af0be026ffe0e8ff268830fa238c9d456b135b0fdfa9304e4ea84618ca04f60f804359fc49932b5da039936e91a30b37f48eee9d7a6f927ea33d9a9602f66b3b213d15201f5782c123e73a9b4", 0x5d, 0x58}, {&(0x7f0000001a00)="351891edcdb7806e97d759ad44a05eb8bddc7c7b986132f32717455de4f8bc2dda5a9b9f57fddec4bfbbd83f1c96c308502d1959029c5f1364d9960d45211863f6f15df7830b2d8878f122c90c7837cbb7e57a1dbed5b56370e0ac4b6c38aada7f17c20ecd6f696047dfb8f9b1b16ea218e8c649685c46996bc7370cacf05287404e462d12ada619ee96db4dabd60682642c69e6527129eeae54eefe22fca4ca969b7f0f9a435ea1236c7ccba432b1c58547afcc644c042c2df025fdcce2ff5a36103e51a213f88f", 0xc8, 0x1}, {&(0x7f0000001b00)="126cd17d8f352bbfe816a7d9de5a0f6657352a9da316c19fc0c9c1029b9115043f0b227052383942c2b082a57033c5e2c9dc8c2baf1739cdb074bb988d204310c1f12815019212a43dc1558fcdd005c0e81a07b2d80d483a516f1e0edac792fa4df7a46dcf282944689d5dc03482326282502093f9a02fbed50ca19e9ab26bcaa099853005fe5075012ae6edd2d5f73ced9004844b734e456b3bd456", 0x9c, 0x8001}, {&(0x7f0000001bc0)="fe64595ad8a87d8a86a66420fdd2a4558cd0c92067f5e736035bb318515ac88d974ea2e8c3b5b1260970c99c15a4cd9f371bcf42a5614c98a81b1f31b47e521082620dedf8d564e2f63769dfc88f35662f3b6d0342bcc611d2d46ff222fccccb9093d7e2fc96b78ee2e29f45ae75aaf4157eb3a2c967f06762088d8b2eaf01142d7b143e494a2f1ebc79f1d60ebc2dc1740d97604c88bc792f60f1c852c8eb1c1e179b496fe83e90ef3e56f40ebb852dfaeb167431de10b587d105a485824cbc8ddca77f236b9fd28e22b57bd1f3f1cc580301d3a49703", 0xd7, 0x200}, {&(0x7f0000001cc0)="4ca63814d872531a13056207b993d6b2171dd2b6d0e398023f9b167655f5ab6d8000e4d58138925319b4f82bf5c3f0e410765561371e976355c9a33d27284e00bdaf8f6d2833cccf7e43497dcb7b484b26851b59cf713ca7d3f016e90068cd8a48bdf6f085a61541f9e31453ca0c3396141e4fd1764d3fb51cdba7e8d781e178fcaf9898b49cad83fe1d7ec4c17a634a13f9a2407efbea2d92db8db9a6c813a214da68f0dc9177bbdf6684043255c54b8023c7be73e06cb7acea60aba39c9404dd8ed9599b8d7979", 0xc8, 0x100000001}, {&(0x7f0000001dc0)="296ec02b94d8b4b9870901da6860df39156325abfe8ad8b7ef1096385dd9af20f0d34f7b6749e46e3b63a327f487f46343059245c483263c7344382b1e62f0a37864df05c44d2deba8344973c8abbcebb3a93076f4913927cf10a1d75e6ffc5d468e491e26f057a02de046f278ed685eb338a099c9d57c5897d8fc05bf7848e2f95ede4e4234d56b6a30af131e6501785024d5905afa572a79a9e752d7916d52d5bb0b3b5bc17a6c562c1cab6954800a947977aaa91ecbc93cc33fc8e6a9253604cd78b800aa84e38759d097161c42f1e2629b8b0434ad11", 0xd8, 0x4}, {&(0x7f0000001ec0)="96b2d92faaaa953ede1064fa86b6b9b1a8d5cde230b5b649444fade3543f7432d2fa3419fcdc9b57538b4bb6e6ee66edef5469bc45a2272a90429b6aa84788de0bd44e9317c875667b40", 0x4a, 0x5}], 0x0, &(0x7f0000002000)={[{}, {'+'}], [{@subj_user={'subj_user', 0x3d, '\xb6\\\'}\x00@!'}}, {@uid_eq={'uid', 0x3d, 0xee01}}]}) r8 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000002040)='ns/user\x00') sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002340)=[{&(0x7f0000000040)={0x18, 0x12, 0x10, 0x70bd29, 0x25dfdbfd, "", [@typed={0x8, 0x4f, 0x0, 0x0, @u32=0x7}]}, 0x18}, {&(0x7f0000002540)={0x1474, 0x2e, 0x100, 0x70bd2d, 0x25dfdbfe, "", [@typed={0x3f, 0x6, 0x0, 0x0, @binary="ddea0dd62b62335382c54ab099cf1840005610a45353ae5c238a87b8ba8364ee8353af2b8fee40c3057004d4a5ef27f6bc7f851f274a0e394d8562"}, @generic="a89dfba3394d1ab392151d1642e91084ed77e7e2bfd27997812a9737af07e84608756f3cd5b01cf047e77e51a7c712af90b6f2c18d4ee62a7b817088cb5c379c8c028b0aab4c01b0e11647386197587068627e48a200d29d1fe72d7adaa2a6611e61965f7504a046cb40f89fbe4c8ee1b01af49643f0ca43b2f918477c4d2b345cbf92eae6965a605493dc77dfb371010517e7ce0cc581dcb75c2ff696fc1683e6e0821d7e565e86cc7cd054574470be887cdd7a0a83ac0e6128fe94ce26b1a93088ec3155144eb51e83", @typed={0x8, 0x23, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x40}}, @nested={0x12c4, 0x1d, 0x0, 0x1, [@generic="10c9ffa4e27d1f6632998e950a4615e4d49a1fa8836ee2a96b2700bc6a961210e261a6eeffebdfdcebd91462f83ff996b070f95d7eb8cac7f8b4b1523655e20fde828c7e5d42cd88fdd047b1379b6a9f077b9c84055002d64350e81cafe3d8902ccd8ea6696e0768ddf8dcd5e8525a013f2991ec47dd0f5d5c36e7a615e5091f8a6fbf563ef33e075444e0c8492693f7801eb533de9db88d52c4fecc25eba21124ac967582a0b94e0f2453347156beaced6d94ff273d63de612b91e510acb5f00535d4d0add2d8a433c4521572cc1286c50e544698e2d8a47e8f5fbc0d9784b6fe3dbffc07ae5012e1b4b41d312e9d3837e7aab311ecbcba8c5f29028f5a6e74cf90e7559cf09e9bb7a38e9a5f7545d63d49886f6fb187001b9588561ec07e9376d4f495250aa144243351289bee7e7488dfe5b28b3bc9c9e9c20477954cc2bee1610ac875beb820d89c07050092786d96963d10e34bc62037285f35f1faa1daa3db208cabfc0d825b6377332ae9315ef3e87b18ad9139b006d99b15220205ec165c3fd3d65762fdd54318a7788f7c8a4921a66f5d2739467dc381b5786616dadeff6f5dfbf04d494345858b1b0c151d93943562d1ba3d46519a2fff807206a0c334a5f69680adcc41df7334e5e24ad5d832b0ae725434f606ca23c8191213ddc6bead139327c489be7226a2add7da36af17853c4a33e2add2739f9bb48b8ff2cb145f896783eec1d1742e36c8113626d0fe877e51b373847c3ac10df1bdfb12530d9edfb4df6f0f7cf80f92dacacee0bb7568c3bcd6b4d2cc1064a73deaa39df70addfc041713798c1963aaeaecd07b05db340f5f73ef54d9d53fa01928fc8936963b208e02b2f8b9c5be697c07de7575c384a4fb8ea678aa5c1fe2c93df914bf9ad67b038c6d258a1a3b93551b99b65d10babd8ca01f5ab186954efd5b9f5b0dd6a003b12aaf3617c574b950e3051e557b8375aefec791992c61356ff39c42eb213b9ed0d9221b3e2d701852da7446ca5420edd4a6dd090229868819ef02d4449888efa1b15c883be6926ceead0a93fc7cf28cb14bb4174ebd3f4b8e4fe9ffe2458c07dd0482f2d226a710f272387c5f601387c6cb624fec63593ee27e023c5ca4cf35512958a748ce4f33d90444c120a85437c28d84ed9fdcb51c2a5e80cd1d7b7270710de99586812e96d6db22db84a1beefe8c1d2a0d9b61cf3045961a00bed31d100fe0fa6f768709e155efe39d2be06aad11602ce8d411cdc29fa9a55496959a9ae9cd3cbabfc84bbd048b181f3a44c62b7cc5657e88e92d0e018da7a1867d82f7c44c1f7f6b98b96e076c936f24ae7834f784ae75f77fb66b3f2bea8f976072f71bb8122f4115f8c1ea151902a6639e830098928f4da43921a58c78ba30a28f64536a4b24d1bd0ff1896794bf6ea07e616dbf8d94cbc9b0bd30587e9936cdaee7dfe95f85cd3495a57a36c7c9417a75dc21a4bd38d01252883f913fbb00557aa077497a32f5f973f212d53da6f0c53428985205e716c966946ece20b80cebbe85e87174260c57f63f405952fe4a2b7bca354babb09261de22165cdeeefe42b2572d782a41407ece5043b7f319e926b838574838be1b876625c11705247719eba8a41257fc79cd4f6a7f8da55cab22d1580636e9fdc10a3c2a573e5a98cd1a0507aca46e2714b397cbdb093df564d7738a36c999bcd3559a4bedcffffcc2e6b7586027003ad1ee0776d9267336c7d1a02be18332b7e14f329ca18b6112a01e23c759d2e1443306e99aeb40e249b5dc8b49764915538e369ce5bb7f2872196eeb810c6120f9fc075eceed823dd6417e189ed44902f24be09b94ef4e5589ecfb67836e4368a01fd197802f73fdd50d1f22c51e57e9accb5e8b12e23019772f8fbf5f3e50e5b4403d985165080de88725a6c33139e6500a0110db2de04777570aa95c026468ce1b1360f5559e12c4f026bf2f1d5276f086d45cf630778dcd66ec7bdaddd1bcc5930ec5067a1d391fa9ca961480e2fc55b7cb9fe5427c5f7d13c229f2269f9f5210aa67a9dc84e6a4a4ac089114d6a1f998e3f3ed61e519fcc871e7737b21291043ed46f02bc16d2bed2d93d8b88d0fd45c9fa0a7107e8b19dc527c89f91e3df2703d0c3727c99aab676649909cbf516a2d5014eb1882e278c748d44f9585c880ec4794a4424ede4d2081a3e305bae72869a2729dead811d536c4653446e668440844a285aa08510bed7b8e682c00d2b64458f34d0ca83e2e779c83863f597ccb59db40147a86ef8827ade12d0ebbf5a17e00fac8b9e39144a6361d76bc90bfb384afa69b01f5b988f1dcd6cb00bf9d38e07d9ba0869559231a7ad7267887856cf9fac67fcb6e1e7e829b05142cd3c8c39f099323d49ac535fb58408e85f51908bdadfae03e957a99a89f9c6f3dd25031b3eedc8df6ab73d4e7670336094f17e278573437a5650f031380aa4ebba3ef34a7aa03081730e5d445c8d637eb108979a19c0a1034b5db363cadba72c0d31bfefcbc575365725267b57c7df6350ae6662dc52beff4567847403ad30b092f429bd686837274423b9133d7ea040a15f5b90671194bc46e0ed9b6d6f056b7799e59933ae144010b1af12a1142d84b0d4515bd2df3ee9dfef1e3faf2d5f9cf44bd0af1f6b10b8392f908e7133eed9e3fb5e1b8dccfd85af7b9d2b2cec4e1bfbf82fb94203485d9677f96846960451e695fbd0a880dcb24846a66324d3fe58e523450cb850da8afe4e54dfe41ea337512880901376b082be2835c5ba22b81b87c451309ce7928d0861cd1a451ebaec3a6907b4524e4222c1970640b96861088804f9eb6d55d64af232265ef9f5b7810787982436cb07d1540509f9edbdd671ae766314541715c9c8432ff0866afd11250252c99645633e85c270703ce1d92cce7047f4a11a28dd50e4340c937be4e3c323f86792d76bf43d16e18cec7a0929119fa4258a71839ca4f87eb3c2360e964f56c0e969f62090daba6726763b1ef979c777265c2090c618067b93cdf426b8f87c5995296ab034a61e0299a8af644a875581f842b6abab06cccf0a718030bc828038b4046a5de8e2a736d1202c18c55f11fa4060dd50a6352a2e1f2b5c36f4f0b2d9e3c1b99883f9f6d0cebef7ef8ef6ab40619fbf014ebcd2729827918d812682fd9c2a0598b2e8a1f1ebe8b2cec5e50df80e8d0c56ab7853c9adee2ccfea81ded39998d4518c2cd91a500e4b3885be94c088be6908517ea764be7ef5a635c23e023df4021bff2172deb8e94c5dda36291e90b75e25cdf5c310e6e06f426e1e4c97cd67e5947e2e40166d1637679f21b76e7207c358df039b5b3e194ff9bb31a839bde52c74cefa575c498e6a631cc80e468cafdf2d78b60036bfee559f6ea7df2a53791b1fd52e9d7a7f40fda5b9ac223ac2fd6191f4585f313f1748f005a9e2e5e90ad772f18cf4683d7977eca85668196c6218aa6e9a92b9d8e54eb1c99ab06dcc1f9ec72f95546add4d8af92a3fc161f84ed172d1b28a854201add1d28955c7cd2d9d45b0ca59fd9f8475ad897a563b3f9f73632f2ae2093781ec04b55be1dea18f6abf9ef21eb6ed81ec84b50dc6ea8cea735f50db81b9ff6fb28289ad3e24d3ff6eebc679b36d1fe136102dfa146e9e2586902360ef8c24d7a33897443edd70def980e665fc03ca4f4278ca72183805223e3086b0559e1062ceb96e26b9dca43d0f94ade40c9548fcefc0a73194bc8ed5faf63d122948e2b38c7c891f1ad8dcd1121eb33a267072a0c7826ddfeed4cc6ea1f86fba63a90dfb25e169dda489cc9a6955cf0b3aec1dba217201a44d08705a8d7416ea0aa72a74870e3bff1752836383a9842902b8301303472a9111d7c9ecb064df3511e838d27342f2a799568b62ff0518efb4242ef166f758270b4e0983d8484b7d9a636f1fb5323009b30a3faafd5c46d661b32a6499b263c755223e7fdf10f5c9203de24ab7e17567e7a9ab4682f65947ac5077f75e417935ed9fc49300bda899eb4b94b16eb837aff8b099a4be3979c452da74d6a6691ea53d4d6b7d35a5f8392eaaf1f61f2df9a846b2d1da74cb5d60cba5ad5b9b537703e6429a0d4660135449cb133ea22583e533d2b091f0f918aff1e2312e1167b3b23dab8f3bf6e013764a0d51e2e236a0b977bc3cb2022027b0d0d0c04562c403204b16918ff348596b6678066cb4dca3a9de0aed9dcf5c6e6e46533695d7a4d64946a3016391fb60855fc1a786b272ef0abb6550e40c86937cb0902835772dee14e15b53ecf4f45e7820f43c76e26ba03b0df458e1f5cad540e5d7dde60c5e8899231f6d58546cf6d89039997915624c13342142dd460fa64934fe8b6c43e22036c9dff87db854a9e3ccee5224c830cbcefcbbcd62d8b18801968bd0095ff7328deb38500c08ee635bce895c61da5bc5ff83dfdcd53cd49817f01b2bde7bd43bc093d29c4439c5a6de19cb145fde2401b628b94209f90dd9c6c168ac4a4ecf1f9854d2f83721135a083c15b9d567a9abf18fad8a89bcdc450f7a145d945aaca8b9f27cdf7ae389d07c4ee0338efed1eabcfdf054a024a02d6500af74f62d5c0e37666de0e8940d6f98b62807c21260c3f12122751381443586f6d2616e081f51dddf88d3f2dd7b40f625bd8b4e17e00a939eaef5bd42c40098643eaf5de9e310ed437d4fe6550cb4dfe8104c65f5475da0eba683f002d995f991c04c9cc13ff35eeafd0ef2422545b7326cd0feaf3689ba8c5442f882d1445d07fae0b81b2158d61c063ea6ab242e226506ab863b8f01e6982be24d694ec4c40ff9eef6133d231a21c25fbbe6319eb955d266e2bff03c226a3f191f3a930c522e91c273a05759ef56ec4d42c7a1a6c51255191b02857f1849ed77b7709ad8ace3b0eb5f3f854ee93efa2abf2fb41673b96b0b7cc15455ef6bc356534540e99c22fc3ccee276d4d1ff97fe9b0137f4763114ed161bb142420a16fed0e2adbd607ae857192ac512009cb15e6bf395ba809448b444a5a9d9c89a1b3ad612042b11c6e503ee121a0156aa2f3ee8059b2f66106bab643a8c8deff8311b1f43c37bfa331ea52309cb91a343ec0914eb625ff5ba3846ff0fb04aafc43be21a79d5a1f5485aa2482c9e4b6b15e04137ece04965524371c223bb5c65cb75e73470806413fa42edb7e4c4292406058437ba602654fea87203586051573c639fa5ca8c7bd3b7e03faac4e026050163bcd174e476d94180b68aa36c2556aa244e25f44fa33d51e35f781335136b5099fa7fa5d4f6a6363f12c6bb0485d2c81ad06694c7cc068fe44a8650fc15e8c208089018ec1f0367365b1af2e42cfc8b42a1f8a8dbfeb6dfdd5e3be63b4a9615024e1fe43db5f97634bebec2d5b6a2ae263a1a4838a43494f1dc0ff04d62cc4579951d5fe3817af2f97401c0fdd7fe46fed0628833002f168561d9c049c4f35cd81aaf2cb35c32233be1b884ccbcb3c6b8008b5821e955c81ca74f1e608e2938982dbf96bacbc7b3d4a9ba283731e9190b9d83fbec79aea302a15aa534a9a0e31a5c3c41245f4c2346a8e2ff416414cb89f586104f59b8154a4533434cbf3c554b56e1cb0f44ad4088dfeee04e9bb35a445b3fa2b8427ed42139d2abfc42425ce9caf94a22720943fc699b08141cab9732e763ce6a9806a024352604de1fa79427d6b698328021d9f5c70a778d1e8027db274323253e4e9429a9fc714cd383e9d884689a4fa0110bf9f861c1665393848cb9bfbabce998aa6194fd4311bff59dd8e669cf5fac5ea0a0", @typed={0x8, 0x6c, 0x0, 0x0, @fd=r0}, @generic="7795cfd796459ad29a7daa3144039c7d8a028cce0a5aa9fc5cea13d61b7a540b7d97cd59642424f32013a17d9d7c604cf9f8292844726e40c4c2cb92adb6c2bbd42a8ddb1957f4a31e2a5389194e66dce73223a2d2ff3a", @generic="1f936bc96ab1ad90e5a801d49de1e8704514f05b4a54e48dfc84773766d0b66d058c08e3d00b8d2cb9b1939b7b4820ec1d94c245e35c8d08620eb8431e3a7aae356c4c30b44d60313822b01b69a1c3f4bf96ae13288e8656355c0b33cda0431306380118a08ceb9d9220e4e4ad9b279afe80cf4ab44d6897a27ea738fe79b73e8cf2f46b720b97d4d2a42c7e0c5f93b16320d8bd284f02c9e3880f6d3f7a309b653c43ea26be9a7a2dffd6982ce6c87d4ce6dad248ba3ba4925a19373d", @generic="33890fa33f82b9d599a1d1587a8d3912e3890bd93916e134397b7f9e3e6c2cc547366f7a8c519a5bc46ea1da90ce23453dbd8c22b783b9ab28d4dae9ba7dd61f5a690e7b282726ab25807aecae67535cef43ce4d81ee7e6a43ab610160f503d2c50d3098ab69b572b7341ca5f6fd8a8234b861b19df942bf15d3bc301e7634999ac09764a0899137a9462815805f5fdafb59b3f412b38fc446", @generic="e970cd3869a7f417189622dba674f3fc97c5901f3d4782feed52ba918c74ed1494204f57126f5a389181e9daafc941812193df0067f034a9e3e5943aa1eccd790227d0d69c135f676876fdbb6bfd40", @generic="3e320bf59e4bb9fb55dafddb500b06cce01083cfba070f277b329e9fd7914eaa3f83070501e90d681d2e8b17354923ab8eeb9fd77d28a129d65465080ecbd923e8d6dd18f196d729540a6fb6ee16a2e9b4ec54792f188882bf1a75bb55fa80509e6daaf8b32ab27a30db23e90b5166330bbd2259ff854bc3a8d085f48009a450628a91e5a461de9afba78ae5bbc05615e26e246d7123d09b2e2bb1d33ca08823b40ffd4187bbb4d97b4563b5801d7f6d67221ea5c044746d47d84988"]}, @generic="8b0e2497b03dec7540102573ef08b9f76ded8856f149756cb264062ccb72e624a40305a3a438a6f17e95baddeb00a753e27f801d51eae3731c6af30a65d6954d7b89606354e03164ff4da17727eac5ba17b1d35072cff9431320bfd834976efe75d70422398f96009f4e78f4e85d6b1e1b9ad4733c40b980fb5c0ef8577145b5ee177a02b46acb25abea36"]}, 0x1474}, {&(0x7f0000001640)={0xf8, 0x28, 0x0, 0x70bd29, 0x25dfdbfd, "", [@typed={0x8, 0x62, 0x0, 0x0, @pid=r2}, @nested={0x4, 0x72}, @generic="1303dcecaeab17b172e341e4023ff731c7b5e587bddf8143c407bb84aab0c729d7e092575260f7a92dcc07065f2a23a309e824b7aed8819fb2917cd057f328ba3dd68936075a3684089187cdb55eb0bf86d08e7557885cd0662d87c613c1c5cff1dcec43", @typed={0x8, 0x93, 0x0, 0x0, @ipv4=@private=0xa010100}, @generic="b8d3bc3a918adacae774ea3645106093bf657afa45c7474e6a81fe50db614c162d6359ad69ea868034597e509fe77fc37f7648ec5cf23a5196071e5914a30931dbe4649aafa15951217dd3b9b22a6d340bf3d6bdb0f46747cec78ccf628fd486e65300"/110]}, 0xf8}, {&(0x7f0000002140)=ANY=[@ANYBLOB="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"], 0x1e0}], 0x4, &(0x7f0000002080)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r3, 0xffffffffffffffff, r4}}}, @rights={{0x2c, 0x1, 0x1, [r5, r6, r7, r8, r0, r0, r0]}}], 0x68, 0x40084}, 0x40000) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r9, 0xc266a4723dd56b93}, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002380)=ANY=[@ANYBLOB="1ebbe34bd1ccd40e8bc180010089f22c9700", @ANYRES16=r1, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) (async) getpid() (async) sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) (async) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x22, 0x2, 0x6c, 0x3f, 0x0, 0x7fffffffffffffff, 0x81659, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x81, 0x3, @perf_config_ext={0x8000000000000000, 0x1f}, 0x40180, 0x3, 0x6, 0x6, 0x101, 0x3ff, 0x20, 0x0, 0xfffffffe, 0x0, 0x7}, r2, 0xb, 0xffffffffffffffff, 0x0) (async) getgroups(0x6, &(0x7f0000000140)=[0xee01, 0xee00, 0xee01, 0x0, 0xee01, 0xee00]) (async) getpid() (async) sched_setscheduler(r3, 0x5, &(0x7f00000001c0)) (async) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x22, 0x2, 0x6c, 0x3f, 0x0, 0x7ffbffffffffffff, 0x81659, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x81, 0x3, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40180, 0x3, 0x5, 0x6, 0x8, 0x3ff, 0x20, 0x0, 0xfffffffe, 0x0, 0x7}, r3, 0xb, 0xffffffffffffffff, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001840)=ANY=[], 0x180}}, 0x40000) (async) syz_mount_image$befs(&(0x7f0000001740), &(0x7f0000001780)='./file0\x00', 0x8, 0x3, &(0x7f00000024c0)=[{&(0x7f00000017c0)="3914a058f1f5fc5d75e1b32d30755838cd65f93186958670e63485ed2addde9a57e6", 0x22, 0x1}, {&(0x7f0000001800)="42a6ee6b6e4c64023da30a80b70aaf4ecb3c23a76c6107404d490774d6", 0x1d, 0x2}, {&(0x7f00000023c0)="b18e86448be912eea19f88be0c499356730e707780c515e600247c55dd3d574198d0299d4860593bbdcb2e9fdac013636f64b69305cd3928b8ea4bffcbecda09d74b1483bb1e44f7d995c934c3deacbe336fda9aa26e6236fde2c27759dc38cb0eb02c956b342a857d16992c9f42596998c84f0173580a95a0f4889d692dcf422bf0c11b68260479d23087ba69978bd578af0ea2eca6545b3ae6e7dc917be3133819dd04dd70cea4dcc7554cb4de3e2820449b5e9e1c95f97807c8ac8532e6544f0c7718ef5a8da7", 0xc8, 0x6}], 0x10011, &(0x7f0000001880)={[{'IPVS\x00'}, {}, {}, {'IPVS\x00'}, {'-w*'}, {'#}:'}, {'-}\\.+/'}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfshat={'smackfshat', 0x3d, 'IPVS\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'IPVS\x00'}}]}) (async) syz_mount_image$ocfs2(&(0x7f0000001900), &(0x7f0000001940)='./file0\x00', 0x0, 0x7, &(0x7f0000001f40)=[{&(0x7f0000001980)="badd60c0097d219f04ba5e260ac50cf68af0be026ffe0e8ff268830fa238c9d456b135b0fdfa9304e4ea84618ca04f60f804359fc49932b5da039936e91a30b37f48eee9d7a6f927ea33d9a9602f66b3b213d15201f5782c123e73a9b4", 0x5d, 0x58}, {&(0x7f0000001a00)="351891edcdb7806e97d759ad44a05eb8bddc7c7b986132f32717455de4f8bc2dda5a9b9f57fddec4bfbbd83f1c96c308502d1959029c5f1364d9960d45211863f6f15df7830b2d8878f122c90c7837cbb7e57a1dbed5b56370e0ac4b6c38aada7f17c20ecd6f696047dfb8f9b1b16ea218e8c649685c46996bc7370cacf05287404e462d12ada619ee96db4dabd60682642c69e6527129eeae54eefe22fca4ca969b7f0f9a435ea1236c7ccba432b1c58547afcc644c042c2df025fdcce2ff5a36103e51a213f88f", 0xc8, 0x1}, {&(0x7f0000001b00)="126cd17d8f352bbfe816a7d9de5a0f6657352a9da316c19fc0c9c1029b9115043f0b227052383942c2b082a57033c5e2c9dc8c2baf1739cdb074bb988d204310c1f12815019212a43dc1558fcdd005c0e81a07b2d80d483a516f1e0edac792fa4df7a46dcf282944689d5dc03482326282502093f9a02fbed50ca19e9ab26bcaa099853005fe5075012ae6edd2d5f73ced9004844b734e456b3bd456", 0x9c, 0x8001}, {&(0x7f0000001bc0)="fe64595ad8a87d8a86a66420fdd2a4558cd0c92067f5e736035bb318515ac88d974ea2e8c3b5b1260970c99c15a4cd9f371bcf42a5614c98a81b1f31b47e521082620dedf8d564e2f63769dfc88f35662f3b6d0342bcc611d2d46ff222fccccb9093d7e2fc96b78ee2e29f45ae75aaf4157eb3a2c967f06762088d8b2eaf01142d7b143e494a2f1ebc79f1d60ebc2dc1740d97604c88bc792f60f1c852c8eb1c1e179b496fe83e90ef3e56f40ebb852dfaeb167431de10b587d105a485824cbc8ddca77f236b9fd28e22b57bd1f3f1cc580301d3a49703", 0xd7, 0x200}, {&(0x7f0000001cc0)="4ca63814d872531a13056207b993d6b2171dd2b6d0e398023f9b167655f5ab6d8000e4d58138925319b4f82bf5c3f0e410765561371e976355c9a33d27284e00bdaf8f6d2833cccf7e43497dcb7b484b26851b59cf713ca7d3f016e90068cd8a48bdf6f085a61541f9e31453ca0c3396141e4fd1764d3fb51cdba7e8d781e178fcaf9898b49cad83fe1d7ec4c17a634a13f9a2407efbea2d92db8db9a6c813a214da68f0dc9177bbdf6684043255c54b8023c7be73e06cb7acea60aba39c9404dd8ed9599b8d7979", 0xc8, 0x100000001}, {&(0x7f0000001dc0)="296ec02b94d8b4b9870901da6860df39156325abfe8ad8b7ef1096385dd9af20f0d34f7b6749e46e3b63a327f487f46343059245c483263c7344382b1e62f0a37864df05c44d2deba8344973c8abbcebb3a93076f4913927cf10a1d75e6ffc5d468e491e26f057a02de046f278ed685eb338a099c9d57c5897d8fc05bf7848e2f95ede4e4234d56b6a30af131e6501785024d5905afa572a79a9e752d7916d52d5bb0b3b5bc17a6c562c1cab6954800a947977aaa91ecbc93cc33fc8e6a9253604cd78b800aa84e38759d097161c42f1e2629b8b0434ad11", 0xd8, 0x4}, {&(0x7f0000001ec0)="96b2d92faaaa953ede1064fa86b6b9b1a8d5cde230b5b649444fade3543f7432d2fa3419fcdc9b57538b4bb6e6ee66edef5469bc45a2272a90429b6aa84788de0bd44e9317c875667b40", 0x4a, 0x5}], 0x0, &(0x7f0000002000)={[{}, {'+'}], [{@subj_user={'subj_user', 0x3d, '\xb6\\\'}\x00@!'}}, {@uid_eq={'uid', 0x3d, 0xee01}}]}) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000002040)='ns/user\x00') (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002340)=[{&(0x7f0000000040)={0x18, 0x12, 0x10, 0x70bd29, 0x25dfdbfd, "", [@typed={0x8, 0x4f, 0x0, 0x0, @u32=0x7}]}, 0x18}, {&(0x7f0000002540)={0x1474, 0x2e, 0x100, 0x70bd2d, 0x25dfdbfe, "", [@typed={0x3f, 0x6, 0x0, 0x0, @binary="ddea0dd62b62335382c54ab099cf1840005610a45353ae5c238a87b8ba8364ee8353af2b8fee40c3057004d4a5ef27f6bc7f851f274a0e394d8562"}, @generic="a89dfba3394d1ab392151d1642e91084ed77e7e2bfd27997812a9737af07e84608756f3cd5b01cf047e77e51a7c712af90b6f2c18d4ee62a7b817088cb5c379c8c028b0aab4c01b0e11647386197587068627e48a200d29d1fe72d7adaa2a6611e61965f7504a046cb40f89fbe4c8ee1b01af49643f0ca43b2f918477c4d2b345cbf92eae6965a605493dc77dfb371010517e7ce0cc581dcb75c2ff696fc1683e6e0821d7e565e86cc7cd054574470be887cdd7a0a83ac0e6128fe94ce26b1a93088ec3155144eb51e83", @typed={0x8, 0x23, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x40}}, @nested={0x12c4, 0x1d, 0x0, 0x1, [@generic="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", @typed={0x8, 0x6c, 0x0, 0x0, @fd=r0}, @generic="7795cfd796459ad29a7daa3144039c7d8a028cce0a5aa9fc5cea13d61b7a540b7d97cd59642424f32013a17d9d7c604cf9f8292844726e40c4c2cb92adb6c2bbd42a8ddb1957f4a31e2a5389194e66dce73223a2d2ff3a", @generic="1f936bc96ab1ad90e5a801d49de1e8704514f05b4a54e48dfc84773766d0b66d058c08e3d00b8d2cb9b1939b7b4820ec1d94c245e35c8d08620eb8431e3a7aae356c4c30b44d60313822b01b69a1c3f4bf96ae13288e8656355c0b33cda0431306380118a08ceb9d9220e4e4ad9b279afe80cf4ab44d6897a27ea738fe79b73e8cf2f46b720b97d4d2a42c7e0c5f93b16320d8bd284f02c9e3880f6d3f7a309b653c43ea26be9a7a2dffd6982ce6c87d4ce6dad248ba3ba4925a19373d", @generic="33890fa33f82b9d599a1d1587a8d3912e3890bd93916e134397b7f9e3e6c2cc547366f7a8c519a5bc46ea1da90ce23453dbd8c22b783b9ab28d4dae9ba7dd61f5a690e7b282726ab25807aecae67535cef43ce4d81ee7e6a43ab610160f503d2c50d3098ab69b572b7341ca5f6fd8a8234b861b19df942bf15d3bc301e7634999ac09764a0899137a9462815805f5fdafb59b3f412b38fc446", @generic="e970cd3869a7f417189622dba674f3fc97c5901f3d4782feed52ba918c74ed1494204f57126f5a389181e9daafc941812193df0067f034a9e3e5943aa1eccd790227d0d69c135f676876fdbb6bfd40", @generic="3e320bf59e4bb9fb55dafddb500b06cce01083cfba070f277b329e9fd7914eaa3f83070501e90d681d2e8b17354923ab8eeb9fd77d28a129d65465080ecbd923e8d6dd18f196d729540a6fb6ee16a2e9b4ec54792f188882bf1a75bb55fa80509e6daaf8b32ab27a30db23e90b5166330bbd2259ff854bc3a8d085f48009a450628a91e5a461de9afba78ae5bbc05615e26e246d7123d09b2e2bb1d33ca08823b40ffd4187bbb4d97b4563b5801d7f6d67221ea5c044746d47d84988"]}, @generic="8b0e2497b03dec7540102573ef08b9f76ded8856f149756cb264062ccb72e624a40305a3a438a6f17e95baddeb00a753e27f801d51eae3731c6af30a65d6954d7b89606354e03164ff4da17727eac5ba17b1d35072cff9431320bfd834976efe75d70422398f96009f4e78f4e85d6b1e1b9ad4733c40b980fb5c0ef8577145b5ee177a02b46acb25abea36"]}, 0x1474}, {&(0x7f0000001640)={0xf8, 0x28, 0x0, 0x70bd29, 0x25dfdbfd, "", [@typed={0x8, 0x62, 0x0, 0x0, @pid=r2}, @nested={0x4, 0x72}, @generic="1303dcecaeab17b172e341e4023ff731c7b5e587bddf8143c407bb84aab0c729d7e092575260f7a92dcc07065f2a23a309e824b7aed8819fb2917cd057f328ba3dd68936075a3684089187cdb55eb0bf86d08e7557885cd0662d87c613c1c5cff1dcec43", @typed={0x8, 0x93, 0x0, 0x0, @ipv4=@private=0xa010100}, @generic="b8d3bc3a918adacae774ea3645106093bf657afa45c7474e6a81fe50db614c162d6359ad69ea868034597e509fe77fc37f7648ec5cf23a5196071e5914a30931dbe4649aafa15951217dd3b9b22a6d340bf3d6bdb0f46747cec78ccf628fd486e65300"/110]}, 0xf8}, {&(0x7f0000002140)=ANY=[@ANYBLOB="e00100002700000129bd7000ffdbdf2508004d000300000088018682fd38bc07f00c1bab748faaf5a531d92b2bff363d5c78003dce786af0cdc53d66766343b31f783ef0cb3886e49fda58eaffffff7fe96f5d59f5a8a04a562cdb13aa638a6f5f402a581bdf0f8251db895246458caba589539851045eb91f14bd6a039a40f46b0d64a5186ba5df08a291bee50cac7e6f93f50bae99a26f68f6cb73b00be7519ff47b34b96f7a06af03dbcc53580580882ea248ce06871eee2ef6d1933ee1b820d40ee9cb989f63ba09a52a519cadaa17183852d582f1db3b81e00b76ae5f88a5739c9b28431cfd0d1a8925ef006b8014005a00fe8000000000000000000000000000bb61f6cf4e438f3953ebfef93392990352f1db55cdb46a9f5bcbf8dd544c62232bf3a8c5b22d239600c883bd15eac4e4534752069228b1108b51c43b0c008ba355be7c255efa3337335fdfd01f966e0e3d65a01805c0d38c8b6567f3c503f11b1f41ce4b5129de071ae520d0eccecff5686ef78dc829767d6044f726c5c7cc465589dd916058dc0f4e1f68eebb8d137efab25ead69bbf4b7c25ef245827ec35fe0e422596f30144f8d26855c944367d5706669592f29050265fe8a63a9e907b22b8dfe62cab75c8050d298fab66c0004005580"], 0x1e0}], 0x4, &(0x7f0000002080)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r3, 0xffffffffffffffff, r4}}}, @rights={{0x2c, 0x1, 0x1, [r5, r6, r7, r8, r0, r0, r0]}}], 0x68, 0x40084}, 0x40000) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r9, 0xc266a4723dd56b93}, 0x14}}, 0x0) (async) [ 511.457951] attempt to access beyond end of device [ 511.471649] loop1: rw=1, want=128, limit=15 17:36:08 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x4c00, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) [ 511.525620] hfs: part requires an argument [ 511.534398] hfs: unable to parse mount options [ 511.547397] befs: Unrecognized mount option "IPVS" or missing value [ 511.559249] befs: (loop3): cannot parse mount options [ 511.630120] (syz-executor.3,6851,1):ocfs2_parse_options:1499 ERROR: Unrecognized mount option "+" or missing value [ 511.645622] hfs: part requires an argument [ 511.654783] hfs: unable to parse mount options 17:36:08 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x208300) [ 511.684321] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 511.700726] (syz-executor.3,6851,1):ocfs2_fill_super:1225 ERROR: status = -22 [ 511.709267] attempt to access beyond end of device 17:36:08 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x6000, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) [ 511.732611] loop1: rw=1, want=16, limit=15 [ 511.737336] Buffer I/O error on dev loop1, logical block 15, lost async page write [ 511.740788] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 511.752690] attempt to access beyond end of device [ 511.753361] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 17:36:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x8}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) [ 511.784468] loop1: rw=1, want=128, limit=15 17:36:08 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x6800, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:08 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000011000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup3(r0, r1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup2(r1, r2) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f00000002c0), 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) recvmmsg(r3, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@un=@abs, 0x80, 0xfffffffffffffffe, 0x0, &(0x7f0000000080)=""/223, 0xdf}, 0x4000800}, {{&(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000001580)=[{&(0x7f0000000200)=""/143, 0x8f}, {&(0x7f0000003f80)=""/213, 0xd5}, {&(0x7f00000003c0)=""/147, 0x93}, {&(0x7f0000000480)=""/99, 0x63}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/128, 0x80}], 0x6, &(0x7f0000001600)=""/73, 0x49}, 0x2}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001680)=""/14, 0xe}, {&(0x7f00000016c0)=""/158, 0x9e}, {&(0x7f0000001780)=""/204, 0xcc}, {&(0x7f0000001880)=""/213, 0xd5}, {&(0x7f0000001980)=""/72, 0x48}, {&(0x7f0000001a00)=""/147, 0x93}, {&(0x7f0000001ac0)=""/33, 0x21}, {&(0x7f0000001b00)=""/217, 0xd9}], 0x8, &(0x7f0000001c80)=""/253, 0xfd}, 0x1}, {{&(0x7f0000001d80)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001e00)=""/66, 0x42}, {&(0x7f0000001e80)=""/175, 0xaf}, {&(0x7f0000001f40)=""/93, 0x5d}], 0x3}, 0x40}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000002000)=""/238, 0xee}, {&(0x7f0000002100)=""/160, 0xa0}, {&(0x7f00000021c0)=""/60, 0x3c}, {&(0x7f0000002200)=""/235, 0xeb}], 0x4, &(0x7f0000002340)=""/125, 0x7d}, 0x9}, {{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f00000023c0)=""/226, 0xe2}, {&(0x7f00000024c0)=""/167, 0xa7}, {&(0x7f0000002580)=""/72, 0x48}], 0x3, &(0x7f0000002640)=""/157, 0x9d}, 0x1}, {{&(0x7f0000002700)=@phonet, 0x80, &(0x7f0000003d00)=[{&(0x7f0000002780)=""/12, 0xc}, {&(0x7f00000027c0)=""/124, 0x7c}, {&(0x7f0000002840)=""/125, 0x7d}, {&(0x7f00000028c0)=""/211, 0xd3}, {&(0x7f00000029c0)=""/37, 0x25}, {&(0x7f0000002a00)=""/221, 0xdd}, {&(0x7f0000002b00)=""/229, 0xe5}, {&(0x7f0000002c00)=""/4096, 0x1000}, {&(0x7f0000003c00)=""/215, 0xd7}], 0x9}}], 0x7, 0x60010001, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000011000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) dup3(r0, r1, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) dup2(r1, r2) (async) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f00000002c0), 0x0) (async) socket$pptp(0x18, 0x1, 0x2) (async) recvmmsg(r3, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@un=@abs, 0x80, 0xfffffffffffffffe, 0x0, &(0x7f0000000080)=""/223, 0xdf}, 0x4000800}, {{&(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000001580)=[{&(0x7f0000000200)=""/143, 0x8f}, {&(0x7f0000003f80)=""/213, 0xd5}, {&(0x7f00000003c0)=""/147, 0x93}, {&(0x7f0000000480)=""/99, 0x63}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/128, 0x80}], 0x6, &(0x7f0000001600)=""/73, 0x49}, 0x2}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001680)=""/14, 0xe}, {&(0x7f00000016c0)=""/158, 0x9e}, {&(0x7f0000001780)=""/204, 0xcc}, {&(0x7f0000001880)=""/213, 0xd5}, {&(0x7f0000001980)=""/72, 0x48}, {&(0x7f0000001a00)=""/147, 0x93}, {&(0x7f0000001ac0)=""/33, 0x21}, {&(0x7f0000001b00)=""/217, 0xd9}], 0x8, &(0x7f0000001c80)=""/253, 0xfd}, 0x1}, {{&(0x7f0000001d80)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001e00)=""/66, 0x42}, {&(0x7f0000001e80)=""/175, 0xaf}, {&(0x7f0000001f40)=""/93, 0x5d}], 0x3}, 0x40}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000002000)=""/238, 0xee}, {&(0x7f0000002100)=""/160, 0xa0}, {&(0x7f00000021c0)=""/60, 0x3c}, {&(0x7f0000002200)=""/235, 0xeb}], 0x4, &(0x7f0000002340)=""/125, 0x7d}, 0x9}, {{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f00000023c0)=""/226, 0xe2}, {&(0x7f00000024c0)=""/167, 0xa7}, {&(0x7f0000002580)=""/72, 0x48}], 0x3, &(0x7f0000002640)=""/157, 0x9d}, 0x1}, {{&(0x7f0000002700)=@phonet, 0x80, &(0x7f0000003d00)=[{&(0x7f0000002780)=""/12, 0xc}, {&(0x7f00000027c0)=""/124, 0x7c}, {&(0x7f0000002840)=""/125, 0x7d}, {&(0x7f00000028c0)=""/211, 0xd3}, {&(0x7f00000029c0)=""/37, 0x25}, {&(0x7f0000002a00)=""/221, 0xdd}, {&(0x7f0000002b00)=""/229, 0xe5}, {&(0x7f0000002c00)=""/4096, 0x1000}, {&(0x7f0000003c00)=""/215, 0xd7}], 0x9}}], 0x7, 0x60010001, 0x0) (async) [ 511.888922] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 511.900250] befs: Unrecognized mount option "IPVS" or missing value [ 511.911471] befs: (loop3): cannot parse mount options 17:36:08 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x208500) [ 511.973872] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 511.991707] attempt to access beyond end of device [ 511.996869] loop1: rw=1, want=16, limit=15 [ 512.004713] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 512.011761] attempt to access beyond end of device [ 512.016899] loop1: rw=1, want=128, limit=15 [ 512.167070] attempt to access beyond end of device [ 512.173448] loop1: rw=1, want=16, limit=15 [ 512.177980] attempt to access beyond end of device [ 512.184803] loop1: rw=1, want=128, limit=15 17:36:08 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000040)=0x2, 0x2) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xb, 0xfffffffe, 0x0, &(0x7f0000000000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000040)=0x2, 0x2) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(0x0, 0xb, 0xfffffffe, 0x0, &(0x7f0000000000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) 17:36:08 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x6c00, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x9}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:36:08 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) futex(&(0x7f0000000040)=0x1, 0x4, 0x2, &(0x7f00000000c0)={r0, r1+60000000}, &(0x7f0000000100)=0x1, 0x0) clock_gettime(0x1, &(0x7f0000000000)) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 17:36:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002380)=ANY=[@ANYBLOB="1ebbe34bd1ccd40e8bc180010089f22c9700", @ANYRES16=r1, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x22, 0x2, 0x6c, 0x3f, 0x0, 0x7fffffffffffffff, 0x81659, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x81, 0x3, @perf_config_ext={0x8000000000000000, 0x1f}, 0x40180, 0x3, 0x6, 0x6, 0x101, 0x3ff, 0x20, 0x0, 0xfffffffe, 0x0, 0x7}, r2, 0xb, 0xffffffffffffffff, 0x0) getgroups(0x6, &(0x7f0000000140)=[0xee01, 0xee00, 0xee01, 0x0, 0xee01, 0xee00]) (async) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f00000001c0)) (async) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x22, 0x2, 0x6c, 0x3f, 0x0, 0x7ffbffffffffffff, 0x81659, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x81, 0x3, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40180, 0x3, 0x5, 0x6, 0x8, 0x3ff, 0x20, 0x0, 0xfffffffe, 0x0, 0x7}, r3, 0xb, 0xffffffffffffffff, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001840)=ANY=[], 0x180}}, 0x40000) r6 = syz_mount_image$befs(&(0x7f0000001740), &(0x7f0000001780)='./file0\x00', 0x8, 0x3, &(0x7f00000024c0)=[{&(0x7f00000017c0)="3914a058f1f5fc5d75e1b32d30755838cd65f93186958670e63485ed2addde9a57e6", 0x22, 0x1}, {&(0x7f0000001800)="42a6ee6b6e4c64023da30a80b70aaf4ecb3c23a76c6107404d490774d6", 0x1d, 0x2}, {&(0x7f00000023c0)="b18e86448be912eea19f88be0c499356730e707780c515e600247c55dd3d574198d0299d4860593bbdcb2e9fdac013636f64b69305cd3928b8ea4bffcbecda09d74b1483bb1e44f7d995c934c3deacbe336fda9aa26e6236fde2c27759dc38cb0eb02c956b342a857d16992c9f42596998c84f0173580a95a0f4889d692dcf422bf0c11b68260479d23087ba69978bd578af0ea2eca6545b3ae6e7dc917be3133819dd04dd70cea4dcc7554cb4de3e2820449b5e9e1c95f97807c8ac8532e6544f0c7718ef5a8da7", 0xc8, 0x6}], 0x10011, &(0x7f0000001880)={[{'IPVS\x00'}, {}, {}, {'IPVS\x00'}, {'-w*'}, {'#}:'}, {'-}\\.+/'}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfshat={'smackfshat', 0x3d, 'IPVS\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'IPVS\x00'}}]}) (async) r7 = syz_mount_image$ocfs2(&(0x7f0000001900), &(0x7f0000001940)='./file0\x00', 0x0, 0x7, &(0x7f0000001f40)=[{&(0x7f0000001980)="badd60c0097d219f04ba5e260ac50cf68af0be026ffe0e8ff268830fa238c9d456b135b0fdfa9304e4ea84618ca04f60f804359fc49932b5da039936e91a30b37f48eee9d7a6f927ea33d9a9602f66b3b213d15201f5782c123e73a9b4", 0x5d, 0x58}, {&(0x7f0000001a00)="351891edcdb7806e97d759ad44a05eb8bddc7c7b986132f32717455de4f8bc2dda5a9b9f57fddec4bfbbd83f1c96c308502d1959029c5f1364d9960d45211863f6f15df7830b2d8878f122c90c7837cbb7e57a1dbed5b56370e0ac4b6c38aada7f17c20ecd6f696047dfb8f9b1b16ea218e8c649685c46996bc7370cacf05287404e462d12ada619ee96db4dabd60682642c69e6527129eeae54eefe22fca4ca969b7f0f9a435ea1236c7ccba432b1c58547afcc644c042c2df025fdcce2ff5a36103e51a213f88f", 0xc8, 0x1}, {&(0x7f0000001b00)="126cd17d8f352bbfe816a7d9de5a0f6657352a9da316c19fc0c9c1029b9115043f0b227052383942c2b082a57033c5e2c9dc8c2baf1739cdb074bb988d204310c1f12815019212a43dc1558fcdd005c0e81a07b2d80d483a516f1e0edac792fa4df7a46dcf282944689d5dc03482326282502093f9a02fbed50ca19e9ab26bcaa099853005fe5075012ae6edd2d5f73ced9004844b734e456b3bd456", 0x9c, 0x8001}, {&(0x7f0000001bc0)="fe64595ad8a87d8a86a66420fdd2a4558cd0c92067f5e736035bb318515ac88d974ea2e8c3b5b1260970c99c15a4cd9f371bcf42a5614c98a81b1f31b47e521082620dedf8d564e2f63769dfc88f35662f3b6d0342bcc611d2d46ff222fccccb9093d7e2fc96b78ee2e29f45ae75aaf4157eb3a2c967f06762088d8b2eaf01142d7b143e494a2f1ebc79f1d60ebc2dc1740d97604c88bc792f60f1c852c8eb1c1e179b496fe83e90ef3e56f40ebb852dfaeb167431de10b587d105a485824cbc8ddca77f236b9fd28e22b57bd1f3f1cc580301d3a49703", 0xd7, 0x200}, {&(0x7f0000001cc0)="4ca63814d872531a13056207b993d6b2171dd2b6d0e398023f9b167655f5ab6d8000e4d58138925319b4f82bf5c3f0e410765561371e976355c9a33d27284e00bdaf8f6d2833cccf7e43497dcb7b484b26851b59cf713ca7d3f016e90068cd8a48bdf6f085a61541f9e31453ca0c3396141e4fd1764d3fb51cdba7e8d781e178fcaf9898b49cad83fe1d7ec4c17a634a13f9a2407efbea2d92db8db9a6c813a214da68f0dc9177bbdf6684043255c54b8023c7be73e06cb7acea60aba39c9404dd8ed9599b8d7979", 0xc8, 0x100000001}, {&(0x7f0000001dc0)="296ec02b94d8b4b9870901da6860df39156325abfe8ad8b7ef1096385dd9af20f0d34f7b6749e46e3b63a327f487f46343059245c483263c7344382b1e62f0a37864df05c44d2deba8344973c8abbcebb3a93076f4913927cf10a1d75e6ffc5d468e491e26f057a02de046f278ed685eb338a099c9d57c5897d8fc05bf7848e2f95ede4e4234d56b6a30af131e6501785024d5905afa572a79a9e752d7916d52d5bb0b3b5bc17a6c562c1cab6954800a947977aaa91ecbc93cc33fc8e6a9253604cd78b800aa84e38759d097161c42f1e2629b8b0434ad11", 0xd8, 0x4}, {&(0x7f0000001ec0)="96b2d92faaaa953ede1064fa86b6b9b1a8d5cde230b5b649444fade3543f7432d2fa3419fcdc9b57538b4bb6e6ee66edef5469bc45a2272a90429b6aa84788de0bd44e9317c875667b40", 0x4a, 0x5}], 0x0, &(0x7f0000002000)={[{}, {'+'}], [{@subj_user={'subj_user', 0x3d, '\xb6\\\'}\x00@!'}}, {@uid_eq={'uid', 0x3d, 0xee01}}]}) (async) r8 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000002040)='ns/user\x00') sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002340)=[{&(0x7f0000000040)={0x18, 0x12, 0x10, 0x70bd29, 0x25dfdbfd, "", [@typed={0x8, 0x4f, 0x0, 0x0, @u32=0x7}]}, 0x18}, {&(0x7f0000002540)={0x1474, 0x2e, 0x100, 0x70bd2d, 0x25dfdbfe, "", [@typed={0x3f, 0x6, 0x0, 0x0, @binary="ddea0dd62b62335382c54ab099cf1840005610a45353ae5c238a87b8ba8364ee8353af2b8fee40c3057004d4a5ef27f6bc7f851f274a0e394d8562"}, @generic="a89dfba3394d1ab392151d1642e91084ed77e7e2bfd27997812a9737af07e84608756f3cd5b01cf047e77e51a7c712af90b6f2c18d4ee62a7b817088cb5c379c8c028b0aab4c01b0e11647386197587068627e48a200d29d1fe72d7adaa2a6611e61965f7504a046cb40f89fbe4c8ee1b01af49643f0ca43b2f918477c4d2b345cbf92eae6965a605493dc77dfb371010517e7ce0cc581dcb75c2ff696fc1683e6e0821d7e565e86cc7cd054574470be887cdd7a0a83ac0e6128fe94ce26b1a93088ec3155144eb51e83", @typed={0x8, 0x23, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x40}}, @nested={0x12c4, 0x1d, 0x0, 0x1, [@generic="10c9ffa4e27d1f6632998e950a4615e4d49a1fa8836ee2a96b2700bc6a961210e261a6eeffebdfdcebd91462f83ff996b070f95d7eb8cac7f8b4b1523655e20fde828c7e5d42cd88fdd047b1379b6a9f077b9c84055002d64350e81cafe3d8902ccd8ea6696e0768ddf8dcd5e8525a013f2991ec47dd0f5d5c36e7a615e5091f8a6fbf563ef33e075444e0c8492693f7801eb533de9db88d52c4fecc25eba21124ac967582a0b94e0f2453347156beaced6d94ff273d63de612b91e510acb5f00535d4d0add2d8a433c4521572cc1286c50e544698e2d8a47e8f5fbc0d9784b6fe3dbffc07ae5012e1b4b41d312e9d3837e7aab311ecbcba8c5f29028f5a6e74cf90e7559cf09e9bb7a38e9a5f7545d63d49886f6fb187001b9588561ec07e9376d4f495250aa144243351289bee7e7488dfe5b28b3bc9c9e9c20477954cc2bee1610ac875beb820d89c07050092786d96963d10e34bc62037285f35f1faa1daa3db208cabfc0d825b6377332ae9315ef3e87b18ad9139b006d99b15220205ec165c3fd3d65762fdd54318a7788f7c8a4921a66f5d2739467dc381b5786616dadeff6f5dfbf04d494345858b1b0c151d93943562d1ba3d46519a2fff807206a0c334a5f69680adcc41df7334e5e24ad5d832b0ae725434f606ca23c8191213ddc6bead139327c489be7226a2add7da36af17853c4a33e2add2739f9bb48b8ff2cb145f896783eec1d1742e36c8113626d0fe877e51b373847c3ac10df1bdfb12530d9edfb4df6f0f7cf80f92dacacee0bb7568c3bcd6b4d2cc1064a73deaa39df70addfc041713798c1963aaeaecd07b05db340f5f73ef54d9d53fa01928fc8936963b208e02b2f8b9c5be697c07de7575c384a4fb8ea678aa5c1fe2c93df914bf9ad67b038c6d258a1a3b93551b99b65d10babd8ca01f5ab186954efd5b9f5b0dd6a003b12aaf3617c574b950e3051e557b8375aefec791992c61356ff39c42eb213b9ed0d9221b3e2d701852da7446ca5420edd4a6dd090229868819ef02d4449888efa1b15c883be6926ceead0a93fc7cf28cb14bb4174ebd3f4b8e4fe9ffe2458c07dd0482f2d226a710f272387c5f601387c6cb624fec63593ee27e023c5ca4cf35512958a748ce4f33d90444c120a85437c28d84ed9fdcb51c2a5e80cd1d7b7270710de99586812e96d6db22db84a1beefe8c1d2a0d9b61cf3045961a00bed31d100fe0fa6f768709e155efe39d2be06aad11602ce8d411cdc29fa9a55496959a9ae9cd3cbabfc84bbd048b181f3a44c62b7cc5657e88e92d0e018da7a1867d82f7c44c1f7f6b98b96e076c936f24ae7834f784ae75f77fb66b3f2bea8f976072f71bb8122f4115f8c1ea151902a6639e830098928f4da43921a58c78ba30a28f64536a4b24d1bd0ff1896794bf6ea07e616dbf8d94cbc9b0bd30587e9936cdaee7dfe95f85cd3495a57a36c7c9417a75dc21a4bd38d01252883f913fbb00557aa077497a32f5f973f212d53da6f0c53428985205e716c966946ece20b80cebbe85e87174260c57f63f405952fe4a2b7bca354babb09261de22165cdeeefe42b2572d782a41407ece5043b7f319e926b838574838be1b876625c11705247719eba8a41257fc79cd4f6a7f8da55cab22d1580636e9fdc10a3c2a573e5a98cd1a0507aca46e2714b397cbdb093df564d7738a36c999bcd3559a4bedcffffcc2e6b7586027003ad1ee0776d9267336c7d1a02be18332b7e14f329ca18b6112a01e23c759d2e1443306e99aeb40e249b5dc8b49764915538e369ce5bb7f2872196eeb810c6120f9fc075eceed823dd6417e189ed44902f24be09b94ef4e5589ecfb67836e4368a01fd197802f73fdd50d1f22c51e57e9accb5e8b12e23019772f8fbf5f3e50e5b4403d985165080de88725a6c33139e6500a0110db2de04777570aa95c026468ce1b1360f5559e12c4f026bf2f1d5276f086d45cf630778dcd66ec7bdaddd1bcc5930ec5067a1d391fa9ca961480e2fc55b7cb9fe5427c5f7d13c229f2269f9f5210aa67a9dc84e6a4a4ac089114d6a1f998e3f3ed61e519fcc871e7737b21291043ed46f02bc16d2bed2d93d8b88d0fd45c9fa0a7107e8b19dc527c89f91e3df2703d0c3727c99aab676649909cbf516a2d5014eb1882e278c748d44f9585c880ec4794a4424ede4d2081a3e305bae72869a2729dead811d536c4653446e668440844a285aa08510bed7b8e682c00d2b64458f34d0ca83e2e779c83863f597ccb59db40147a86ef8827ade12d0ebbf5a17e00fac8b9e39144a6361d76bc90bfb384afa69b01f5b988f1dcd6cb00bf9d38e07d9ba0869559231a7ad7267887856cf9fac67fcb6e1e7e829b05142cd3c8c39f099323d49ac535fb58408e85f51908bdadfae03e957a99a89f9c6f3dd25031b3eedc8df6ab73d4e7670336094f17e278573437a5650f031380aa4ebba3ef34a7aa03081730e5d445c8d637eb108979a19c0a1034b5db363cadba72c0d31bfefcbc575365725267b57c7df6350ae6662dc52beff4567847403ad30b092f429bd686837274423b9133d7ea040a15f5b90671194bc46e0ed9b6d6f056b7799e59933ae144010b1af12a1142d84b0d4515bd2df3ee9dfef1e3faf2d5f9cf44bd0af1f6b10b8392f908e7133eed9e3fb5e1b8dccfd85af7b9d2b2cec4e1bfbf82fb94203485d9677f96846960451e695fbd0a880dcb24846a66324d3fe58e523450cb850da8afe4e54dfe41ea337512880901376b082be2835c5ba22b81b87c451309ce7928d0861cd1a451ebaec3a6907b4524e4222c1970640b96861088804f9eb6d55d64af232265ef9f5b7810787982436cb07d1540509f9edbdd671ae766314541715c9c8432ff0866afd11250252c99645633e85c270703ce1d92cce7047f4a11a28dd50e4340c937be4e3c323f86792d76bf43d16e18cec7a0929119fa4258a71839ca4f87eb3c2360e964f56c0e969f62090daba6726763b1ef979c777265c2090c618067b93cdf426b8f87c5995296ab034a61e0299a8af644a875581f842b6abab06cccf0a718030bc828038b4046a5de8e2a736d1202c18c55f11fa4060dd50a6352a2e1f2b5c36f4f0b2d9e3c1b99883f9f6d0cebef7ef8ef6ab40619fbf014ebcd2729827918d812682fd9c2a0598b2e8a1f1ebe8b2cec5e50df80e8d0c56ab7853c9adee2ccfea81ded39998d4518c2cd91a500e4b3885be94c088be6908517ea764be7ef5a635c23e023df4021bff2172deb8e94c5dda36291e90b75e25cdf5c310e6e06f426e1e4c97cd67e5947e2e40166d1637679f21b76e7207c358df039b5b3e194ff9bb31a839bde52c74cefa575c498e6a631cc80e468cafdf2d78b60036bfee559f6ea7df2a53791b1fd52e9d7a7f40fda5b9ac223ac2fd6191f4585f313f1748f005a9e2e5e90ad772f18cf4683d7977eca85668196c6218aa6e9a92b9d8e54eb1c99ab06dcc1f9ec72f95546add4d8af92a3fc161f84ed172d1b28a854201add1d28955c7cd2d9d45b0ca59fd9f8475ad897a563b3f9f73632f2ae2093781ec04b55be1dea18f6abf9ef21eb6ed81ec84b50dc6ea8cea735f50db81b9ff6fb28289ad3e24d3ff6eebc679b36d1fe136102dfa146e9e2586902360ef8c24d7a33897443edd70def980e665fc03ca4f4278ca72183805223e3086b0559e1062ceb96e26b9dca43d0f94ade40c9548fcefc0a73194bc8ed5faf63d122948e2b38c7c891f1ad8dcd1121eb33a267072a0c7826ddfeed4cc6ea1f86fba63a90dfb25e169dda489cc9a6955cf0b3aec1dba217201a44d08705a8d7416ea0aa72a74870e3bff1752836383a9842902b8301303472a9111d7c9ecb064df3511e838d27342f2a799568b62ff0518efb4242ef166f758270b4e0983d8484b7d9a636f1fb5323009b30a3faafd5c46d661b32a6499b263c755223e7fdf10f5c9203de24ab7e17567e7a9ab4682f65947ac5077f75e417935ed9fc49300bda899eb4b94b16eb837aff8b099a4be3979c452da74d6a6691ea53d4d6b7d35a5f8392eaaf1f61f2df9a846b2d1da74cb5d60cba5ad5b9b537703e6429a0d4660135449cb133ea22583e533d2b091f0f918aff1e2312e1167b3b23dab8f3bf6e013764a0d51e2e236a0b977bc3cb2022027b0d0d0c04562c403204b16918ff348596b6678066cb4dca3a9de0aed9dcf5c6e6e46533695d7a4d64946a3016391fb60855fc1a786b272ef0abb6550e40c86937cb0902835772dee14e15b53ecf4f45e7820f43c76e26ba03b0df458e1f5cad540e5d7dde60c5e8899231f6d58546cf6d89039997915624c13342142dd460fa64934fe8b6c43e22036c9dff87db854a9e3ccee5224c830cbcefcbbcd62d8b18801968bd0095ff7328deb38500c08ee635bce895c61da5bc5ff83dfdcd53cd49817f01b2bde7bd43bc093d29c4439c5a6de19cb145fde2401b628b94209f90dd9c6c168ac4a4ecf1f9854d2f83721135a083c15b9d567a9abf18fad8a89bcdc450f7a145d945aaca8b9f27cdf7ae389d07c4ee0338efed1eabcfdf054a024a02d6500af74f62d5c0e37666de0e8940d6f98b62807c21260c3f12122751381443586f6d2616e081f51dddf88d3f2dd7b40f625bd8b4e17e00a939eaef5bd42c40098643eaf5de9e310ed437d4fe6550cb4dfe8104c65f5475da0eba683f002d995f991c04c9cc13ff35eeafd0ef2422545b7326cd0feaf3689ba8c5442f882d1445d07fae0b81b2158d61c063ea6ab242e226506ab863b8f01e6982be24d694ec4c40ff9eef6133d231a21c25fbbe6319eb955d266e2bff03c226a3f191f3a930c522e91c273a05759ef56ec4d42c7a1a6c51255191b02857f1849ed77b7709ad8ace3b0eb5f3f854ee93efa2abf2fb41673b96b0b7cc15455ef6bc356534540e99c22fc3ccee276d4d1ff97fe9b0137f4763114ed161bb142420a16fed0e2adbd607ae857192ac512009cb15e6bf395ba809448b444a5a9d9c89a1b3ad612042b11c6e503ee121a0156aa2f3ee8059b2f66106bab643a8c8deff8311b1f43c37bfa331ea52309cb91a343ec0914eb625ff5ba3846ff0fb04aafc43be21a79d5a1f5485aa2482c9e4b6b15e04137ece04965524371c223bb5c65cb75e73470806413fa42edb7e4c4292406058437ba602654fea87203586051573c639fa5ca8c7bd3b7e03faac4e026050163bcd174e476d94180b68aa36c2556aa244e25f44fa33d51e35f781335136b5099fa7fa5d4f6a6363f12c6bb0485d2c81ad06694c7cc068fe44a8650fc15e8c208089018ec1f0367365b1af2e42cfc8b42a1f8a8dbfeb6dfdd5e3be63b4a9615024e1fe43db5f97634bebec2d5b6a2ae263a1a4838a43494f1dc0ff04d62cc4579951d5fe3817af2f97401c0fdd7fe46fed0628833002f168561d9c049c4f35cd81aaf2cb35c32233be1b884ccbcb3c6b8008b5821e955c81ca74f1e608e2938982dbf96bacbc7b3d4a9ba283731e9190b9d83fbec79aea302a15aa534a9a0e31a5c3c41245f4c2346a8e2ff416414cb89f586104f59b8154a4533434cbf3c554b56e1cb0f44ad4088dfeee04e9bb35a445b3fa2b8427ed42139d2abfc42425ce9caf94a22720943fc699b08141cab9732e763ce6a9806a024352604de1fa79427d6b698328021d9f5c70a778d1e8027db274323253e4e9429a9fc714cd383e9d884689a4fa0110bf9f861c1665393848cb9bfbabce998aa6194fd4311bff59dd8e669cf5fac5ea0a0", @typed={0x8, 0x6c, 0x0, 0x0, @fd=r0}, @generic="7795cfd796459ad29a7daa3144039c7d8a028cce0a5aa9fc5cea13d61b7a540b7d97cd59642424f32013a17d9d7c604cf9f8292844726e40c4c2cb92adb6c2bbd42a8ddb1957f4a31e2a5389194e66dce73223a2d2ff3a", @generic="1f936bc96ab1ad90e5a801d49de1e8704514f05b4a54e48dfc84773766d0b66d058c08e3d00b8d2cb9b1939b7b4820ec1d94c245e35c8d08620eb8431e3a7aae356c4c30b44d60313822b01b69a1c3f4bf96ae13288e8656355c0b33cda0431306380118a08ceb9d9220e4e4ad9b279afe80cf4ab44d6897a27ea738fe79b73e8cf2f46b720b97d4d2a42c7e0c5f93b16320d8bd284f02c9e3880f6d3f7a309b653c43ea26be9a7a2dffd6982ce6c87d4ce6dad248ba3ba4925a19373d", @generic="33890fa33f82b9d599a1d1587a8d3912e3890bd93916e134397b7f9e3e6c2cc547366f7a8c519a5bc46ea1da90ce23453dbd8c22b783b9ab28d4dae9ba7dd61f5a690e7b282726ab25807aecae67535cef43ce4d81ee7e6a43ab610160f503d2c50d3098ab69b572b7341ca5f6fd8a8234b861b19df942bf15d3bc301e7634999ac09764a0899137a9462815805f5fdafb59b3f412b38fc446", @generic="e970cd3869a7f417189622dba674f3fc97c5901f3d4782feed52ba918c74ed1494204f57126f5a389181e9daafc941812193df0067f034a9e3e5943aa1eccd790227d0d69c135f676876fdbb6bfd40", @generic="3e320bf59e4bb9fb55dafddb500b06cce01083cfba070f277b329e9fd7914eaa3f83070501e90d681d2e8b17354923ab8eeb9fd77d28a129d65465080ecbd923e8d6dd18f196d729540a6fb6ee16a2e9b4ec54792f188882bf1a75bb55fa80509e6daaf8b32ab27a30db23e90b5166330bbd2259ff854bc3a8d085f48009a450628a91e5a461de9afba78ae5bbc05615e26e246d7123d09b2e2bb1d33ca08823b40ffd4187bbb4d97b4563b5801d7f6d67221ea5c044746d47d84988"]}, @generic="8b0e2497b03dec7540102573ef08b9f76ded8856f149756cb264062ccb72e624a40305a3a438a6f17e95baddeb00a753e27f801d51eae3731c6af30a65d6954d7b89606354e03164ff4da17727eac5ba17b1d35072cff9431320bfd834976efe75d70422398f96009f4e78f4e85d6b1e1b9ad4733c40b980fb5c0ef8577145b5ee177a02b46acb25abea36"]}, 0x1474}, {&(0x7f0000001640)={0xf8, 0x28, 0x0, 0x70bd29, 0x25dfdbfd, "", [@typed={0x8, 0x62, 0x0, 0x0, @pid=r2}, @nested={0x4, 0x72}, @generic="1303dcecaeab17b172e341e4023ff731c7b5e587bddf8143c407bb84aab0c729d7e092575260f7a92dcc07065f2a23a309e824b7aed8819fb2917cd057f328ba3dd68936075a3684089187cdb55eb0bf86d08e7557885cd0662d87c613c1c5cff1dcec43", @typed={0x8, 0x93, 0x0, 0x0, @ipv4=@private=0xa010100}, @generic="b8d3bc3a918adacae774ea3645106093bf657afa45c7474e6a81fe50db614c162d6359ad69ea868034597e509fe77fc37f7648ec5cf23a5196071e5914a30931dbe4649aafa15951217dd3b9b22a6d340bf3d6bdb0f46747cec78ccf628fd486e65300"/110]}, 0xf8}, {&(0x7f0000002140)=ANY=[@ANYBLOB="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"], 0x1e0}], 0x4, &(0x7f0000002080)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r3, 0xffffffffffffffff, r4}}}, @rights={{0x2c, 0x1, 0x1, [r5, r6, r7, r8, r0, r0, r0]}}], 0x68, 0x40084}, 0x40000) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r9, 0xc266a4723dd56b93}, 0x14}}, 0x0) 17:36:08 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x208600) [ 512.386251] befs: Unrecognized mount option "IPVS" or missing value [ 512.395550] befs: (loop3): cannot parse mount options 17:36:09 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) futex(&(0x7f0000000040)=0x1, 0x4, 0x2, &(0x7f00000000c0)={r0, r1+60000000}, &(0x7f0000000100)=0x1, 0x0) (async, rerun: 32) clock_gettime(0x1, &(0x7f0000000000)) (rerun: 32) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 17:36:09 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x208800) 17:36:09 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x7400, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) [ 512.484260] attempt to access beyond end of device [ 512.489346] loop1: rw=1, want=16, limit=15 [ 512.499558] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 512.501287] attempt to access beyond end of device [ 512.518135] loop1: rw=1, want=128, limit=15 17:36:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x800}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4010) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), r0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0xc266a4723dd56b93}, 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x1c}}, 0x20000011) 17:36:09 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) futex(&(0x7f0000000040)=0x1, 0x4, 0x2, &(0x7f00000000c0)={r0, r1+60000000}, &(0x7f0000000100)=0x1, 0x0) clock_gettime(0x1, &(0x7f0000000000)) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) (async) clock_gettime(0x0, &(0x7f0000000080)) (async) futex(&(0x7f0000000040)=0x1, 0x4, 0x2, &(0x7f00000000c0)={r0, r1+60000000}, &(0x7f0000000100)=0x1, 0x0) (async) clock_gettime(0x1, &(0x7f0000000000)) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) [ 512.563847] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 512.574743] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 17:36:09 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x7a00, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) [ 512.757134] attempt to access beyond end of device [ 512.776719] loop1: rw=1, want=16, limit=15 [ 512.789402] attempt to access beyond end of device [ 512.808048] loop1: rw=1, want=128, limit=15 17:36:09 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000040)=0x2, 0x2) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xb, 0xfffffffe, 0x0, &(0x7f0000000000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000040)=0x2, 0x2) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(0x0, 0xb, 0xfffffffe, 0x0, &(0x7f0000000000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) 17:36:09 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x2, &(0x7f0000000000)) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 17:36:09 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0xe0ff, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:09 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x208900) 17:36:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x800}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4010) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), r0) (async) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0xc266a4723dd56b93}, 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x1c}}, 0x20000011) 17:36:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0xa}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:36:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x800}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4010) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), r0) (async) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0xc266a4723dd56b93}, 0x14}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x1c}}, 0x20000011) 17:36:09 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0xedc0, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:09 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x2, &(0x7f0000000000)) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 17:36:09 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x208b00) [ 513.347073] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 17:36:09 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x2, &(0x7f0000000000)) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) (async) clock_gettime(0x2, &(0x7f0000000000)) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) 17:36:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffffd}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x20}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0xc266a4723dd56b93}, 0x14}}, 0x0) [ 513.388401] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 513.388693] attempt to access beyond end of device [ 513.413307] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 513.473620] loop1: rw=1, want=16, limit=15 [ 513.494957] attempt to access beyond end of device [ 513.514784] loop1: rw=1, want=128, limit=15 [ 513.669376] attempt to access beyond end of device [ 513.677558] loop1: rw=1, want=16, limit=15 [ 513.682599] attempt to access beyond end of device [ 513.687686] loop1: rw=1, want=128, limit=15 17:36:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffffd}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x20}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0xc266a4723dd56b93}, 0x14}}, 0x0) 17:36:10 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) futex(&(0x7f0000000000)=0x1, 0x4, 0x0, &(0x7f0000000080)={r0, r1+60000000}, &(0x7f00000000c0)=0x1, 0x1) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 17:36:10 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0xffe0, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:10 executing program 4: socketpair(0x0, 0x6, 0x6e4, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000240)={0x10000004}) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) futex(&(0x7f0000000100)=0x2, 0x8, 0x2, &(0x7f0000000180)={r1, r2+10000000}, &(0x7f00000001c0), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) futex(&(0x7f0000000000)=0x1, 0xb, 0x2, &(0x7f0000000080)={r3, r4+60000000}, &(0x7f00000000c0)=0x2, 0x2) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 17:36:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0xc}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:36:10 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x208c00) 17:36:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffffd}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x20}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0xc266a4723dd56b93}, 0x14}}, 0x0) 17:36:10 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) futex(&(0x7f0000000000)=0x1, 0x4, 0x0, &(0x7f0000000080)={r0, r1+60000000}, &(0x7f00000000c0)=0x1, 0x1) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) clock_gettime(0x0, &(0x7f0000000040)) (async) futex(&(0x7f0000000000)=0x1, 0x4, 0x0, &(0x7f0000000080)={r0, r1+60000000}, &(0x7f00000000c0)=0x1, 0x1) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) 17:36:10 executing program 4: socketpair(0x0, 0x6, 0x6e4, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000240)={0x10000004}) (async) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) futex(&(0x7f0000000100)=0x2, 0x8, 0x2, &(0x7f0000000180)={r1, r2+10000000}, &(0x7f00000001c0), 0x0) (async, rerun: 32) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (rerun: 32) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) futex(&(0x7f0000000000)=0x1, 0xb, 0x2, &(0x7f0000000080)={r3, r4+60000000}, &(0x7f00000000c0)=0x2, 0x2) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) [ 514.186554] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 514.202761] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 17:36:10 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x20000, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x50, r1, 0xc266a4723dd56b93, 0x70bd2a, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb5e}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x20) [ 514.235211] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 17:36:10 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x208e00) 17:36:10 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) futex(&(0x7f0000000000)=0x1, 0x4, 0x0, &(0x7f0000000080)={r0, r1+60000000}, &(0x7f00000000c0)=0x1, 0x1) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) clock_gettime(0x0, &(0x7f0000000040)) (async) futex(&(0x7f0000000000)=0x1, 0x4, 0x0, &(0x7f0000000080)={r0, r1+60000000}, &(0x7f00000000c0)=0x1, 0x1) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) 17:36:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x50, r1, 0xc266a4723dd56b93, 0x70bd2a, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb5e}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x20) 17:36:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0xe}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) [ 514.303316] attempt to access beyond end of device [ 514.308317] loop1: rw=1, want=16, limit=15 [ 514.325015] buffer_io_error: 6 callbacks suppressed [ 514.325024] Buffer I/O error on dev loop1, logical block 15, lost async page write [ 514.341608] attempt to access beyond end of device [ 514.347577] loop1: rw=1, want=128, limit=15 17:36:10 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x40000, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:10 executing program 4: socketpair(0x0, 0x6, 0x6e4, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000240)={0x10000004}) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) futex(&(0x7f0000000100)=0x2, 0x8, 0x2, &(0x7f0000000180)={r1, r2+10000000}, &(0x7f00000001c0), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) futex(&(0x7f0000000000)=0x1, 0xb, 0x2, &(0x7f0000000080)={r3, r4+60000000}, &(0x7f00000000c0)=0x2, 0x2) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) socketpair(0x0, 0x6, 0x6e4, &(0x7f0000000200)) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000240)={0x10000004}) (async) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) clock_gettime(0x0, &(0x7f0000000140)) (async) futex(&(0x7f0000000100)=0x2, 0x8, 0x2, &(0x7f0000000180)={r1, r2+10000000}, &(0x7f00000001c0), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) (async) clock_gettime(0x0, &(0x7f0000000040)) (async) futex(&(0x7f0000000000)=0x1, 0xb, 0x2, &(0x7f0000000080)={r3, r4+60000000}, &(0x7f00000000c0)=0x2, 0x2) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) 17:36:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x50, r1, 0xc266a4723dd56b93, 0x70bd2a, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb5e}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x50, r1, 0xc266a4723dd56b93, 0x70bd2a, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb5e}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x20) (async) 17:36:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x200080, 0x0) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffffff00}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x2400c801) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0xc266a4723dd56b93}, 0x14}}, 0x0) 17:36:11 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000000), 0xc, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)=0x1, 0x1) clock_settime(0x5, &(0x7f0000000100)={0x77359400}) clock_gettime(0x7, &(0x7f00000000c0)) [ 514.448365] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 17:36:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x200080, 0x0) (rerun: 64) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffffff00}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x2400c801) (async) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0xc266a4723dd56b93}, 0x14}}, 0x0) 17:36:11 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x1fffff, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) [ 514.518273] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 514.545234] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 17:36:11 executing program 4: futex(&(0x7f000000cffc), 0x4, 0x0, 0x0, &(0x7f0000000040), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) clock_gettime(0x7, &(0x7f0000000000)) 17:36:11 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x208f00) 17:36:11 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000000), 0xc, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)=0x1, 0x1) clock_settime(0x5, &(0x7f0000000100)={0x77359400}) clock_gettime(0x7, &(0x7f00000000c0)) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f0000000000), 0xc, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)=0x1, 0x1) (async) clock_settime(0x5, &(0x7f0000000100)={0x77359400}) (async) clock_gettime(0x7, &(0x7f00000000c0)) (async) [ 514.693847] attempt to access beyond end of device [ 514.700806] loop1: rw=1, want=16, limit=15 [ 514.700821] Buffer I/O error on dev loop1, logical block 15, lost async page write 17:36:11 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x400000, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) [ 514.769837] attempt to access beyond end of device [ 514.809368] loop1: rw=1, want=128, limit=15 17:36:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x10}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:36:11 executing program 4: futex(&(0x7f000000cffc), 0x4, 0x0, 0x0, &(0x7f0000000040), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) clock_gettime(0x7, &(0x7f0000000000)) futex(&(0x7f000000cffc), 0x4, 0x0, 0x0, &(0x7f0000000040), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) clock_gettime(0x7, &(0x7f0000000000)) (async) 17:36:11 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async, rerun: 64) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async, rerun: 64) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) (async, rerun: 64) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (rerun: 64) futex(&(0x7f0000000000), 0xc, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)=0x1, 0x1) (async, rerun: 32) clock_settime(0x5, &(0x7f0000000100)={0x77359400}) (async, rerun: 32) clock_gettime(0x7, &(0x7f00000000c0)) 17:36:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x200080, 0x0) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffffff00}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x2400c801) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0xc266a4723dd56b93}, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x200080, 0x0) (async) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffffff00}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x2400c801) (async) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0xc266a4723dd56b93}, 0x14}}, 0x0) (async) 17:36:11 executing program 4: futex(&(0x7f000000cffc), 0x4, 0x0, 0x0, &(0x7f0000000040), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) clock_gettime(0x7, &(0x7f0000000000)) futex(&(0x7f000000cffc), 0x4, 0x0, 0x0, &(0x7f0000000040), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) clock_gettime(0x7, &(0x7f0000000000)) (async) [ 514.910489] hfs: part requires an argument [ 514.921720] hfs: unable to parse mount options 17:36:11 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x1000000, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:11 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x209100) 17:36:11 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x4, 0x0, 0x0, &(0x7f0000000000), 0x0) [ 515.010492] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 515.048276] attempt to access beyond end of device [ 515.065169] loop1: rw=1, want=16, limit=15 [ 515.079312] hfs: part requires an argument [ 515.093464] hfs: unable to parse mount options [ 515.095814] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 17:36:11 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x2000000, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:11 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) (async) futex(&(0x7f000000cffc)=0x1, 0x4, 0x0, 0x0, &(0x7f0000000000), 0x0) [ 515.110350] Buffer I/O error on dev loop1, logical block 15, lost async page write [ 515.124587] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 515.135366] attempt to access beyond end of device [ 515.143079] loop1: rw=1, want=128, limit=15 [ 515.219753] hfs: part requires an argument 17:36:11 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) (async) futex(&(0x7f000000cffc)=0x1, 0x4, 0x0, 0x0, &(0x7f0000000000), 0x0) [ 515.248067] hfs: unable to parse mount options 17:36:11 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x3000000, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:12 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x60}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:36:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r3, @ANYBLOB="010f2ca07000ffcbdf5725"], 0x180}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r5, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32=r5, @ANYRES8=r3, @ANYBLOB="936b00278ddb0f8f66d4fac918a27b14ff009373b619d25e6a46d4a8d34bfe0aaf98d0f9e3b5908aeb12b5705f82d09698ab6179fdacb5254e1a53328cbc27d519d6251cd254e19ee7d66003ab810ea17673fb4384ed68ed8b516101e6fe997f99e495731e491f6d57a8a24176cde349d64b83f51db7d69be1b9cea882"], 0x14}}, 0x4000010) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400024}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="020025bd70000300df25010000000e00f0ff05000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r7, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r8, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40020) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r2) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r9, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004885}, 0x40080) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) [ 515.404084] hfs: part requires an argument [ 515.415139] attempt to access beyond end of device [ 515.420472] loop1: rw=1, want=16, limit=15 [ 515.433659] Buffer I/O error on dev loop1, logical block 15, lost async page write [ 515.443578] attempt to access beyond end of device [ 515.456302] loop1: rw=1, want=128, limit=15 [ 515.466672] hfs: unable to parse mount options [ 515.485881] netlink: 364 bytes leftover after parsing attributes in process `syz-executor.3'. [ 515.497663] netlink: 364 bytes leftover after parsing attributes in process `syz-executor.3'. [ 515.528392] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 515.557272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 515.567538] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 17:36:12 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x1, 0x1) clock_gettime(0x3, &(0x7f00000005c0)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x5, 0x1, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000140)) pselect6(0x40, &(0x7f0000000280)={0x5, 0x564, 0x3, 0x8003, 0x8, 0x2, 0xfff, 0x99}, &(0x7f00000002c0)={0x80000000, 0xecf8, 0x8, 0x7, 0xed, 0xcf, 0x3, 0x4f}, &(0x7f0000000300)={0x5, 0xc76, 0x1ff, 0x11, 0x0, 0x1f, 0x10002, 0x102}, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f00000003c0)={&(0x7f0000000500)={[0x6]}, 0x8}) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) rt_sigtimedwait(&(0x7f0000000400)={[0x400000000]}, &(0x7f0000000440), &(0x7f00000004c0)={0x77359400}, 0x8) futex(&(0x7f0000000380)=0x2, 0x4, 0x0, &(0x7f0000000540), &(0x7f0000000580)=0x2, 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) clock_settime(0x7, &(0x7f0000000180)) futex(&(0x7f00000001c0), 0xd, 0x1, &(0x7f0000000200)={0x0, 0x3938700}, &(0x7f0000000240), 0x2) futex(&(0x7f0000000000), 0x1, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x1, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 17:36:12 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) futex(&(0x7f0000000100)=0x2, 0x4, 0x0, &(0x7f0000000180)={r0, r1+10000000}, &(0x7f00000001c0)=0x2, 0x1) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) futex(&(0x7f0000000200)=0x1, 0xc, 0x0, &(0x7f0000000280)={r2, r3+10000000}, &(0x7f00000002c0), 0x2) futex(&(0x7f000000cffc), 0x3, 0x1, 0x0, &(0x7f0000048000)=0x3, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) futex(&(0x7f0000000000), 0x6, 0x2, &(0x7f0000000080)={r4, r5+10000000}, &(0x7f00000000c0)=0x2, 0x1) 17:36:12 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x209200) 17:36:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r3, @ANYBLOB="010f2ca07000ffcbdf5725"], 0x180}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r5, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) (async) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32=r5, @ANYRES8=r3, @ANYBLOB="936b00278ddb0f8f66d4fac918a27b14ff009373b619d25e6a46d4a8d34bfe0aaf98d0f9e3b5908aeb12b5705f82d09698ab6179fdacb5254e1a53328cbc27d519d6251cd254e19ee7d66003ab810ea17673fb4384ed68ed8b516101e6fe997f99e495731e491f6d57a8a24176cde349d64b83f51db7d69be1b9cea882"], 0x14}}, 0x4000010) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400024}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="020025bd70000300df25010000000e00f0ff05000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r7, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) (async) r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r8, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40020) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r2) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r9, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004885}, 0x40080) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 17:36:12 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x4000000, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:12 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) [ 515.749843] netlink: 364 bytes leftover after parsing attributes in process `syz-executor.3'. [ 515.774901] netlink: 364 bytes leftover after parsing attributes in process `syz-executor.3'. 17:36:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r3, @ANYBLOB="010f2ca07000ffcbdf5725"], 0x180}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r5, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32=r5, @ANYRES8=r3, @ANYBLOB="936b00278ddb0f8f66d4fac918a27b14ff009373b619d25e6a46d4a8d34bfe0aaf98d0f9e3b5908aeb12b5705f82d09698ab6179fdacb5254e1a53328cbc27d519d6251cd254e19ee7d66003ab810ea17673fb4384ed68ed8b516101e6fe997f99e495731e491f6d57a8a24176cde349d64b83f51db7d69be1b9cea882"], 0x14}}, 0x4000010) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400024}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="020025bd70000300df25010000000e00f0ff05000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r7, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r8, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40020) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r2) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r9, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004885}, 0x40080) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 17:36:12 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x209400) [ 515.854757] hfs: part requires an argument [ 515.859196] hfs: unable to parse mount options [ 515.893882] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 17:36:12 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x5000000, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) [ 515.898783] attempt to access beyond end of device 17:36:12 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) (async) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) futex(&(0x7f0000000100)=0x2, 0x4, 0x0, &(0x7f0000000180)={r0, r1+10000000}, &(0x7f00000001c0)=0x2, 0x1) (async) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) futex(&(0x7f0000000200)=0x1, 0xc, 0x0, &(0x7f0000000280)={r2, r3+10000000}, &(0x7f00000002c0), 0x2) (async, rerun: 64) futex(&(0x7f000000cffc), 0x3, 0x1, 0x0, &(0x7f0000048000)=0x3, 0x0) (rerun: 64) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) futex(&(0x7f0000000000), 0x6, 0x2, &(0x7f0000000080)={r4, r5+10000000}, &(0x7f00000000c0)=0x2, 0x1) [ 515.959705] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 515.961230] loop1: rw=1, want=16, limit=15 [ 515.976910] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 515.996214] hfs: part requires an argument [ 516.002256] Buffer I/O error on dev loop1, logical block 15, lost async page write 17:36:12 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) futex(&(0x7f0000000100)=0x2, 0x4, 0x0, &(0x7f0000000180)={r0, r1+10000000}, &(0x7f00000001c0)=0x2, 0x1) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) futex(&(0x7f0000000200)=0x1, 0xc, 0x0, &(0x7f0000000280)={r2, r3+10000000}, &(0x7f00000002c0), 0x2) futex(&(0x7f000000cffc), 0x3, 0x1, 0x0, &(0x7f0000048000)=0x3, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) futex(&(0x7f0000000000), 0x6, 0x2, &(0x7f0000000080)={r4, r5+10000000}, &(0x7f00000000c0)=0x2, 0x1) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) (async) clock_gettime(0x0, &(0x7f0000000140)) (async) futex(&(0x7f0000000100)=0x2, 0x4, 0x0, &(0x7f0000000180)={r0, r1+10000000}, &(0x7f00000001c0)=0x2, 0x1) (async) clock_gettime(0x0, &(0x7f0000000240)) (async) futex(&(0x7f0000000200)=0x1, 0xc, 0x0, &(0x7f0000000280)={r2, r3+10000000}, &(0x7f00000002c0), 0x2) (async) futex(&(0x7f000000cffc), 0x3, 0x1, 0x0, &(0x7f0000048000)=0x3, 0x0) (async) clock_gettime(0x0, &(0x7f0000000040)) (async) futex(&(0x7f0000000000), 0x6, 0x2, &(0x7f0000000080)={r4, r5+10000000}, &(0x7f00000000c0)=0x2, 0x1) (async) [ 516.024680] hfs: unable to parse mount options [ 516.038462] attempt to access beyond end of device [ 516.050816] loop1: rw=1, want=128, limit=15 17:36:12 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x6000000, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) [ 516.182732] netlink: 364 bytes leftover after parsing attributes in process `syz-executor.3'. [ 516.266915] hfs: part requires an argument [ 516.277018] hfs: unable to parse mount options [ 516.306829] attempt to access beyond end of device [ 516.312228] loop1: rw=1, want=16, limit=15 [ 516.316583] Buffer I/O error on dev loop1, logical block 15, lost async page write [ 516.332348] attempt to access beyond end of device [ 516.343850] loop1: rw=1, want=128, limit=15 17:36:13 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000140), 0x7, 0x2, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0)=0x1, 0x2) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) clock_gettime(0x7, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) futex(&(0x7f0000000000)=0x1, 0x1, 0x2, &(0x7f0000000080)={r0, r1+60000000}, &(0x7f00000000c0), 0x2) 17:36:13 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:36:13 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x1, 0x1) clock_gettime(0x3, &(0x7f00000005c0)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x5, 0x1, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000140)) pselect6(0x40, &(0x7f0000000280)={0x5, 0x564, 0x3, 0x8003, 0x8, 0x2, 0xfff, 0x99}, &(0x7f00000002c0)={0x80000000, 0xecf8, 0x8, 0x7, 0xed, 0xcf, 0x3, 0x4f}, &(0x7f0000000300)={0x5, 0xc76, 0x1ff, 0x11, 0x0, 0x1f, 0x10002, 0x102}, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f00000003c0)={&(0x7f0000000500)={[0x6]}, 0x8}) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) rt_sigtimedwait(&(0x7f0000000400)={[0x400000000]}, &(0x7f0000000440), &(0x7f00000004c0)={0x77359400}, 0x8) futex(&(0x7f0000000380)=0x2, 0x4, 0x0, &(0x7f0000000540), &(0x7f0000000580)=0x2, 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) clock_settime(0x7, &(0x7f0000000180)) futex(&(0x7f00000001c0), 0xd, 0x1, &(0x7f0000000200)={0x0, 0x3938700}, &(0x7f0000000240), 0x2) futex(&(0x7f0000000000), 0x1, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x1, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x1, 0x1) (async) clock_gettime(0x3, &(0x7f00000005c0)) (async) clock_gettime(0x0, &(0x7f00000000c0)) (async) clock_nanosleep(0x5, 0x1, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000140)) (async) pselect6(0x40, &(0x7f0000000280)={0x5, 0x564, 0x3, 0x8003, 0x8, 0x2, 0xfff, 0x99}, &(0x7f00000002c0)={0x80000000, 0xecf8, 0x8, 0x7, 0xed, 0xcf, 0x3, 0x4f}, &(0x7f0000000300)={0x5, 0xc76, 0x1ff, 0x11, 0x0, 0x1f, 0x10002, 0x102}, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f00000003c0)={&(0x7f0000000500)={[0x6]}, 0x8}) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) rt_sigtimedwait(&(0x7f0000000400)={[0x400000000]}, &(0x7f0000000440), &(0x7f00000004c0)={0x77359400}, 0x8) (async) futex(&(0x7f0000000380)=0x2, 0x4, 0x0, &(0x7f0000000540), &(0x7f0000000580)=0x2, 0x0) (async) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) clock_settime(0x7, &(0x7f0000000180)) (async) futex(&(0x7f00000001c0), 0xd, 0x1, &(0x7f0000000200)={0x0, 0x3938700}, &(0x7f0000000240), 0x2) (async) futex(&(0x7f0000000000), 0x1, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x1, 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) 17:36:13 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x209500) 17:36:13 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x7000000, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x5c, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0xa00df6efbe73513c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x7b5}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xad7}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xc72}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48800}, 0x40000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r3, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r2) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0xc266a4723dd56b93}, 0x14}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r5, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) r6 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01090000000000000000030000004c0001800d0001007564b1101f49ae3ab901258b066ffa676683703a73797a31"], 0x60}}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000d80)={0xd8c, r6, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}]}]}, @TIPC_NLA_NODE={0xc08, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xc04, 0x3, "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"}]}, @TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8}]}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xac}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfe}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}]}, 0xd8c}}, 0x24004800) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x1d0, r6, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xb3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffe01}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xeb}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5cd1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5a96}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x43365a98}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbad}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x4040000}, 0x4004) 17:36:13 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async, rerun: 64) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (rerun: 64) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) futex(&(0x7f0000000140), 0x7, 0x2, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0)=0x1, 0x2) (async, rerun: 64) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) clock_gettime(0x7, &(0x7f0000000100)) (async) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) futex(&(0x7f0000000000)=0x1, 0x1, 0x2, &(0x7f0000000080)={r0, r1+60000000}, &(0x7f00000000c0), 0x2) 17:36:13 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x8000000, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) [ 516.803429] hfs: part requires an argument [ 516.813933] hfs: unable to parse mount options 17:36:13 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x209700) 17:36:13 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x1, 0x1) clock_gettime(0x3, &(0x7f00000005c0)) (async) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x5, 0x1, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000140)) pselect6(0x40, &(0x7f0000000280)={0x5, 0x564, 0x3, 0x8003, 0x8, 0x2, 0xfff, 0x99}, &(0x7f00000002c0)={0x80000000, 0xecf8, 0x8, 0x7, 0xed, 0xcf, 0x3, 0x4f}, &(0x7f0000000300)={0x5, 0xc76, 0x1ff, 0x11, 0x0, 0x1f, 0x10002, 0x102}, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f00000003c0)={&(0x7f0000000500)={[0x6]}, 0x8}) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) rt_sigtimedwait(&(0x7f0000000400)={[0x400000000]}, &(0x7f0000000440), &(0x7f00000004c0)={0x77359400}, 0x8) futex(&(0x7f0000000380)=0x2, 0x4, 0x0, &(0x7f0000000540), &(0x7f0000000580)=0x2, 0x0) (async) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) clock_settime(0x7, &(0x7f0000000180)) futex(&(0x7f00000001c0), 0xd, 0x1, &(0x7f0000000200)={0x0, 0x3938700}, &(0x7f0000000240), 0x2) (async) futex(&(0x7f0000000000), 0x1, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x1, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) [ 516.880523] attempt to access beyond end of device [ 516.885618] loop1: rw=1, want=16, limit=15 [ 516.906684] Buffer I/O error on dev loop1, logical block 15, lost async page write [ 516.922544] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 516.935726] attempt to access beyond end of device 17:36:13 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x9000000, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) [ 516.958348] loop1: rw=1, want=128, limit=15 [ 516.972964] hfs: part requires an argument [ 516.983661] hfs: unable to parse mount options [ 516.985839] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 516.997204] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 17:36:13 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x209800) 17:36:13 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) [ 517.171430] hfs: part requires an argument [ 517.184322] attempt to access beyond end of device [ 517.185330] netlink: 364 bytes leftover after parsing attributes in process `syz-executor.3'. [ 517.189525] loop1: rw=1, want=16, limit=15 [ 517.189541] Buffer I/O error on dev loop1, logical block 15, lost async page write [ 517.189747] attempt to access beyond end of device [ 517.214825] hfs: unable to parse mount options 17:36:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x5c, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0xa00df6efbe73513c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x7b5}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xad7}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xc72}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48800}, 0x40000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r3, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r2) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0xc266a4723dd56b93}, 0x14}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r5, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) r6 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01090000000000000000030000004c0001800d0001007564b1101f49ae3ab901258b066ffa676683703a73797a31"], 0x60}}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000d80)={0xd8c, r6, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}]}]}, @TIPC_NLA_NODE={0xc08, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xc04, 0x3, "16b5a88b55f1bc9f3d0fe828b4592561201757492ac19f63568ea0138e2733c4b6e2dfc9f722026e9a6649eb59ddc74aaa7305e77de0dd40a578b27503d36befac84d3c4c9e7b881fe878d18514d7209c9367f1e755b1638f32214981efc4878ddc1f6fb896d2942b930997b52d97ef1fdb2d58668e842dbf4e6c62a9a207f32f6e1c8ed57b441fcfb2db4c02a662f0ad9c7ffb6407a2f081822c3d7ef6aac61e522b55c0fab6fa1ed3f6ffca7e4e2ba762d78e17035fef82565978813e0d77f3868d5ec1abda3c125c094ba388a77e63cede1cc1398cd016ce4a0fb22707cff87842ef695da93c6023f5ee14cd295c53d1ae5ae9045b50f7a5cccdbc6c6783245cc88cdce2adc88b2fc48a080be91e49bed5963ec775a02f5d303201e74bf1d47ead6caecfb07e2063bf38c328d71a65fa00007c407dc28f373ec219a1a4a314973cc4ee3433af2c3a1df9b65710509b5e374c0cb27af749808be3bba626c51a21acb84d19c6f3f271cf5b45fa077cc4dabe7bc8fc9f3e6285a0676366837e25edc7bb597706ce6e97e828a1c9202c80f086dba84b2104a4bc4696772c829ebc04a5f59364f7a95db23bd8b5b5f764bae8db4f7508c3ce2539521c51b9c58b0b411f7c81d11b538962715ef385283c01b178088c339e1497a8a124ce117231f31c83ecddd47969597a8622d7b49918a3ecf6f96a2fb7f1db94caef4035aa45a94b95166ba0bdaaedffcb5936800d20600780fa99b584b54c293d18cdd924a3158284645024d77c0300ea5dab337bc3778fc3f508914015acaa8c00dad57be5728e78b15ddc512c30d9a43797af1a418eaf4fe9dd031be537e6415c54d81fa1cbf5e6fc9b288c6ed8381317294e0c48d69f963f6457100c6cdc73084db92642eaf2c74dfde92378e4d71456054fdb2e25664c4f89574b1115e9cf3855d8881af4ce3cd36a13c330fd2d9dcbab4e4d1f3223f68d4b54c886eb8efbcdb87a3d8540ca4893e6579cff513ec10749f9a8d56638a9860b05feda91f5d52b010b7857aa2e404d73d0436dd772e4a3db31122fce6307e7e480d50afb75b80519727aa77acf42b7f42129d6d5c284856d8e5151a880c9bc19cb80300137684c9733f800a6ed5642a673e1a7114564e0a165579871e3af45addcf4fe4a4d109c74b303744bca7f2d42b1cda049a298a0de0431dfc720e951b5a92d48c20da750940f324e9e573c1cdc7acb9704fc7049684df65960918c15c410c8bbcc087a14fe654fd0c773fc450f24c530601c05463114c39c3ceaf3439e6bbba2b013993e07b9e2ffc5522b3a73ccf6774b33e3759f763913693c1a3985e51b0cc179014971d2136740deec33a71248baf8baea41b7bff6f26fff46019075960f8501a6347dcd77cec33de3f30d11c46d627a1e76e42137f95820f9e89894e4f82a1e096bd05ddfde346468ab5cec2a22bd275e6dbb10e73580561eb7b0c7ef5f0037eee63f23195c92c80d4b8d351f19a282966bc1bf7009b22ee5e2764488895fb27a32f213974ab4f5c08d2a17464e78d06ff8411ddba75142b3e94d0ab399350481d8d68849db1b5c37550273540b388d66ddd0a12f92462f51c5d2613017c042153e229ce10bebf505dc3aab9cdbcca65625587a38b7608b7904d64f3a71eaec2cd02bad0a462aa59c411fef97fc8c545b30ed21fb71af053c083d8fb23e5d8c90384daf2805094038b5621243e344d4903a978e1ae9f6e71e509ab72ea5977bb3280aee02d1f5374d33fab3fe7ad6a967bb8458fb9d250f7d7d4a5822da4721b2745f6c3c2cc784f463fc5bc5d225b7e9a4ba1d7d01f22ae1a3f0256305a1b8f516e7e8a6280fc8ea051f5dc7308dd13f28dfe7f87f954c5e08518c0fb10f77ad97774a171a28027c59b2c9a25ffc44665564144365bdccedb50dff1241c420d5896acbb54676a40ab80a76e1896bc999ff6727d9e25bd508512082a35542a0da0e01d8a1d67f9c61f849b408516d2522b6937a3552ff9b4aa3b93f99d718dd42dae86bfe8471efa8cbb6a3ef8414738cfad45d8cc177040751fa4d385a0a23a4ff301f6099c8db1208730926c73acdd5f886440888969565fcd63ace0ffbcef99eafd76ed26df32c1d756fe78ec19cc1e44cde8a3fbce87adbafa666ae8e6fd77f656748b0ef5039f13a40cf6e0e2a9741ea988fa568e1ce8a490758875b37016b86cd84bde0ee6e98c648e06bb09bfabcd6deeb062745da7a7aa56d4c423415bcf647a6cbad793f5b1a15e9623b2dfe81c8af436f4b11eb04fe97c1cc7e05a046b343e277ca16683a913821df79229e809a51f145ac956bcb7fe9c5e1b15abfd91270847cba592095864f9c55e7e90cabcd71d263f5658ee83cd24d5813d76824da3ac4ea58b01864cb0f7e12b788c583f8b4034fd735c8f5d67a4d2488a65c63732e28981dbe5909c54e5860e7710185906fa1b6c92aa0e469b310f7094ffc0895674ff48d9c71909873068ab651e45208e89edf6dd707f25cbfe1c27aee7ced914714a4e559399acb37a2e302e9a0b49160d8e7b62b587780ec8f2cfa9e62e4e1029d88f5919730ac9cfaad6beb61a8f9a1a77ba4ff3f094fe4fe77d773b3f59ad9b0d03d6489c53e791043e5a9ef9a05e1d4dbdb2af689b33cf03083ed924dfe04dc1af44f75d750c479e78457ba5a542045e4a2bbca585ff43dd3886e398679307a011e869a7b29372a53c2f0738fb11ae019b90861821195f0abcd858083f5d49c0a6671bf31a1ef32499c8a3cdc391d9082a736652663ed5142338d02305fae0a89f3d1fdd36cb803a8ee2295b38b5d10847d260f799c78a3ab11c17f036e423621532b22eaa872047e2c3c069f82caca3f8fc8403ad0324a2f67f93cccbdf77d10cf16a2cea64c33f64607e9513b1e189bb8ecbb23e7f391ad16a7d8d0c4020aa1c2d833db80b7a3b9fac096e928e99b241e6b9e7d6b7aacf66c657a11805884057ec10ca4692773b014996800c415097dc8b840397ba527aeb3cd1954f14e92c43c152c20da829b0e6b1b2f8cd67dba34fcb2d9ceeeb95bc51e95c33117d8ee36c301449091405ffe6f731b106554469146e901151086836c87d8ad69d767d69d92e8637b980af83bc9cc1749233943d71c5176bdd963bba04f4cc0e0101b956aa91f70f65e85bcca64d20dac8250f3a71f5f9d7dcd32a9b5039dfbb8241fc9caedadbb95c938ce8b842e7d3c8530b63b86d2035fbcf5da18558450e0ca57b512ffa83d0b4a4e4501b82d8d2580c1474456981c8938e360ccac926b6c7f63b6264a01f680723064891e183d794075b8c3dc63ccad8ea1aebd09f6d93c5068ee18c0900c26e061f5534850c782fa1f37e1ec76c369544af9fe9e81770957e8c9eed702530b612e882a885471bab5da3658ef848cad1d59af959cddf0109f7406afd693e3765be956b7b0803ebcd2cf548325f20a94858fb837721378b5ea16348405d0be4f8e30ca79166762a35bbc33b1c8897216a8984b7c195c0a054dff4438269238c772434b4007f9972510660038167367d0fa8c594528ae5876ecfc52022da9cab6a4e7866cb5772dacc3142972d35f2fdd2bb9d49c0104a26301114b2cad4603b54eef3f769282508a0e6ada6c5964ce90e89b90888eca5ddcd38b4b3b16446b89313c9c5eef4245f6b99ff8235c598b82f915db765a9d2b9bcb86970beeff4e651f931fcae900865bf71aa86de100cadc693a915d5c851d858a772ff6f89f3569a59841300687d2b217607472db82363b0f02cbaed2613545bcb08c092123601d54c103aa5633b7290a3a98151b65015ee0f8dfc32d2a91bf0566c4d35432a673bbf93fccd0da243ccaf3940d3c460a39e4b5df7e363fbc63f1ee807fc6e4ba4c994396a69748e8e083083440faf0611780ce1869d5cb3abf0dfe9cc3396b0409115a8ab8b843bebddb239da8eb3ecedb3d38440e4562e1050499b1cc5b36cab7e823f59e58185dc5ac54f8577e23f3ed290a8f7eb3637260a593c5837bca5b1d26a556056a8c66d03dc7226a8aa3b228bbeaf19ffcdafa7a06735ae5c117ff44bbc7916f94c7c9a0dc81b22dddf25f0b6af9bb754f39e150a3bc3da8061e1c052aae3c498ad9ba9e46d1bb868f15187e5d0654fdd271e45215cd96be84c202a86b639be9b70fda75cb6584586cedc0eebef37e0d913f601791e85368a5179be1c0e65c2813e4bd9bde4d48b14a179bfaceb5f7de4e57d37c2594e26b0f8f517b587cd067d2a7ea724e38377ff45391c79648d933749759785489b81ad4ee66bd00d775c8ea04781d8e5281c2c543ff9988c9920cdc30f9a8d40fa7937"}]}, @TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8}]}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xac}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfe}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}]}, 0xd8c}}, 0x24004800) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x1d0, r6, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xb3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffe01}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xeb}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5cd1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5a96}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x43365a98}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbad}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x4040000}, 0x4004) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x5c, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0xa00df6efbe73513c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x7b5}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xad7}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xc72}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48800}, 0x40000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r3, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r2) (async) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0xc266a4723dd56b93}, 0x14}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r5, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) (async) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) (async) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01090000000000000000030000004c0001800d0001007564b1101f49ae3ab901258b066ffa676683703a73797a31"], 0x60}}, 0x0) (async) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000d80)={0xd8c, r6, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}]}]}, @TIPC_NLA_NODE={0xc08, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xc04, 0x3, "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"}]}, @TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8}]}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xac}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfe}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}]}, 0xd8c}}, 0x24004800) (async) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x1d0, r6, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xb3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffe01}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xeb}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5cd1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5a96}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x43365a98}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbad}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x4040000}, 0x4004) (async) [ 517.229683] loop1: rw=1, want=128, limit=15 17:36:13 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x10000000, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) [ 517.268032] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 517.277609] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 517.284634] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 17:36:13 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) [ 517.425220] netlink: 364 bytes leftover after parsing attributes in process `syz-executor.3'. [ 517.434274] hfs: part requires an argument [ 517.446897] hfs: unable to parse mount options 17:36:14 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x209a00) 17:36:14 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x1f000000, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) [ 517.485452] netlink: 364 bytes leftover after parsing attributes in process `syz-executor.3'. [ 517.508814] attempt to access beyond end of device [ 517.524899] loop1: rw=1, want=16, limit=15 [ 517.546865] Buffer I/O error on dev loop1, logical block 15, lost async page write [ 517.585651] attempt to access beyond end of device [ 517.595303] loop1: rw=1, want=128, limit=15 [ 517.645777] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 517.686264] hfs: part requires an argument 17:36:14 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) futex(&(0x7f0000000140), 0x7, 0x2, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0)=0x1, 0x2) (rerun: 32) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) clock_gettime(0x7, &(0x7f0000000100)) (async) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) futex(&(0x7f0000000000)=0x1, 0x1, 0x2, &(0x7f0000000080)={r0, r1+60000000}, &(0x7f00000000c0), 0x2) 17:36:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x5c, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0xa00df6efbe73513c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x7b5}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xad7}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xc72}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48800}, 0x40000) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r3, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r2) (async) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0xc266a4723dd56b93}, 0x14}}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r5, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) (async, rerun: 32) r6 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) (rerun: 32) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01090000000000000000030000004c0001800d0001007564b1101f49ae3ab901258b066ffa676683703a73797a31"], 0x60}}, 0x0) (async, rerun: 32) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000d80)={0xd8c, r6, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}]}]}, @TIPC_NLA_NODE={0xc08, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xc04, 0x3, "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"}]}, @TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8}]}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xac}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfe}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}]}, 0xd8c}}, 0x24004800) (async, rerun: 32) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x1d0, r6, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xb3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffe01}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xeb}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5cd1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5a96}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x43365a98}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbad}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x4040000}, 0x4004) [ 517.708579] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 517.716634] hfs: unable to parse mount options [ 517.744471] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 17:36:14 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x20000000, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:14 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) futex(&(0x7f0000000000), 0xb, 0x2, &(0x7f0000000080)={r0, r1+60000000}, &(0x7f00000000c0)=0x2, 0x2) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 17:36:14 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x209b00) [ 517.875749] attempt to access beyond end of device [ 517.881359] loop1: rw=1, want=16, limit=15 [ 517.902858] Buffer I/O error on dev loop1, logical block 15, lost async page write 17:36:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) [ 517.946082] attempt to access beyond end of device 17:36:14 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) futex(&(0x7f0000000000), 0xb, 0x2, &(0x7f0000000080)={r0, r1+60000000}, &(0x7f00000000c0)=0x2, 0x2) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) clock_gettime(0x0, &(0x7f0000000040)) (async) futex(&(0x7f0000000000), 0xb, 0x2, &(0x7f0000000080)={r0, r1+60000000}, &(0x7f00000000c0)=0x2, 0x2) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) [ 517.967406] netlink: 364 bytes leftover after parsing attributes in process `syz-executor.3'. [ 517.971650] hfs: part requires an argument [ 517.986313] loop1: rw=1, want=128, limit=15 [ 518.002658] netlink: 364 bytes leftover after parsing attributes in process `syz-executor.3'. [ 518.008637] hfs: unable to parse mount options 17:36:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x12c, r1, 0xc266a4723dd56b93, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x35}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x54}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7d69}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x26}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ff}]}, 0x12c}}, 0x1) 17:36:14 executing program 4: futex(&(0x7f0000000000), 0x5, 0x2, 0x0, &(0x7f0000048000), 0x3) futex(&(0x7f000000cffc)=0x1, 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xa, 0x1, 0x0, 0x0, 0x1) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) clock_gettime(0x3, &(0x7f0000000040)) futex(&(0x7f0000000080), 0x0, 0x1, &(0x7f00000000c0), &(0x7f0000000100), 0x2) 17:36:14 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x3f000000, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) [ 518.174928] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 17:36:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 64) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x12c, r1, 0xc266a4723dd56b93, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x35}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x54}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7d69}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x26}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ff}]}, 0x12c}}, 0x1) [ 518.217344] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 518.230992] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 17:36:14 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x209d00) 17:36:14 executing program 4: futex(&(0x7f0000000000), 0x5, 0x2, 0x0, &(0x7f0000048000), 0x3) (async) futex(&(0x7f000000cffc)=0x1, 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xa, 0x1, 0x0, 0x0, 0x1) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) clock_gettime(0x3, &(0x7f0000000040)) (async) futex(&(0x7f0000000080), 0x0, 0x1, &(0x7f00000000c0), &(0x7f0000000100), 0x2) 17:36:14 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) futex(&(0x7f0000000000), 0xb, 0x2, &(0x7f0000000080)={r0, r1+60000000}, &(0x7f00000000c0)=0x2, 0x2) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) clock_gettime(0x0, &(0x7f0000000040)) (async) futex(&(0x7f0000000000), 0xb, 0x2, &(0x7f0000000080)={r0, r1+60000000}, &(0x7f00000000c0)=0x2, 0x2) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) [ 518.322817] attempt to access beyond end of device [ 518.327893] loop1: rw=1, want=16, limit=15 [ 518.334906] hfs: part requires an argument [ 518.374503] attempt to access beyond end of device [ 518.400633] hfs: unable to parse mount options [ 518.420884] loop1: rw=1, want=128, limit=15 17:36:15 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x48000000, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:15 executing program 4: futex(&(0x7f0000000000), 0x5, 0x2, 0x0, &(0x7f0000048000), 0x3) futex(&(0x7f000000cffc)=0x1, 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xa, 0x1, 0x0, 0x0, 0x1) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) clock_gettime(0x3, &(0x7f0000000040)) futex(&(0x7f0000000080), 0x0, 0x1, &(0x7f00000000c0), &(0x7f0000000100), 0x2) futex(&(0x7f0000000000), 0x5, 0x2, 0x0, &(0x7f0000048000), 0x3) (async) futex(&(0x7f000000cffc)=0x1, 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc)=0x4, 0xa, 0x1, 0x0, 0x0, 0x1) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) clock_gettime(0x3, &(0x7f0000000040)) (async) futex(&(0x7f0000000080), 0x0, 0x1, &(0x7f00000000c0), &(0x7f0000000100), 0x2) (async) 17:36:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:36:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x12c, r1, 0xc266a4723dd56b93, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x35}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x54}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7d69}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x26}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ff}]}, 0x12c}}, 0x1) 17:36:15 executing program 0: lseek(0xffffffffffffffff, 0x5fd, 0x2) futex(&(0x7f0000000100), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x2) futex(&(0x7f0000000000)=0x2, 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000200)=0x1, 0xd, 0x0, &(0x7f0000000240), &(0x7f0000000280), 0x1) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000040)=0x1, 0x4, 0x2, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0)=0x1, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x58, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000e40)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x23, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@generic={0x9, 0x8, 0x0, 0x4, 0x6}]}, &(0x7f0000000300)='GPL\x00', 0xffffff01, 0x1, &(0x7f0000000380)=""/1, 0x0, 0x1e, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x84, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x3, 0x4, 0x80, 0x2}, 0x10, r3, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff]}, 0x80) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x15, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xe1, &(0x7f0000000340)=""/225, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000cf134000ffffffff9500000000000000844edc1358484d33d45b3daefdcb526d"], &(0x7f0000000040)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x41000, 0x6, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x0, 0x4, 0x1, 0x1}, 0x10, r3, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r4, 0x1, 0xffffffffffffffff, r5, 0xffffffffffffffff]}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) mq_timedsend(0xffffffffffffffff, &(0x7f00000004c0)="1c3b209e3b1e9efd4a407bbf9060bacbea3120ba176c2a7a5583b87897744e7159d37868d85460d0b7ae28264679ac4eff4d799556617106657508212766d727cf649a2d326d5e557f6f86fb88c8205ca556a934fcfd04557d873f4769ae1598ba57aaad43c7705e91586dc743c7e379508d6a90b8b0508b60733531894539c7111370aa3ff02a89b1796309ebd804a5c0e498ee5b0a67d410e5bfc5f467848cd3ca34", 0xa3, 0x2000fffffff, 0x0) [ 518.625041] hfs: part requires an argument 17:36:15 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x8000}], 0x2, &(0x7f0000000180)={r2, r3+10000000}, &(0x7f00000001c0)={[0x1]}, 0x8) futex(&(0x7f0000000000)=0x2, 0x5, 0x2, &(0x7f0000000080)={r0, r1+60000000}, &(0x7f00000000c0)=0x2, 0x2) [ 518.651144] hfs: unable to parse mount options 17:36:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r3, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x1419c000) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="936b00ab1000000000000b000000"], 0x14}}, 0x0) r4 = accept4(r0, &(0x7f0000000240)=@xdp, &(0x7f0000000180)=0x80, 0x80000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r6, 0xc266a4723dd56b93}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000000440)={&(0x7f00000002c0), 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xec, r6, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x86c8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x27, 0x1c}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x25}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x70}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x84002090}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x6}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x80d4}, 0x80) 17:36:15 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x4c000000, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) [ 518.714279] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 17:36:15 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x209e00) [ 518.773437] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 518.783731] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 518.835814] attempt to access beyond end of device [ 518.841066] loop1: rw=1, want=16, limit=15 [ 518.863504] attempt to access beyond end of device [ 518.892207] loop1: rw=1, want=128, limit=15 [ 518.986836] hfs: part requires an argument 17:36:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:36:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r3, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x1419c000) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="936b00ab1000000000000b000000"], 0x14}}, 0x0) r4 = accept4(r0, &(0x7f0000000240)=@xdp, &(0x7f0000000180)=0x80, 0x80000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r6, 0xc266a4723dd56b93}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000000440)={&(0x7f00000002c0), 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xec, r6, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x86c8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x27, 0x1c}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x25}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x70}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x84002090}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x6}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x80d4}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r3, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) (async) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x1419c000) (async) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="936b00ab1000000000000b000000"], 0x14}}, 0x0) (async) accept4(r0, &(0x7f0000000240)=@xdp, &(0x7f0000000180)=0x80, 0x80000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_GET_DAEMON(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r6, 0xc266a4723dd56b93}, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000000440)={&(0x7f00000002c0), 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xec, r6, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x86c8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x27, 0x1c}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x25}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x70}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x84002090}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x6}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x80d4}, 0x80) (async) [ 519.010165] hfs: unable to parse mount options 17:36:15 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x60000000, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:15 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x20a000) [ 519.171011] attempt to access beyond end of device [ 519.174787] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 519.176184] loop1: rw=1, want=16, limit=15 [ 519.212538] attempt to access beyond end of device [ 519.231208] loop1: rw=1, want=128, limit=15 [ 519.242730] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 519.265175] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 519.293655] hfs: part requires an argument [ 519.297928] hfs: unable to parse mount options 17:36:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r3, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) (async) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x1419c000) (async) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="936b00ab1000000000000b000000"], 0x14}}, 0x0) r4 = accept4(r0, &(0x7f0000000240)=@xdp, &(0x7f0000000180)=0x80, 0x80000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r6, 0xc266a4723dd56b93}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000000440)={&(0x7f00000002c0), 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xec, r6, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x86c8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x27, 0x1c}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x25}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x70}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x84002090}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x6}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x80d4}, 0x80) 17:36:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:36:15 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x68000000, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) [ 519.456231] attempt to access beyond end of device [ 519.462046] loop1: rw=1, want=16, limit=15 [ 519.466286] buffer_io_error: 3 callbacks suppressed [ 519.466294] Buffer I/O error on dev loop1, logical block 15, lost async page write [ 519.495655] hfs: part requires an argument [ 519.500049] hfs: unable to parse mount options 17:36:16 executing program 0: lseek(0xffffffffffffffff, 0x5fd, 0x2) (async) futex(&(0x7f0000000100), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x2) (async) futex(&(0x7f0000000000)=0x2, 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000200)=0x1, 0xd, 0x0, &(0x7f0000000240), &(0x7f0000000280), 0x1) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f0000000040)=0x1, 0x4, 0x2, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0)=0x1, 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x58, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) (async) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000e40)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x23, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@generic={0x9, 0x8, 0x0, 0x4, 0x6}]}, &(0x7f0000000300)='GPL\x00', 0xffffff01, 0x1, &(0x7f0000000380)=""/1, 0x0, 0x1e, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x84, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x3, 0x4, 0x80, 0x2}, 0x10, r3, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff]}, 0x80) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x15, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xe1, &(0x7f0000000340)=""/225, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000cf134000ffffffff9500000000000000844edc1358484d33d45b3daefdcb526d"], &(0x7f0000000040)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x41000, 0x6, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x0, 0x4, 0x1, 0x1}, 0x10, r3, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r4, 0x1, 0xffffffffffffffff, r5, 0xffffffffffffffff]}, 0x80) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async) mq_timedsend(0xffffffffffffffff, &(0x7f00000004c0)="1c3b209e3b1e9efd4a407bbf9060bacbea3120ba176c2a7a5583b87897744e7159d37868d85460d0b7ae28264679ac4eff4d799556617106657508212766d727cf649a2d326d5e557f6f86fb88c8205ca556a934fcfd04557d873f4769ae1598ba57aaad43c7705e91586dc743c7e379508d6a90b8b0508b60733531894539c7111370aa3ff02a89b1796309ebd804a5c0e498ee5b0a67d410e5bfc5f467848cd3ca34", 0xa3, 0x2000fffffff, 0x0) [ 519.512059] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 519.514189] attempt to access beyond end of device [ 519.522128] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 519.529612] loop1: rw=1, want=128, limit=15 [ 519.532805] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 17:36:16 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async, rerun: 32) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async, rerun: 32) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async, rerun: 32) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) (async, rerun: 32) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x8000}], 0x2, &(0x7f0000000180)={r2, r3+10000000}, &(0x7f00000001c0)={[0x1]}, 0x8) futex(&(0x7f0000000000)=0x2, 0x5, 0x2, &(0x7f0000000080)={r0, r1+60000000}, &(0x7f00000000c0)=0x2, 0x2) 17:36:16 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x20a100) 17:36:16 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x6c000000, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0xfffffffffffffe60, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="936b00000000000000000b000000"], 0x54}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000e40)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x23, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@generic={0x9, 0x8, 0x0, 0x4, 0x6}]}, &(0x7f0000000300)='GPL\x00', 0xffffff01, 0x1, &(0x7f0000000380)=""/1, 0x0, 0x1e, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x84, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x3, 0x4, 0x80, 0x2}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x15, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xe1, &(0x7f0000000340)=""/225, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000cf134000ffffffff9500000000000000844edc1358484d33d45b3daefdcb526d"], &(0x7f0000000040)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x0, 0x4, 0x1, 0x1}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r3, 0x1, 0xffffffffffffffff, r4, 0xffffffffffffffff]}, 0x80) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r5, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r6, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r7, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x2, &(0x7f0000000040)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x2}], &(0x7f0000000080)='syzkaller\x00', 0x3f, 0x8c, &(0x7f0000000140)=""/140, 0x41000, 0x1f, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xc, 0x0, 0xe6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[r5, 0x1, r6, r7, 0xffffffffffffffff]}, 0x80) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@empty, 0x0}, &(0x7f0000000140)=0x14) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) 17:36:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:36:16 executing program 0: lseek(0xffffffffffffffff, 0x5fd, 0x2) (async, rerun: 32) futex(&(0x7f0000000100), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x2) (async, rerun: 32) futex(&(0x7f0000000000)=0x2, 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000200)=0x1, 0xd, 0x0, &(0x7f0000000240), &(0x7f0000000280), 0x1) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f0000000040)=0x1, 0x4, 0x2, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0)=0x1, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x58, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) (async, rerun: 64) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000e40)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r3, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x23, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@generic={0x9, 0x8, 0x0, 0x4, 0x6}]}, &(0x7f0000000300)='GPL\x00', 0xffffff01, 0x1, &(0x7f0000000380)=""/1, 0x0, 0x1e, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x84, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x3, 0x4, 0x80, 0x2}, 0x10, r3, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff]}, 0x80) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x15, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xe1, &(0x7f0000000340)=""/225, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000cf134000ffffffff9500000000000000844edc1358484d33d45b3daefdcb526d"], &(0x7f0000000040)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x41000, 0x6, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x0, 0x4, 0x1, 0x1}, 0x10, r3, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r4, 0x1, 0xffffffffffffffff, r5, 0xffffffffffffffff]}, 0x80) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (rerun: 32) mq_timedsend(0xffffffffffffffff, &(0x7f00000004c0)="1c3b209e3b1e9efd4a407bbf9060bacbea3120ba176c2a7a5583b87897744e7159d37868d85460d0b7ae28264679ac4eff4d799556617106657508212766d727cf649a2d326d5e557f6f86fb88c8205ca556a934fcfd04557d873f4769ae1598ba57aaad43c7705e91586dc743c7e379508d6a90b8b0508b60733531894539c7111370aa3ff02a89b1796309ebd804a5c0e498ee5b0a67d410e5bfc5f467848cd3ca34", 0xa3, 0x2000fffffff, 0x0) [ 519.714296] hfs: part requires an argument 17:36:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0xfffffffffffffe60, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="936b00000000000000000b000000"], 0x54}}, 0x0) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000e40)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r2, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x23, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@generic={0x9, 0x8, 0x0, 0x4, 0x6}]}, &(0x7f0000000300)='GPL\x00', 0xffffff01, 0x1, &(0x7f0000000380)=""/1, 0x0, 0x1e, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x84, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x3, 0x4, 0x80, 0x2}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x15, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xe1, &(0x7f0000000340)=""/225, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000cf134000ffffffff9500000000000000844edc1358484d33d45b3daefdcb526d"], &(0x7f0000000040)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x0, 0x4, 0x1, 0x1}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r3, 0x1, 0xffffffffffffffff, r4, 0xffffffffffffffff]}, 0x80) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r5, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r6, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r7, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x2, &(0x7f0000000040)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x2}], &(0x7f0000000080)='syzkaller\x00', 0x3f, 0x8c, &(0x7f0000000140)=""/140, 0x41000, 0x1f, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xc, 0x0, 0xe6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[r5, 0x1, r6, r7, 0xffffffffffffffff]}, 0x80) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@empty, 0x0}, &(0x7f0000000140)=0x14) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) 17:36:16 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x74000000, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) [ 519.739943] hfs: unable to parse mount options [ 519.755203] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 519.773216] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 17:36:16 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x20a300) [ 519.810660] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 519.855609] attempt to access beyond end of device [ 519.863067] loop1: rw=1, want=16, limit=15 [ 519.877616] Buffer I/O error on dev loop1, logical block 15, lost async page write 17:36:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:36:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0xfffffffffffffe60, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="936b00000000000000000b000000"], 0x54}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000e40)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r2, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x23, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@generic={0x9, 0x8, 0x0, 0x4, 0x6}]}, &(0x7f0000000300)='GPL\x00', 0xffffff01, 0x1, &(0x7f0000000380)=""/1, 0x0, 0x1e, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x84, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x3, 0x4, 0x80, 0x2}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x15, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xe1, &(0x7f0000000340)=""/225, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000cf134000ffffffff9500000000000000844edc1358484d33d45b3daefdcb526d"], &(0x7f0000000040)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x0, 0x4, 0x1, 0x1}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r3, 0x1, 0xffffffffffffffff, r4, 0xffffffffffffffff]}, 0x80) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r5, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r6, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r7, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x2, &(0x7f0000000040)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x2}], &(0x7f0000000080)='syzkaller\x00', 0x3f, 0x8c, &(0x7f0000000140)=""/140, 0x41000, 0x1f, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xc, 0x0, 0xe6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[r5, 0x1, r6, r7, 0xffffffffffffffff]}, 0x80) (async, rerun: 32) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@empty, 0x0}, &(0x7f0000000140)=0x14) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) [ 519.902638] hfs: part requires an argument [ 519.922590] hfs: unable to parse mount options [ 519.934873] attempt to access beyond end of device [ 519.940829] loop1: rw=1, want=128, limit=15 17:36:16 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x7a000000, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) [ 519.972497] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 519.983403] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 519.990996] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 520.133683] hfs: part requires an argument [ 520.138161] hfs: unable to parse mount options [ 520.169402] attempt to access beyond end of device [ 520.174375] loop1: rw=1, want=16, limit=15 [ 520.179166] Buffer I/O error on dev loop1, logical block 15, lost async page write [ 520.187129] attempt to access beyond end of device [ 520.193339] loop1: rw=1, want=128, limit=15 17:36:17 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x8000}], 0x2, &(0x7f0000000180)={r2, r3+10000000}, &(0x7f00000001c0)={[0x1]}, 0x8) futex(&(0x7f0000000000)=0x2, 0x5, 0x2, &(0x7f0000000080)={r0, r1+60000000}, &(0x7f00000000c0)=0x2, 0x2) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) clock_gettime(0x0, &(0x7f0000000040)) (async) clock_gettime(0x0, &(0x7f0000000140)) (async) ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x8000}], 0x2, &(0x7f0000000180)={r2, r3+10000000}, &(0x7f00000001c0)={[0x1]}, 0x8) (async) futex(&(0x7f0000000000)=0x2, 0x5, 0x2, &(0x7f0000000080)={r0, r1+60000000}, &(0x7f00000000c0)=0x2, 0x2) (async) 17:36:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0xc266a4723dd56b93}, 0x14}}, 0x0) 17:36:17 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0xc}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:36:17 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x20a400) 17:36:17 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x8cffffff, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:17 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000040), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 17:36:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0xc266a4723dd56b93}, 0x14}}, 0x0) 17:36:17 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x97ffffff, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:17 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x20a600) 17:36:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0xc266a4723dd56b93}, 0x14}}, 0x0) 17:36:17 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) clock_gettime(0x0, &(0x7f0000000000)) futex(&(0x7f0000000080)=0x1000000, 0xc, 0x1, 0x0, &(0x7f00000000c0), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) [ 520.821657] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 520.823815] attempt to access beyond end of device [ 520.844131] loop1: rw=1, want=16, limit=15 [ 520.862214] Buffer I/O error on dev loop1, logical block 15, lost async page write 17:36:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r1) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r2, 0xc266a4723dd56b93}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) [ 520.902839] attempt to access beyond end of device [ 520.908434] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 520.926169] loop1: rw=1, want=128, limit=15 [ 520.928407] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 17:36:17 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0xe}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:36:17 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0xc0ed0000, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:17 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) clock_gettime(0x0, &(0x7f0000000000)) (async) futex(&(0x7f0000000080)=0x1000000, 0xc, 0x1, 0x0, &(0x7f00000000c0), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 17:36:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r1) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r2, 0xc266a4723dd56b93}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) 17:36:17 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x20a700) [ 521.164527] hfs: part requires an argument [ 521.175910] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 521.189969] hfs: unable to parse mount options [ 521.210226] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 521.210722] attempt to access beyond end of device [ 521.221136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 521.233400] loop1: rw=1, want=16, limit=15 [ 521.243668] Buffer I/O error on dev loop1, logical block 15, lost async page write [ 521.265877] attempt to access beyond end of device [ 521.296922] loop1: rw=1, want=128, limit=15 17:36:18 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000040), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000040), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) 17:36:18 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0xe0ffffff, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:18 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) clock_gettime(0x0, &(0x7f0000000000)) futex(&(0x7f0000000080)=0x1000000, 0xc, 0x1, 0x0, &(0x7f00000000c0), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) clock_gettime(0x0, &(0x7f0000000000)) (async) futex(&(0x7f0000000080)=0x1000000, 0xc, 0x1, 0x0, &(0x7f00000000c0), 0x0) (async) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) 17:36:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r1) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r2, 0xc266a4723dd56b93}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) 17:36:18 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x20a900) 17:36:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0x10}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) [ 521.491080] attempt to access beyond end of device [ 521.505372] loop1: rw=1, want=16, limit=15 [ 521.513206] Buffer I/O error on dev loop1, logical block 15, lost async page write [ 521.521509] attempt to access beyond end of device [ 521.526714] loop1: rw=1, want=128, limit=15 17:36:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r3, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000cf134000ffffffff9500000000000000844edc1358484d33d45b3daefdcb526d"], &(0x7f0000000040)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x0, 0x4, 0x1, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r4, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r5, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r6, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x2, &(0x7f0000000040)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x2}], &(0x7f0000000080)='syzkaller\x00', 0x3f, 0x8c, &(0x7f0000000140)=""/140, 0x41000, 0x1f, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xc, 0x0, 0xe6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[r4, 0x1, r5, r6, 0xffffffffffffffff]}, 0x80) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x8, 0x2, 0x5, @vifc_lcl_ifindex, @broadcast}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendfile(r2, r7, 0x0, 0x3) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0xc266a4723dd56b93}, 0x14}}, 0x0) 17:36:18 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) futex(&(0x7f00000000c0)=0x1, 0x80, 0x0, &(0x7f0000000140)={r0, r1+60000000}, &(0x7f0000000180), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x104, 0xb, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 17:36:18 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0xf0032ef9, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) [ 521.666259] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 521.675892] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 521.686695] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 17:36:18 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x20aa00) [ 521.803200] attempt to access beyond end of device [ 521.808307] loop1: rw=1, want=16, limit=15 [ 521.824186] Buffer I/O error on dev loop1, logical block 15, lost async page write [ 521.847997] attempt to access beyond end of device [ 521.864735] loop1: rw=1, want=128, limit=15 17:36:18 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) futex(&(0x7f00000000c0)=0x1, 0x80, 0x0, &(0x7f0000000140)={r0, r1+60000000}, &(0x7f0000000180), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x104, 0xb, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) clock_gettime(0x0, &(0x7f0000000100)) (async) futex(&(0x7f00000000c0)=0x1, 0x80, 0x0, &(0x7f0000000140)={r0, r1+60000000}, &(0x7f0000000180), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc)=0x104, 0xb, 0x0, 0x0, 0x0, 0x0) (async) futex(&(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) 17:36:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0x60}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) [ 521.923056] nla_parse: 35 callbacks suppressed [ 521.923066] netlink: 364 bytes leftover after parsing attributes in process `syz-executor.3'. [ 522.075479] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 522.124953] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 522.136597] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 522.154686] attempt to access beyond end of device [ 522.159842] loop1: rw=1, want=16, limit=15 [ 522.173588] Buffer I/O error on dev loop1, logical block 15, lost async page write [ 522.203810] attempt to access beyond end of device [ 522.223411] loop1: rw=1, want=128, limit=15 17:36:19 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000040), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 17:36:19 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0xf6ffffff, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r3, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000cf134000ffffffff9500000000000000844edc1358484d33d45b3daefdcb526d"], &(0x7f0000000040)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x0, 0x4, 0x1, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async, rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (rerun: 64) openat$cgroup(r4, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r5, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) (async, rerun: 32) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (rerun: 32) openat$cgroup(r6, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x2, &(0x7f0000000040)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x2}], &(0x7f0000000080)='syzkaller\x00', 0x3f, 0x8c, &(0x7f0000000140)=""/140, 0x41000, 0x1f, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xc, 0x0, 0xe6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[r4, 0x1, r5, r6, 0xffffffffffffffff]}, 0x80) (async, rerun: 32) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x8, 0x2, 0x5, @vifc_lcl_ifindex, @broadcast}, 0x10) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) (async, rerun: 64) sendfile(r2, r7, 0x0, 0x3) (async, rerun: 64) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0xc266a4723dd56b93}, 0x14}}, 0x0) 17:36:19 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) futex(&(0x7f00000000c0)=0x1, 0x80, 0x0, &(0x7f0000000140)={r0, r1+60000000}, &(0x7f0000000180), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async, rerun: 32) futex(&(0x7f000000cffc)=0x104, 0xb, 0x0, 0x0, 0x0, 0x0) (rerun: 32) futex(&(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 17:36:19 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x20ac00) 17:36:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0xf0}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:36:19 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1000000010, 0x2, 0x0) r1 = socket(0x10, 0x8000000000000003, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705fcffffffffffffff00001f00", @ANYRES32=r5, @ANYBLOB="000004f8f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) futex(&(0x7f00000001c0)=0x1, 0x6, 0x0, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f00000002c0), 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x64, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xffff}, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_ctinfo={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x64}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002e000500000000ef4e5ffed1fe81168b", @ANYRES32=r5, @ANYBLOB="00000000ffffffffe4db55"], 0x24}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000100), 0x492492492492711, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 17:36:19 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0xf92e03f0, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:19 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x20ff0f) [ 522.703025] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 17:36:19 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0xfcfdffff, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) [ 522.749656] attempt to access beyond end of device [ 522.756485] loop1: rw=1, want=16, limit=15 [ 522.780997] Buffer I/O error on dev loop1, logical block 15, lost async page write 17:36:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r3, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000cf134000ffffffff9500000000000000844edc1358484d33d45b3daefdcb526d"], &(0x7f0000000040)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x0, 0x4, 0x1, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r4, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r5, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r6, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x2, &(0x7f0000000040)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x2}], &(0x7f0000000080)='syzkaller\x00', 0x3f, 0x8c, &(0x7f0000000140)=""/140, 0x41000, 0x1f, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xc, 0x0, 0xe6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[r4, 0x1, r5, r6, 0xffffffffffffffff]}, 0x80) (async) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x8, 0x2, 0x5, @vifc_lcl_ifindex, @broadcast}, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) (async) sendfile(r2, r7, 0x0, 0x3) (async) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0xc266a4723dd56b93}, 0x14}}, 0x0) [ 522.796235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 522.802409] attempt to access beyond end of device [ 522.833885] loop1: rw=1, want=128, limit=15 [ 522.834682] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 17:36:19 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0xfdfdffff, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) [ 523.084053] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 523.116244] HTB: quantum of class FFFFFFFF is big. Consider r2q change. [ 523.124022] netlink: 364 bytes leftover after parsing attributes in process `syz-executor.3'. [ 523.163563] attempt to access beyond end of device [ 523.169226] loop1: rw=1, want=16, limit=15 [ 523.174121] Buffer I/O error on dev loop1, logical block 15, lost async page write [ 523.189869] attempt to access beyond end of device [ 523.198770] loop1: rw=1, want=128, limit=15 17:36:19 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x800000, 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) sched_rr_get_interval(0x0, &(0x7f0000000000)) 17:36:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0x300}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:36:19 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x20fff0) 17:36:19 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1000000010, 0x2, 0x0) r1 = socket(0x10, 0x8000000000000003, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705fcffffffffffffff00001f00", @ANYRES32=r5, @ANYBLOB="000004f8f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) futex(&(0x7f00000001c0)=0x1, 0x6, 0x0, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f00000002c0), 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x64, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xffff}, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_ctinfo={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x64}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002e000500000000ef4e5ffed1fe81168b", @ANYRES32=r5, @ANYBLOB="00000000ffffffffe4db55"], 0x24}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000100), 0x492492492492711, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) (async) socket(0x1000000010, 0x2, 0x0) (async) socket(0x10, 0x8000000000000003, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x2, 0x0) (async) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705fcffffffffffffff00001f00", @ANYRES32=r5, @ANYBLOB="000004f8f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) (async) futex(&(0x7f00000001c0)=0x1, 0x6, 0x0, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f00000002c0), 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x64, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xffff}, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_ctinfo={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x64}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002e000500000000ef4e5ffed1fe81168b", @ANYRES32=r5, @ANYBLOB="00000000ffffffffe4db55"], 0x24}}, 0x0) (async) sendmmsg$alg(r0, &(0x7f0000000100), 0x492492492492711, 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) 17:36:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/nbd', 0xc0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x400}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0xa0, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x72, 0xbe, "5f6e51b795097910e3e87ea87a064cbac45749696e40c51b32b48dc7a75b761ac8b7a4d05c72347af3295d45a630426a041325cff9fb928438ec732f4beb14abe22087a61490ce1a997bade0bdd8b24f2608ee824ea4b5cec036e0eecdb9cd8a2529185fbc83e057beb88fd3a2fb"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0xa0}, 0x1, 0x0, 0x0, 0x2000c010}, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0xc266a4723dd56b93}, 0x14}}, 0x0) 17:36:19 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0xfdffffff, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/nbd', 0xc0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x400}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0xa0, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x72, 0xbe, "5f6e51b795097910e3e87ea87a064cbac45749696e40c51b32b48dc7a75b761ac8b7a4d05c72347af3295d45a630426a041325cff9fb928438ec732f4beb14abe22087a61490ce1a997bade0bdd8b24f2608ee824ea4b5cec036e0eecdb9cd8a2529185fbc83e057beb88fd3a2fb"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0xa0}, 0x1, 0x0, 0x0, 0x2000c010}, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0xc266a4723dd56b93}, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/nbd', 0xc0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x400}]}, 0x2c}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0xa0, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x72, 0xbe, "5f6e51b795097910e3e87ea87a064cbac45749696e40c51b32b48dc7a75b761ac8b7a4d05c72347af3295d45a630426a041325cff9fb928438ec732f4beb14abe22087a61490ce1a997bade0bdd8b24f2608ee824ea4b5cec036e0eecdb9cd8a2529185fbc83e057beb88fd3a2fb"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0xa0}, 0x1, 0x0, 0x0, 0x2000c010}, 0x1) (async) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0xc266a4723dd56b93}, 0x14}}, 0x0) (async) 17:36:20 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0xffff1f00, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x8800000) 17:36:20 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async, rerun: 64) futex(&(0x7f000000cffc)=0x800000, 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async, rerun: 64) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) sched_rr_get_interval(0x0, &(0x7f0000000000)) [ 523.602272] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 523.614293] attempt to access beyond end of device [ 523.619726] loop1: rw=1, want=16, limit=15 [ 523.637496] attempt to access beyond end of device 17:36:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0x500}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) [ 523.654918] loop1: rw=1, want=128, limit=15 [ 523.660835] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 523.676806] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 523.693374] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 17:36:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/nbd', 0xc0, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x400}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0xa0, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x72, 0xbe, "5f6e51b795097910e3e87ea87a064cbac45749696e40c51b32b48dc7a75b761ac8b7a4d05c72347af3295d45a630426a041325cff9fb928438ec732f4beb14abe22087a61490ce1a997bade0bdd8b24f2608ee824ea4b5cec036e0eecdb9cd8a2529185fbc83e057beb88fd3a2fb"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0xa0}, 0x1, 0x0, 0x0, 0x2000c010}, 0x1) (async) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0xc266a4723dd56b93}, 0x14}}, 0x0) 17:36:20 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1000000010, 0x2, 0x0) r1 = socket(0x10, 0x8000000000000003, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x2, 0x0) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705fcffffffffffffff00001f00", @ANYRES32=r5, @ANYBLOB="000004f8f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) futex(&(0x7f00000001c0)=0x1, 0x6, 0x0, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f00000002c0), 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x64, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xffff}, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_ctinfo={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x64}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002e000500000000ef4e5ffed1fe81168b", @ANYRES32=r5, @ANYBLOB="00000000ffffffffe4db55"], 0x24}}, 0x0) (rerun: 32) sendmmsg$alg(r0, &(0x7f0000000100), 0x492492492492711, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) [ 523.728472] HTB: quantum of class FFFFFFFF is big. Consider r2q change. 17:36:20 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0xfffffdfc, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = socket$alg(0x26, 0x5, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000340)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000400)=ANY=[], 0x44) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r2, 0x200002) [ 523.897204] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 523.927591] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 523.936105] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 17:36:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r2, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r1) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r3, 0xc266a4723dd56b93}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r4, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x2000821}, 0x40000) 17:36:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0x600}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:36:20 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) futex(&(0x7f0000000000)=0x6, 0x80, 0x1, &(0x7f0000000080)={r0, r1+60000000}, &(0x7f00000000c0)=0x2, 0x2) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) [ 523.937390] attempt to access beyond end of device [ 523.953045] loop1: rw=1, want=16, limit=15 [ 523.964330] attempt to access beyond end of device [ 523.974578] loop1: rw=1, want=128, limit=15 17:36:20 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0xfffffdfd, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:20 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) futex(&(0x7f0000000000)=0x6, 0x80, 0x1, &(0x7f0000000080)={r0, r1+60000000}, &(0x7f00000000c0)=0x2, 0x2) (async) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) [ 524.137790] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 17:36:20 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0xffffff7f, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) [ 524.235021] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 524.271118] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 524.282499] attempt to access beyond end of device [ 524.289742] loop1: rw=1, want=16, limit=15 [ 524.294649] attempt to access beyond end of device [ 524.301126] loop1: rw=1, want=128, limit=15 [ 524.334924] netlink: 364 bytes leftover after parsing attributes in process `syz-executor.3'. 17:36:21 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x800000, 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) sched_rr_get_interval(0x0, &(0x7f0000000000)) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc)=0x800000, 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) sched_rr_get_interval(0x0, &(0x7f0000000000)) (async) 17:36:21 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) futex(&(0x7f0000000000)=0x6, 0x80, 0x1, &(0x7f0000000080)={r0, r1+60000000}, &(0x7f00000000c0)=0x2, 0x2) (async) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 17:36:21 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = socket$alg(0x26, 0x5, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000340)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000400)=ANY=[], 0x44) (async) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r2, 0x200002) 17:36:21 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0xffffff8c, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0x700}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:36:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r2, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r1) (async) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r3, 0xc266a4723dd56b93}, 0x14}}, 0x0) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r4, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x2000821}, 0x40000) [ 524.538202] netlink: 364 bytes leftover after parsing attributes in process `syz-executor.3'. 17:36:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r2, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r1) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r3, 0xc266a4723dd56b93}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r4, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x2000821}, 0x40000) 17:36:21 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0xffffff97, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:21 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = socket$alg(0x26, 0x5, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000340)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000400)=ANY=[], 0x44) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r2, 0x200002) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) (async) chdir(&(0x7f0000000040)='./file0\x00') (async) socket$alg(0x26, 0x5, 0x0) (async) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000340)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) (async) write$P9_RREADLINK(r1, &(0x7f0000000400)=ANY=[], 0x44) (async) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) (async) ftruncate(r2, 0x200002) (async) 17:36:21 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0xffffffe0, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:21 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000000)=0x1, 0x8, 0xfffffffe, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000080)=0x2, 0x2) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) [ 524.652547] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 524.676018] attempt to access beyond end of device [ 524.697769] loop1: rw=1, want=16, limit=15 17:36:21 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) clock_gettime(0x6, &(0x7f0000000000)) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) [ 524.726636] buffer_io_error: 3 callbacks suppressed [ 524.726646] Buffer I/O error on dev loop1, logical block 15, lost async page write [ 524.756546] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 524.764696] attempt to access beyond end of device 17:36:21 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000000)=0x1, 0x8, 0xfffffffe, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000080)=0x2, 0x2) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f0000000000)=0x1, 0x8, 0xfffffffe, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000080)=0x2, 0x2) (async) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) 17:36:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0x75c}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:36:21 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) clock_gettime(0x6, &(0x7f0000000000)) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) clock_gettime(0x6, &(0x7f0000000000)) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) 17:36:21 executing program 3: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000e40)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x23, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@generic={0x9, 0x8, 0x0, 0x4, 0x6}]}, &(0x7f0000000300)='GPL\x00', 0xffffff01, 0x1, &(0x7f00000005c0)=""/1, 0x0, 0x1e, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x84, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x3, 0x4, 0x80, 0x2}, 0x10, r0, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x15, 0xa, &(0x7f0000000600)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r1, @ANYBLOB="0000a4bf48d4ec00000000000079000000000000001800000000000000ba9500"/53], &(0x7f0000000000)='GPL\x00', 0x4, 0xe1, &(0x7f0000000340)=""/225, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000cf134000ffffffff9500000000000000844edc1358484d33d45b3daefdcb526d"], &(0x7f0000000040)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x0, 0x4, 0x1, 0x1}, 0x10, r0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r1, 0x1, 0xffffffffffffffff, r2, 0xffffffffffffffff]}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r3, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r4, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r5, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="18d19298cd5500000200000008000000"], &(0x7f0000000080)='syzkaller\x00', 0x3f, 0x8c, &(0x7f0000000140)=""/140, 0x41000, 0x1f, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000700)={0x2, 0xc, 0x0, 0xe6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[r3, 0x1, r4, r5, r3]}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000000c0)=[{}], 0x8, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000580)={'erspan0\x00', &(0x7f0000000440)={'gretap0\x00', r6, 0x8, 0x7, 0x1000000, 0xffffffe0, {{0x3d, 0x4, 0x0, 0x3c, 0xf4, 0x67, 0x0, 0x2, 0x2f, 0x0, @private=0xa010102, @private=0xa010101, {[@ssrr={0x89, 0xf, 0x69, [@private=0xa010101, @empty, @local]}, @cipso={0x86, 0x49, 0x0, [{0x5, 0x8, "71d21559c3c1"}, {0x0, 0x11, "80f4636d7f9e7d272b428a68adec2d"}, {0x0, 0x6, "a5feef74"}, {0x5, 0x2}, {0x0, 0x2}, {0x6, 0x9, "7fb4980aa54767"}, {0x6, 0xb, "6dc53c8c2d49e63f66"}, {0x0, 0x4, "8783"}, {0x2, 0x8, "a525fe48e053"}]}, @cipso={0x86, 0x16, 0x2, [{0x5, 0x10, "c8d136bd12ebcff43b99c2a559b7"}]}, @generic={0x86, 0x8, "687155e39c05"}, @cipso={0x86, 0x25, 0x3, [{0x7, 0xd, "c02f010852d7c19da8b524"}, {0x1, 0x4, "8ee5"}, {0x5, 0x3, "14"}, {0x0, 0xb, "143015f0f2fcf1290d"}]}, @timestamp_addr={0x44, 0x34, 0x22, 0x1, 0x6, [{@remote, 0x1d6a}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x7}, {@multicast2, 0x3}, {@local, 0x9}, {@local}, {@multicast1}]}, @end, @ssrr={0x89, 0xf, 0x87, [@private=0xa010101, @multicast1, @broadcast]}]}}}}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r8, 0xc266a4723dd56b93}, 0x14}}, 0x0) [ 524.776884] loop1: rw=1, want=128, limit=15 [ 524.780573] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 524.809811] netlink: 364 bytes leftover after parsing attributes in process `syz-executor.3'. 17:36:21 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0xfffffff6, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:21 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async, rerun: 32) clock_gettime(0x6, &(0x7f0000000000)) (rerun: 32) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 17:36:21 executing program 3: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000e40)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r0, 0x4) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x23, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@generic={0x9, 0x8, 0x0, 0x4, 0x6}]}, &(0x7f0000000300)='GPL\x00', 0xffffff01, 0x1, &(0x7f00000005c0)=""/1, 0x0, 0x1e, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x84, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x3, 0x4, 0x80, 0x2}, 0x10, r0, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (rerun: 64) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x15, 0xa, &(0x7f0000000600)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r1, @ANYBLOB="0000a4bf48d4ec00000000000079000000000000001800000000000000ba9500"/53], &(0x7f0000000000)='GPL\x00', 0x4, 0xe1, &(0x7f0000000340)=""/225, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000cf134000ffffffff9500000000000000844edc1358484d33d45b3daefdcb526d"], &(0x7f0000000040)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x0, 0x4, 0x1, 0x1}, 0x10, r0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r1, 0x1, 0xffffffffffffffff, r2, 0xffffffffffffffff]}, 0x80) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r3, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r4, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r5, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="18d19298cd5500000200000008000000"], &(0x7f0000000080)='syzkaller\x00', 0x3f, 0x8c, &(0x7f0000000140)=""/140, 0x41000, 0x1f, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000700)={0x2, 0xc, 0x0, 0xe6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[r3, 0x1, r4, r5, r3]}, 0x80) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000000c0)=[{}], 0x8, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000580)={'erspan0\x00', &(0x7f0000000440)={'gretap0\x00', r6, 0x8, 0x7, 0x1000000, 0xffffffe0, {{0x3d, 0x4, 0x0, 0x3c, 0xf4, 0x67, 0x0, 0x2, 0x2f, 0x0, @private=0xa010102, @private=0xa010101, {[@ssrr={0x89, 0xf, 0x69, [@private=0xa010101, @empty, @local]}, @cipso={0x86, 0x49, 0x0, [{0x5, 0x8, "71d21559c3c1"}, {0x0, 0x11, "80f4636d7f9e7d272b428a68adec2d"}, {0x0, 0x6, "a5feef74"}, {0x5, 0x2}, {0x0, 0x2}, {0x6, 0x9, "7fb4980aa54767"}, {0x6, 0xb, "6dc53c8c2d49e63f66"}, {0x0, 0x4, "8783"}, {0x2, 0x8, "a525fe48e053"}]}, @cipso={0x86, 0x16, 0x2, [{0x5, 0x10, "c8d136bd12ebcff43b99c2a559b7"}]}, @generic={0x86, 0x8, "687155e39c05"}, @cipso={0x86, 0x25, 0x3, [{0x7, 0xd, "c02f010852d7c19da8b524"}, {0x1, 0x4, "8ee5"}, {0x5, 0x3, "14"}, {0x0, 0xb, "143015f0f2fcf1290d"}]}, @timestamp_addr={0x44, 0x34, 0x22, 0x1, 0x6, [{@remote, 0x1d6a}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x7}, {@multicast2, 0x3}, {@local, 0x9}, {@local}, {@multicast1}]}, @end, @ssrr={0x89, 0xf, 0x87, [@private=0xa010101, @multicast1, @broadcast]}]}}}}}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r8, 0xc266a4723dd56b93}, 0x14}}, 0x0) 17:36:21 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0xfffffffd, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) [ 524.953146] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 524.962375] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 524.971670] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 17:36:21 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') ftruncate(r1, 0x200002) 17:36:21 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000000)=0x1, 0x8, 0xfffffffe, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000080)=0x2, 0x2) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f0000000000)=0x1, 0x8, 0xfffffffe, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000080)=0x2, 0x2) (async) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) 17:36:21 executing program 3: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000e40)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x23, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@generic={0x9, 0x8, 0x0, 0x4, 0x6}]}, &(0x7f0000000300)='GPL\x00', 0xffffff01, 0x1, &(0x7f00000005c0)=""/1, 0x0, 0x1e, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x84, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x3, 0x4, 0x80, 0x2}, 0x10, r0, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x15, 0xa, &(0x7f0000000600)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r1, @ANYBLOB="0000a4bf48d4ec00000000000079000000000000001800000000000000ba9500"/53], &(0x7f0000000000)='GPL\x00', 0x4, 0xe1, &(0x7f0000000340)=""/225, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000cf134000ffffffff9500000000000000844edc1358484d33d45b3daefdcb526d"], &(0x7f0000000040)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x0, 0x4, 0x1, 0x1}, 0x10, r0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r1, 0x1, 0xffffffffffffffff, r2, 0xffffffffffffffff]}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r3, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r4, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r5, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="18d19298cd5500000200000008000000"], &(0x7f0000000080)='syzkaller\x00', 0x3f, 0x8c, &(0x7f0000000140)=""/140, 0x41000, 0x1f, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000700)={0x2, 0xc, 0x0, 0xe6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[r3, 0x1, r4, r5, r3]}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000000c0)=[{}], 0x8, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000580)={'erspan0\x00', &(0x7f0000000440)={'gretap0\x00', r6, 0x8, 0x7, 0x1000000, 0xffffffe0, {{0x3d, 0x4, 0x0, 0x3c, 0xf4, 0x67, 0x0, 0x2, 0x2f, 0x0, @private=0xa010102, @private=0xa010101, {[@ssrr={0x89, 0xf, 0x69, [@private=0xa010101, @empty, @local]}, @cipso={0x86, 0x49, 0x0, [{0x5, 0x8, "71d21559c3c1"}, {0x0, 0x11, "80f4636d7f9e7d272b428a68adec2d"}, {0x0, 0x6, "a5feef74"}, {0x5, 0x2}, {0x0, 0x2}, {0x6, 0x9, "7fb4980aa54767"}, {0x6, 0xb, "6dc53c8c2d49e63f66"}, {0x0, 0x4, "8783"}, {0x2, 0x8, "a525fe48e053"}]}, @cipso={0x86, 0x16, 0x2, [{0x5, 0x10, "c8d136bd12ebcff43b99c2a559b7"}]}, @generic={0x86, 0x8, "687155e39c05"}, @cipso={0x86, 0x25, 0x3, [{0x7, 0xd, "c02f010852d7c19da8b524"}, {0x1, 0x4, "8ee5"}, {0x5, 0x3, "14"}, {0x0, 0xb, "143015f0f2fcf1290d"}]}, @timestamp_addr={0x44, 0x34, 0x22, 0x1, 0x6, [{@remote, 0x1d6a}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x7}, {@multicast2, 0x3}, {@local, 0x9}, {@local}, {@multicast1}]}, @end, @ssrr={0x89, 0xf, 0x87, [@private=0xa010101, @multicast1, @broadcast]}]}}}}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r8, 0xc266a4723dd56b93}, 0x14}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000e40), 0x8) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r0, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x23, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@generic={0x9, 0x8, 0x0, 0x4, 0x6}]}, &(0x7f0000000300)='GPL\x00', 0xffffff01, 0x1, &(0x7f00000005c0)=""/1, 0x0, 0x1e, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x84, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x3, 0x4, 0x80, 0x2}, 0x10, r0, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x15, 0xa, &(0x7f0000000600)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r1, @ANYBLOB="0000a4bf48d4ec00000000000079000000000000001800000000000000ba9500"/53], &(0x7f0000000000)='GPL\x00', 0x4, 0xe1, &(0x7f0000000340)=""/225, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000cf134000ffffffff9500000000000000844edc1358484d33d45b3daefdcb526d"], &(0x7f0000000040)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x0, 0x4, 0x1, 0x1}, 0x10, r0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r1, 0x1, 0xffffffffffffffff, r2, 0xffffffffffffffff]}, 0x80) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async) openat$cgroup(r3, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async) openat$cgroup(r4, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async) openat$cgroup(r5, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="18d19298cd5500000200000008000000"], &(0x7f0000000080)='syzkaller\x00', 0x3f, 0x8c, &(0x7f0000000140)=""/140, 0x41000, 0x1f, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000700)={0x2, 0xc, 0x0, 0xe6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[r3, 0x1, r4, r5, r3]}, 0x80) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000000c0)=[{}], 0x8, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000580)={'erspan0\x00', &(0x7f0000000440)={'gretap0\x00', r6, 0x8, 0x7, 0x1000000, 0xffffffe0, {{0x3d, 0x4, 0x0, 0x3c, 0xf4, 0x67, 0x0, 0x2, 0x2f, 0x0, @private=0xa010102, @private=0xa010101, {[@ssrr={0x89, 0xf, 0x69, [@private=0xa010101, @empty, @local]}, @cipso={0x86, 0x49, 0x0, [{0x5, 0x8, "71d21559c3c1"}, {0x0, 0x11, "80f4636d7f9e7d272b428a68adec2d"}, {0x0, 0x6, "a5feef74"}, {0x5, 0x2}, {0x0, 0x2}, {0x6, 0x9, "7fb4980aa54767"}, {0x6, 0xb, "6dc53c8c2d49e63f66"}, {0x0, 0x4, "8783"}, {0x2, 0x8, "a525fe48e053"}]}, @cipso={0x86, 0x16, 0x2, [{0x5, 0x10, "c8d136bd12ebcff43b99c2a559b7"}]}, @generic={0x86, 0x8, "687155e39c05"}, @cipso={0x86, 0x25, 0x3, [{0x7, 0xd, "c02f010852d7c19da8b524"}, {0x1, 0x4, "8ee5"}, {0x5, 0x3, "14"}, {0x0, 0xb, "143015f0f2fcf1290d"}]}, @timestamp_addr={0x44, 0x34, 0x22, 0x1, 0x6, [{@remote, 0x1d6a}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x7}, {@multicast2, 0x3}, {@local, 0x9}, {@local}, {@multicast1}]}, @end, @ssrr={0x89, 0xf, 0x87, [@private=0xa010101, @multicast1, @broadcast]}]}}}}}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_GET_DAEMON(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r8, 0xc266a4723dd56b93}, 0x14}}, 0x0) (async) [ 525.023022] attempt to access beyond end of device 17:36:21 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0xedc000000000, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) [ 525.047678] loop1: rw=1, want=16, limit=15 [ 525.067332] Buffer I/O error on dev loop1, logical block 15, lost async page write 17:36:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x4040, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00'}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="00e5bc"], 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r4, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x58, &(0x7f0000000780)}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000e40)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r6, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x23, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000800000643db5e82990d255"], &(0x7f0000000300)='GPL\x00', 0xffffff01, 0x1, &(0x7f0000000380)=""/1, 0x0, 0x1e, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x84, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x3, 0x4, 0x80, 0x2}, 0x10, r6, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff]}, 0x80) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x15, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r7}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xe1, &(0x7f0000000340)=""/225, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r8, @ANYBLOB="00000000000000007900000000000000180000000000000000000000000000009500a6b9b1bdf00e7cd63923252f70bbed3e58ead93a85b5dd5f58ce6f7ca53c80163a6778e2e849c299922d38b2b4d2d74f91cca71ed79593fcbf6c72d3ae06995ea756405e78efc0da8c9b9a768f152db7c1befc146cf28ef6e5cc604db1c9fe5837bb6799abe5eef0d1bb0b7570718fff02f33c1a12ab873a59309d6e768450980061add21bcf26c446279db57c52cccd34ea6db9aec377006dab08"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000380)={{0x1, 0x1, 0x18, r3, {0x7}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fcdbdf250600000008000500080000000c00178004000600040005000a00e80008021100000000001c00e700730675bd29f4ab6faf3a234d994f4da60f0f8c0626f0aaf30a00e80008021100000000001c00e700259d9f94a94c2b73e9d14eb8181107a80b1b689bf5efcf1b1c00e7002544779a56c9e8366fec5a50d44497f164a3045571f47ae70a00180003030303030300000a0018000303030303030000080005000b0000000a00180003030303030300000a00180003030303030300000a00180003030303030300000500530001000000"], 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x44890) [ 525.106134] attempt to access beyond end of device [ 525.144192] loop1: rw=1, want=128, limit=15 17:36:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0x900}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:36:21 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) clock_settime(0x5, &(0x7f0000000000)={0x77359400}) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000000040), 0x0) 17:36:21 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x2000000000000, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x4040, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00'}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="00e5bc"], 0x14}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r4, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x58, &(0x7f0000000780)}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000e40)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r6, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x23, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000800000643db5e82990d255"], &(0x7f0000000300)='GPL\x00', 0xffffff01, 0x1, &(0x7f0000000380)=""/1, 0x0, 0x1e, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x84, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x3, 0x4, 0x80, 0x2}, 0x10, r6, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff]}, 0x80) (async) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x15, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r7}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xe1, &(0x7f0000000340)=""/225, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r8, @ANYBLOB="00000000000000007900000000000000180000000000000000000000000000009500a6b9b1bdf00e7cd63923252f70bbed3e58ead93a85b5dd5f58ce6f7ca53c80163a6778e2e849c299922d38b2b4d2d74f91cca71ed79593fcbf6c72d3ae06995ea756405e78efc0da8c9b9a768f152db7c1befc146cf28ef6e5cc604db1c9fe5837bb6799abe5eef0d1bb0b7570718fff02f33c1a12ab873a59309d6e768450980061add21bcf26c446279db57c52cccd34ea6db9aec377006dab08"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000380)={{0x1, 0x1, 0x18, r3, {0x7}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fcdbdf250600000008000500080000000c00178004000600040005000a00e80008021100000000001c00e700730675bd29f4ab6faf3a234d994f4da60f0f8c0626f0aaf30a00e80008021100000000001c00e700259d9f94a94c2b73e9d14eb8181107a80b1b689bf5efcf1b1c00e7002544779a56c9e8366fec5a50d44497f164a3045571f47ae70a00180003030303030300000a0018000303030303030000080005000b0000000a00180003030303030300000a00180003030303030300000a00180003030303030300000500530001000000"], 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x44890) [ 525.176750] netlink: 364 bytes leftover after parsing attributes in process `syz-executor.3'. [ 525.284695] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 525.338155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 525.347197] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 525.363358] attempt to access beyond end of device [ 525.369258] loop1: rw=1, want=16, limit=15 [ 525.374600] Buffer I/O error on dev loop1, logical block 15, lost async page write [ 525.386859] attempt to access beyond end of device [ 525.393526] loop1: rw=1, want=128, limit=15 [ 525.403578] netlink: 364 bytes leftover after parsing attributes in process `syz-executor.3'. 17:36:22 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000000), 0xd, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x1, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 17:36:22 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x4000000000000, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:22 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) (async, rerun: 64) chdir(&(0x7f0000000040)='./file0\x00') (rerun: 64) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) (async, rerun: 32) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) (rerun: 32) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') (async) ftruncate(r1, 0x200002) 17:36:22 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async, rerun: 64) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) clock_settime(0x5, &(0x7f0000000000)={0x77359400}) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000000040), 0x0) 17:36:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0xa00}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:36:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x4040, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00'}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="00e5bc"], 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r4, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x58, &(0x7f0000000780)}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000e40)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r6, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x23, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000800000643db5e82990d255"], &(0x7f0000000300)='GPL\x00', 0xffffff01, 0x1, &(0x7f0000000380)=""/1, 0x0, 0x1e, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x84, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x3, 0x4, 0x80, 0x2}, 0x10, r6, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff]}, 0x80) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x15, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r7}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xe1, &(0x7f0000000340)=""/225, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r8, @ANYBLOB="00000000000000007900000000000000180000000000000000000000000000009500a6b9b1bdf00e7cd63923252f70bbed3e58ead93a85b5dd5f58ce6f7ca53c80163a6778e2e849c299922d38b2b4d2d74f91cca71ed79593fcbf6c72d3ae06995ea756405e78efc0da8c9b9a768f152db7c1befc146cf28ef6e5cc604db1c9fe5837bb6799abe5eef0d1bb0b7570718fff02f33c1a12ab873a59309d6e768450980061add21bcf26c446279db57c52cccd34ea6db9aec377006dab08"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000380)={{0x1, 0x1, 0x18, r3, {0x7}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fcdbdf250600000008000500080000000c00178004000600040005000a00e80008021100000000001c00e700730675bd29f4ab6faf3a234d994f4da60f0f8c0626f0aaf30a00e80008021100000000001c00e700259d9f94a94c2b73e9d14eb8181107a80b1b689bf5efcf1b1c00e7002544779a56c9e8366fec5a50d44497f164a3045571f47ae70a00180003030303030300000a0018000303030303030000080005000b0000000a00180003030303030300000a00180003030303030300000a00180003030303030300000500530001000000"], 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x44890) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x4040, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00'}) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="00e5bc"], 0x14}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r4, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x58, &(0x7f0000000780)}, 0x10) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000e40), 0x8) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r6, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x23, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000800000643db5e82990d255"], &(0x7f0000000300)='GPL\x00', 0xffffff01, 0x1, &(0x7f0000000380)=""/1, 0x0, 0x1e, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x84, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x3, 0x4, 0x80, 0x2}, 0x10, r6, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff]}, 0x80) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x15, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r7}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xe1, &(0x7f0000000340)=""/225, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r8, @ANYBLOB="00000000000000007900000000000000180000000000000000000000000000009500a6b9b1bdf00e7cd63923252f70bbed3e58ead93a85b5dd5f58ce6f7ca53c80163a6778e2e849c299922d38b2b4d2d74f91cca71ed79593fcbf6c72d3ae06995ea756405e78efc0da8c9b9a768f152db7c1befc146cf28ef6e5cc604db1c9fe5837bb6799abe5eef0d1bb0b7570718fff02f33c1a12ab873a59309d6e768450980061add21bcf26c446279db57c52cccd34ea6db9aec377006dab08"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000380)={{0x1, 0x1, 0x18, r3, {0x7}}, './file0\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fcdbdf250600000008000500080000000c00178004000600040005000a00e80008021100000000001c00e700730675bd29f4ab6faf3a234d994f4da60f0f8c0626f0aaf30a00e80008021100000000001c00e700259d9f94a94c2b73e9d14eb8181107a80b1b689bf5efcf1b1c00e7002544779a56c9e8366fec5a50d44497f164a3045571f47ae70a00180003030303030300000a0018000303030303030000080005000b0000000a00180003030303030300000a00180003030303030300000a00180003030303030300000500530001000000"], 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x44890) (async) [ 525.843122] netlink: 364 bytes leftover after parsing attributes in process `syz-executor.3'. [ 525.876563] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 525.886764] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 17:36:22 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) clock_settime(0x5, &(0x7f0000000000)={0x77359400}) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000000040), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) (async) clock_settime(0x5, &(0x7f0000000000)={0x77359400}) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000000040), 0x0) (async) 17:36:22 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x40000000000000, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) [ 525.897619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 17:36:22 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000000), 0xd, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x1, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 17:36:22 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x100000000000000, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x0, 0x400}, 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0x4, &(0x7f0000000040)={&(0x7f0000000140)={0x68, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x9f71}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x2b0}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x24, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0x7}, @NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0xd5}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x1}, @NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x2}]}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x10) 17:36:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0xc00}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:36:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r1, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000280)={0x0, 0xea60}, 0x10) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000180)=0x1, 0x80, 0x2, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000200)=0x2, 0x1) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) clock_gettime(0x3, &(0x7f0000000240)) futex(&(0x7f0000000000), 0x3, 0x7fffffff, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x1) futex(&(0x7f00000000c0)=0x8, 0x1, 0x1, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000140), 0x2) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x8080, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000005c0)={0x27c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe67d}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x81}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9f8b}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_LINK={0xd8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f7}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x663}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffa83e}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa70}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfff}]}]}, 0x27c}, 0x1, 0x0, 0x0, 0x4}, 0x4040000) 17:36:22 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000000), 0xd, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x1, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f0000000000), 0xd, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x1, 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) [ 526.112561] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 526.136468] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 526.146962] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 17:36:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) (async) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) (async) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') (async) ftruncate(r1, 0x200002) 17:36:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x0, 0x400}, 0x14}}, 0x0) (async) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0x4, &(0x7f0000000040)={&(0x7f0000000140)={0x68, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x9f71}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x2b0}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x24, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0x7}, @NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0xd5}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x1}, @NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x2}]}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x10) 17:36:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r1, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) (async) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000280)={0x0, 0xea60}, 0x10) (async) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000180)=0x1, 0x80, 0x2, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000200)=0x2, 0x1) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) clock_gettime(0x3, &(0x7f0000000240)) (async) futex(&(0x7f0000000000), 0x3, 0x7fffffff, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x1) (async) futex(&(0x7f00000000c0)=0x8, 0x1, 0x1, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000140), 0x2) (async) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x8080, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000005c0)={0x27c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe67d}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x81}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9f8b}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_LINK={0xd8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f7}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x663}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffa83e}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa70}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfff}]}]}, 0x27c}, 0x1, 0x0, 0x0, 0x4}, 0x4040000) 17:36:23 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x10000000, 0x0, 0x2, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000000), 0x9, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x1, 0x1) clock_gettime(0x7, &(0x7f00000000c0)) 17:36:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0xe00}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:36:23 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x200000000000000, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:23 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x300000000000000, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x0, 0x400}, 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0x4, &(0x7f0000000040)={&(0x7f0000000140)={0x68, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x9f71}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x2b0}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x24, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0x7}, @NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0xd5}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x1}, @NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x2}]}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x0, 0x400}, 0x14}}, 0x0) (async) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0x4, &(0x7f0000000040)={&(0x7f0000000140)={0x68, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x9f71}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x2b0}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x24, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0x7}, @NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0xd5}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x1}, @NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x2}]}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x10) (async) 17:36:23 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc)=0x10000000, 0x0, 0x2, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async, rerun: 32) futex(&(0x7f0000000000), 0x9, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x1, 0x1) (async, rerun: 32) clock_gettime(0x7, &(0x7f00000000c0)) [ 526.837402] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 17:36:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file1\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file1\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r2, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x6}}, './file1\x00'}) r3 = open(&(0x7f0000000040)='./file1\x00', 0x141042, 0x0) ftruncate(r3, 0x200002) 17:36:23 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x400000000000000, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) [ 526.884689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 526.900156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 17:36:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0xc266a4723dd56b93}, 0x14}}, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000e40)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x23, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@generic={0x9, 0x8, 0x0, 0x4, 0x6}]}, &(0x7f0000000300)='GPL\x00', 0xffffff01, 0x1, &(0x7f0000000380)=""/1, 0x0, 0x1e, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x84, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x3, 0x4, 0x80, 0x2}, 0x10, r3, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff]}, 0x80) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x15, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xe1, &(0x7f0000000340)=""/225, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000cf134000ffffffff9500000000000000844edc1358484d33d45b3daefdcb526d"], &(0x7f0000000040)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x0, 0x4, 0x1, 0x1}, 0x10, r3, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r4, 0x1, 0xffffffffffffffff, r5, 0xffffffffffffffff]}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r6, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r7, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r8, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x2, &(0x7f0000000040)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x2}], &(0x7f0000000080)='syzkaller\x00', 0x3f, 0x8c, &(0x7f0000000140)=""/140, 0x41000, 0x1f, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xc, 0x0, 0xe6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[r6, 0x1, r7, r8, 0xffffffffffffffff]}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)=@ipv6_getnexthop={0x54, 0x6a, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_GROUPS={0x4}, @NHA_ID={0x8}, @NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_MASTER={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) 17:36:23 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x10000000, 0x0, 0x2, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000000), 0x9, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x1, 0x1) clock_gettime(0x7, &(0x7f00000000c0)) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc)=0x10000000, 0x0, 0x2, 0x0, &(0x7f0000048000), 0x0) (async) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f0000000000), 0x9, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x1, 0x1) (async) clock_gettime(0x7, &(0x7f00000000c0)) (async) 17:36:23 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x500000000000000, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r1, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) (async) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000280)={0x0, 0xea60}, 0x10) (async) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f0000000180)=0x1, 0x80, 0x2, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000200)=0x2, 0x1) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) clock_gettime(0x3, &(0x7f0000000240)) futex(&(0x7f0000000000), 0x3, 0x7fffffff, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x1) futex(&(0x7f00000000c0)=0x8, 0x1, 0x1, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000140), 0x2) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x8080, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000005c0)={0x27c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe67d}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x81}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9f8b}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_LINK={0xd8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f7}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x663}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffa83e}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa70}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfff}]}]}, 0x27c}, 0x1, 0x0, 0x0, 0x4}, 0x4040000) 17:36:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0x5865}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:36:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file1\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) (async) chdir(&(0x7f00000000c0)='./file1\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r2, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x6}}, './file1\x00'}) (async) r3 = open(&(0x7f0000000040)='./file1\x00', 0x141042, 0x0) ftruncate(r3, 0x200002) [ 527.096682] nla_parse: 1 callbacks suppressed [ 527.096692] netlink: 364 bytes leftover after parsing attributes in process `syz-executor.4'. 17:36:23 executing program 0: futex(&(0x7f000000cffc)=0xfffffffd, 0x80, 0x0, 0x0, &(0x7f0000000000)=0x3, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x2, 0x1, 0x0, &(0x7f0000048000), 0x0) 17:36:23 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x600000000000000, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0xc266a4723dd56b93}, 0x14}}, 0x0) (async) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000e40)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r3, 0x4) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x23, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@generic={0x9, 0x8, 0x0, 0x4, 0x6}]}, &(0x7f0000000300)='GPL\x00', 0xffffff01, 0x1, &(0x7f0000000380)=""/1, 0x0, 0x1e, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x84, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x3, 0x4, 0x80, 0x2}, 0x10, r3, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff]}, 0x80) (async, rerun: 32) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x15, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xe1, &(0x7f0000000340)=""/225, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000cf134000ffffffff9500000000000000844edc1358484d33d45b3daefdcb526d"], &(0x7f0000000040)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x0, 0x4, 0x1, 0x1}, 0x10, r3, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r4, 0x1, 0xffffffffffffffff, r5, 0xffffffffffffffff]}, 0x80) (rerun: 64) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r6, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) (async, rerun: 32) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (rerun: 32) openat$cgroup(r7, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) (async, rerun: 64) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (rerun: 64) openat$cgroup(r8, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x2, &(0x7f0000000040)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x2}], &(0x7f0000000080)='syzkaller\x00', 0x3f, 0x8c, &(0x7f0000000140)=""/140, 0x41000, 0x1f, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xc, 0x0, 0xe6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[r6, 0x1, r7, r8, 0xffffffffffffffff]}, 0x80) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)=@ipv6_getnexthop={0x54, 0x6a, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_GROUPS={0x4}, @NHA_ID={0x8}, @NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_MASTER={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) [ 527.154694] attempt to access beyond end of device [ 527.161074] loop1: rw=1, want=121, limit=15 [ 527.167173] attempt to access beyond end of device [ 527.225187] loop1: rw=1, want=122, limit=15 17:36:23 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x700000000000000, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:23 executing program 0: futex(&(0x7f000000cffc)=0xfffffffd, 0x80, 0x0, 0x0, &(0x7f0000000000)=0x3, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x2, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0xfffffffd, 0x80, 0x0, 0x0, &(0x7f0000000000)=0x3, 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0x2, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) [ 527.290832] Buffer I/O error on dev loop1, logical block 121, lost async page write [ 527.299092] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 17:36:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0xc266a4723dd56b93}, 0x14}}, 0x0) (async) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000e40)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r3, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x23, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@generic={0x9, 0x8, 0x0, 0x4, 0x6}]}, &(0x7f0000000300)='GPL\x00', 0xffffff01, 0x1, &(0x7f0000000380)=""/1, 0x0, 0x1e, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x84, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x3, 0x4, 0x80, 0x2}, 0x10, r3, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff]}, 0x80) (async) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x15, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xe1, &(0x7f0000000340)=""/225, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async, rerun: 32) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000cf134000ffffffff9500000000000000844edc1358484d33d45b3daefdcb526d"], &(0x7f0000000040)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x0, 0x4, 0x1, 0x1}, 0x10, r3, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r4, 0x1, 0xffffffffffffffff, r5, 0xffffffffffffffff]}, 0x80) (rerun: 64) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r6, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r7, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r8, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x2, &(0x7f0000000040)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x2}], &(0x7f0000000080)='syzkaller\x00', 0x3f, 0x8c, &(0x7f0000000140)=""/140, 0x41000, 0x1f, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xc, 0x0, 0xe6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[r6, 0x1, r7, r8, 0xffffffffffffffff]}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)=@ipv6_getnexthop={0x54, 0x6a, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_GROUPS={0x4}, @NHA_ID={0x8}, @NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_MASTER={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) 17:36:23 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x800000000000000, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) [ 527.354862] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 527.356684] attempt to access beyond end of device [ 527.375983] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 527.380945] loop1: rw=1, want=123, limit=15 [ 527.407789] Buffer I/O error on dev loop1, logical block 122, lost async page write [ 527.434824] attempt to access beyond end of device [ 527.450041] loop1: rw=1, want=124, limit=15 17:36:24 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x900000000000000, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) [ 527.454496] Buffer I/O error on dev loop1, logical block 123, lost async page write [ 527.465094] attempt to access beyond end of device [ 527.496848] loop1: rw=1, want=125, limit=15 [ 527.511813] Buffer I/O error on dev loop1, logical block 124, lost async page write 17:36:24 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x1000000000000000, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) [ 527.594738] attempt to access beyond end of device [ 527.639032] loop1: rw=1, want=126, limit=15 [ 527.664391] Buffer I/O error on dev loop1, logical block 125, lost async page write [ 527.672411] netlink: 364 bytes leftover after parsing attributes in process `syz-executor.4'. [ 527.692260] attempt to access beyond end of device [ 527.701442] loop1: rw=1, want=127, limit=15 [ 527.705920] Buffer I/O error on dev loop1, logical block 126, lost async page write 17:36:24 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) r1 = request_key(&(0x7f0000000140)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)='$%-\'\x00', 0xfffffffffffffffb) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, r2, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r2, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000000), 0x0, 0x2, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080), 0x0) 17:36:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0x5c07}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) [ 527.720445] attempt to access beyond end of device [ 527.727527] loop1: rw=1, want=128, limit=15 [ 527.733072] Buffer I/O error on dev loop1, logical block 127, lost async page write [ 527.774980] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 527.796986] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 527.813156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 17:36:24 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file1\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file1\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r2, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x6}}, './file1\x00'}) r3 = open(&(0x7f0000000040)='./file1\x00', 0x141042, 0x0) ftruncate(r3, 0x200002) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file1\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) (async) chdir(&(0x7f00000000c0)='./file1\x00') (async) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) (async) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r2, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x6}}, './file1\x00'}) (async) open(&(0x7f0000000040)='./file1\x00', 0x141042, 0x0) (async) ftruncate(r3, 0x200002) (async) 17:36:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r2, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r4, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x103, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r7, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x94, r8, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x71}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x17}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x4) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r6, 0xc266a4723dd56b93}, 0x14}}, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, r2, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffffffe0, 0x9}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0xb}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004}, 0x40004) 17:36:24 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x1f00000000000000, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:24 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) r1 = request_key(&(0x7f0000000140)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)='$%-\'\x00', 0xfffffffffffffffb) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, r2, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r2, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000000), 0x0, 0x2, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080), 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) (async) request_key(&(0x7f0000000140)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)='$%-\'\x00', 0xfffffffffffffffb) (async) add_key$keyring(&(0x7f0000000100), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) (async) keyctl$unlink(0x9, r2, 0xfffffffffffffffc) (async) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r2, 0x0) (async) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f0000000000), 0x0, 0x2, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080), 0x0) (async) 17:36:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0x6000}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) [ 527.882138] netlink: 364 bytes leftover after parsing attributes in process `syz-executor.1'. [ 527.936404] netlink: 364 bytes leftover after parsing attributes in process `syz-executor.3'. [ 527.966532] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 528.003753] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 528.032916] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 17:36:24 executing program 0: futex(&(0x7f000000cffc)=0xfffffffd, 0x80, 0x0, 0x0, &(0x7f0000000000)=0x3, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x2, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0xfffffffd, 0x80, 0x0, 0x0, &(0x7f0000000000)=0x3, 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0x2, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) 17:36:24 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x2000000000000000, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:24 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) (async, rerun: 32) r1 = request_key(&(0x7f0000000140)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)='$%-\'\x00', 0xfffffffffffffffb) (async, rerun: 32) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, r2, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r2, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000000), 0x0, 0x2, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080), 0x0) 17:36:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r2, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r4, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x103, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r7, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x94, r8, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x71}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x17}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x4) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r6, 0xc266a4723dd56b93}, 0x14}}, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, r2, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffffffe0, 0x9}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0xb}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004}, 0x40004) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r2, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r4, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x103, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r5) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r7, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x94, r8, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x71}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x17}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x4) (async) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r6, 0xc266a4723dd56b93}, 0x14}}, 0x0) (async) sendmsg$NL80211_CMD_TDLS_OPER(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, r2, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffffffe0, 0x9}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0xb}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004}, 0x40004) (async) 17:36:24 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x200002) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') [ 528.237242] netlink: 364 bytes leftover after parsing attributes in process `syz-executor.3'. 17:36:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0x6558}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) [ 528.289473] attempt to access beyond end of device [ 528.294457] loop1: rw=1, want=121, limit=15 [ 528.323150] attempt to access beyond end of device 17:36:24 executing program 4: futex(&(0x7f0000000300), 0xb, 0x0, 0x0, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f00000000c0), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000000)=0x1, 0x6, 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080), 0x2) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) futex(&(0x7f0000000340)=0x2, 0xb, 0x2, &(0x7f00000003c0)={r0, r1+60000000}, &(0x7f0000000400), 0x0) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200), 0x20200, 0x0) ppoll(&(0x7f0000000240)=[{r2, 0xa124}, {0xffffffffffffffff, 0x4}], 0x2, &(0x7f0000000280)={0x0, 0x3938700}, &(0x7f00000002c0)={[0x3]}, 0x8) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) futex(&(0x7f0000000100)=0x1, 0x4, 0x1, &(0x7f0000000180)={r3, r4+60000000}, &(0x7f00000001c0)=0x1, 0x0) futex(&(0x7f0000000440), 0x0, 0x1, 0x0, &(0x7f0000048000), 0x0) [ 528.331370] netlink: 364 bytes leftover after parsing attributes in process `syz-executor.3'. [ 528.344691] loop1: rw=1, want=122, limit=15 [ 528.349624] netlink: 364 bytes leftover after parsing attributes in process `syz-executor.3'. [ 528.366410] attempt to access beyond end of device [ 528.380915] loop1: rw=1, want=123, limit=15 17:36:24 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x3f00000000000000, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) [ 528.385428] attempt to access beyond end of device 17:36:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) (rerun: 64) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r2, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r4, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) (async) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x103, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r7, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x94, r8, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x71}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x17}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x4) (async, rerun: 32) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r6, 0xc266a4723dd56b93}, 0x14}}, 0x0) (rerun: 32) sendmsg$NL80211_CMD_TDLS_OPER(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, r2, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffffffe0, 0x9}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0xb}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004}, 0x40004) [ 528.425856] loop1: rw=1, want=124, limit=15 [ 528.442521] attempt to access beyond end of device [ 528.464900] loop1: rw=1, want=125, limit=15 17:36:25 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x4800000000000000, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) [ 528.474258] attempt to access beyond end of device [ 528.480292] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 528.482171] loop1: rw=1, want=126, limit=15 [ 528.501947] attempt to access beyond end of device [ 528.548970] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 528.557273] loop1: rw=1, want=127, limit=15 [ 528.569471] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 528.586009] attempt to access beyond end of device 17:36:25 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x4c00000000000000, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) [ 528.623305] loop1: rw=1, want=128, limit=15 17:36:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, r2, 0x400, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x10001}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x40}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5d}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x6}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffd}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x7c}}, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00c0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000240)={0x358, 0x21, 0x100, 0x70bd2a, 0x25dfdbfb, {0x1e}, [@typed={0x14, 0xe, 0x0, 0x0, @ipv6=@local}, @typed={0x8, 0x5c, 0x0, 0x0, @u32=0xffff}, @generic="944d18228915641b21edcb6050106c6e992c46e06688dfdfa1c902c5fd6cab952063586e73e59b5e244901fecb55f03f39d50781ebc679233c0f5df5d41506ca27b8685048cd7f339b22ab1dcc2aec9eebfb846a32d24b6963428c7ce69d9d0e3ab7e72437c06e3c5209ead6cdad143582a17b593b5535a4aade1173239b1f0eeca73c7e7d314d9267a9fbd37b6a32ad1d9d876cee12cec6c02820153b116ef6e7f62a66804aec63fd040018b799d6bbcf03dd75", @generic="5cb6c1bcc1023c1a412f9e95906c8443082bb2065ad5f1512e1717121133777941ad54a20d57959e1df3225d449a75c16305c6d0bc7d15dcf7c45fe7b7be20a184954fec695adc091fca9218817a3007f474aa41d4b92a9235d29e43b07c6691ad862d4dcad6895ae227fe029840ea4e80720ef96a92f161f343ddd4a547cc0ab5faf1894edde0f2daa960029982a72d9395638838c884a0cf68749770bdb145f821957eeb3185db2579eb0cfb2eb74514ecd882bd8b7e43f588a0b396215ce1772965daa5b166d0b8aa57c1a1f5df62202eec6d12bb35f0962a68e7bef8dfdc6c885b5f8a1546926ddbf1bd81f5e9f3", @nested={0x184, 0xe, 0x0, 0x1, [@typed={0xa6, 0xc, 0x0, 0x0, @binary="4005ccfed04c99bb5b44379e2ad9522acb89163027edee2ddcae716fbed8f7352bbdd45e0dc2408ff67f22d4a976c92f973d715cf268a58a7dca1da68a4efac8e916f151b3792d567e049de7a27db20be82652bbfe88f0a64b06ea0a3ab2bff42d56c3a7b8473681980011d5ff8961a76a89a6ac19377b31ef3d0e5eea4e15f56873c174aff75a996808bf4b89a1f3df13436c685df0d8ad2919850bc3e8984e62d8"}, @generic="8096218622cc67e6edf6cffb9ef47552bfcb72830d96e6deee9d7f2a", @generic="58e00f277cbcbb06c02a64a6fba1a50a8eb1d9ac686e029f308be24227c200174f92b82f8b7812778f34792cb502e57e68605bf0544052575b01ea5f56dea98db74255bc513dca22168c17d37a1305ce3a36b47f8dd4cf84313c3fadb25035da966a5a2b", @typed={0x8, 0x35, 0x0, 0x0, @pid}, @typed={0x4e, 0x73, 0x0, 0x0, @binary="6893ed4bffc801cd8b286e493134f3058ed8ff3473c8a9288ed63fb78e3cdb726f4d43dd71fa872bb5f9e75f4d93aa33884e4137b64a77e13c4b372b9e8e33d884204d53dbc525f1d651"}]}]}, 0x358}, 0x1, 0x0, 0x0, 0x24000004}, 0x90) [ 528.801524] attempt to access beyond end of device [ 528.806503] loop1: rw=1, want=16, limit=15 [ 528.826549] attempt to access beyond end of device [ 528.831899] loop1: rw=1, want=128, limit=15 17:36:25 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f00000000c0)=0x1, 0x2, 0x2, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000140)=0x2, 0x1) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000000), 0x9, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x0) 17:36:25 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x6000000000000000, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:25 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) (async) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x200002) (async) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 17:36:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, r2, 0x400, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x10001}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x40}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5d}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x6}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffd}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x7c}}, 0x0) (async, rerun: 32) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00c0, 0x0) (rerun: 32) sendmsg$nl_generic(r3, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000240)={0x358, 0x21, 0x100, 0x70bd2a, 0x25dfdbfb, {0x1e}, [@typed={0x14, 0xe, 0x0, 0x0, @ipv6=@local}, @typed={0x8, 0x5c, 0x0, 0x0, @u32=0xffff}, @generic="944d18228915641b21edcb6050106c6e992c46e06688dfdfa1c902c5fd6cab952063586e73e59b5e244901fecb55f03f39d50781ebc679233c0f5df5d41506ca27b8685048cd7f339b22ab1dcc2aec9eebfb846a32d24b6963428c7ce69d9d0e3ab7e72437c06e3c5209ead6cdad143582a17b593b5535a4aade1173239b1f0eeca73c7e7d314d9267a9fbd37b6a32ad1d9d876cee12cec6c02820153b116ef6e7f62a66804aec63fd040018b799d6bbcf03dd75", @generic="5cb6c1bcc1023c1a412f9e95906c8443082bb2065ad5f1512e1717121133777941ad54a20d57959e1df3225d449a75c16305c6d0bc7d15dcf7c45fe7b7be20a184954fec695adc091fca9218817a3007f474aa41d4b92a9235d29e43b07c6691ad862d4dcad6895ae227fe029840ea4e80720ef96a92f161f343ddd4a547cc0ab5faf1894edde0f2daa960029982a72d9395638838c884a0cf68749770bdb145f821957eeb3185db2579eb0cfb2eb74514ecd882bd8b7e43f588a0b396215ce1772965daa5b166d0b8aa57c1a1f5df62202eec6d12bb35f0962a68e7bef8dfdc6c885b5f8a1546926ddbf1bd81f5e9f3", @nested={0x184, 0xe, 0x0, 0x1, [@typed={0xa6, 0xc, 0x0, 0x0, @binary="4005ccfed04c99bb5b44379e2ad9522acb89163027edee2ddcae716fbed8f7352bbdd45e0dc2408ff67f22d4a976c92f973d715cf268a58a7dca1da68a4efac8e916f151b3792d567e049de7a27db20be82652bbfe88f0a64b06ea0a3ab2bff42d56c3a7b8473681980011d5ff8961a76a89a6ac19377b31ef3d0e5eea4e15f56873c174aff75a996808bf4b89a1f3df13436c685df0d8ad2919850bc3e8984e62d8"}, @generic="8096218622cc67e6edf6cffb9ef47552bfcb72830d96e6deee9d7f2a", @generic="58e00f277cbcbb06c02a64a6fba1a50a8eb1d9ac686e029f308be24227c200174f92b82f8b7812778f34792cb502e57e68605bf0544052575b01ea5f56dea98db74255bc513dca22168c17d37a1305ce3a36b47f8dd4cf84313c3fadb25035da966a5a2b", @typed={0x8, 0x35, 0x0, 0x0, @pid}, @typed={0x4e, 0x73, 0x0, 0x0, @binary="6893ed4bffc801cd8b286e493134f3058ed8ff3473c8a9288ed63fb78e3cdb726f4d43dd71fa872bb5f9e75f4d93aa33884e4137b64a77e13c4b372b9e8e33d884204d53dbc525f1d651"}]}]}, 0x358}, 0x1, 0x0, 0x0, 0x24000004}, 0x90) 17:36:25 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0x8100}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:36:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, r2, 0x400, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x10001}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x40}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5d}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x6}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffd}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x7c}}, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00c0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000240)={0x358, 0x21, 0x100, 0x70bd2a, 0x25dfdbfb, {0x1e}, [@typed={0x14, 0xe, 0x0, 0x0, @ipv6=@local}, @typed={0x8, 0x5c, 0x0, 0x0, @u32=0xffff}, @generic="944d18228915641b21edcb6050106c6e992c46e06688dfdfa1c902c5fd6cab952063586e73e59b5e244901fecb55f03f39d50781ebc679233c0f5df5d41506ca27b8685048cd7f339b22ab1dcc2aec9eebfb846a32d24b6963428c7ce69d9d0e3ab7e72437c06e3c5209ead6cdad143582a17b593b5535a4aade1173239b1f0eeca73c7e7d314d9267a9fbd37b6a32ad1d9d876cee12cec6c02820153b116ef6e7f62a66804aec63fd040018b799d6bbcf03dd75", @generic="5cb6c1bcc1023c1a412f9e95906c8443082bb2065ad5f1512e1717121133777941ad54a20d57959e1df3225d449a75c16305c6d0bc7d15dcf7c45fe7b7be20a184954fec695adc091fca9218817a3007f474aa41d4b92a9235d29e43b07c6691ad862d4dcad6895ae227fe029840ea4e80720ef96a92f161f343ddd4a547cc0ab5faf1894edde0f2daa960029982a72d9395638838c884a0cf68749770bdb145f821957eeb3185db2579eb0cfb2eb74514ecd882bd8b7e43f588a0b396215ce1772965daa5b166d0b8aa57c1a1f5df62202eec6d12bb35f0962a68e7bef8dfdc6c885b5f8a1546926ddbf1bd81f5e9f3", @nested={0x184, 0xe, 0x0, 0x1, [@typed={0xa6, 0xc, 0x0, 0x0, @binary="4005ccfed04c99bb5b44379e2ad9522acb89163027edee2ddcae716fbed8f7352bbdd45e0dc2408ff67f22d4a976c92f973d715cf268a58a7dca1da68a4efac8e916f151b3792d567e049de7a27db20be82652bbfe88f0a64b06ea0a3ab2bff42d56c3a7b8473681980011d5ff8961a76a89a6ac19377b31ef3d0e5eea4e15f56873c174aff75a996808bf4b89a1f3df13436c685df0d8ad2919850bc3e8984e62d8"}, @generic="8096218622cc67e6edf6cffb9ef47552bfcb72830d96e6deee9d7f2a", @generic="58e00f277cbcbb06c02a64a6fba1a50a8eb1d9ac686e029f308be24227c200174f92b82f8b7812778f34792cb502e57e68605bf0544052575b01ea5f56dea98db74255bc513dca22168c17d37a1305ce3a36b47f8dd4cf84313c3fadb25035da966a5a2b", @typed={0x8, 0x35, 0x0, 0x0, @pid}, @typed={0x4e, 0x73, 0x0, 0x0, @binary="6893ed4bffc801cd8b286e493134f3058ed8ff3473c8a9288ed63fb78e3cdb726f4d43dd71fa872bb5f9e75f4d93aa33884e4137b64a77e13c4b372b9e8e33d884204d53dbc525f1d651"}]}]}, 0x358}, 0x1, 0x0, 0x0, 0x24000004}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, r2, 0x400, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x10001}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x40}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5d}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x6}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffd}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x7c}}, 0x0) (async) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00c0, 0x0) (async) sendmsg$nl_generic(r3, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000240)={0x358, 0x21, 0x100, 0x70bd2a, 0x25dfdbfb, {0x1e}, [@typed={0x14, 0xe, 0x0, 0x0, @ipv6=@local}, @typed={0x8, 0x5c, 0x0, 0x0, @u32=0xffff}, @generic="944d18228915641b21edcb6050106c6e992c46e06688dfdfa1c902c5fd6cab952063586e73e59b5e244901fecb55f03f39d50781ebc679233c0f5df5d41506ca27b8685048cd7f339b22ab1dcc2aec9eebfb846a32d24b6963428c7ce69d9d0e3ab7e72437c06e3c5209ead6cdad143582a17b593b5535a4aade1173239b1f0eeca73c7e7d314d9267a9fbd37b6a32ad1d9d876cee12cec6c02820153b116ef6e7f62a66804aec63fd040018b799d6bbcf03dd75", @generic="5cb6c1bcc1023c1a412f9e95906c8443082bb2065ad5f1512e1717121133777941ad54a20d57959e1df3225d449a75c16305c6d0bc7d15dcf7c45fe7b7be20a184954fec695adc091fca9218817a3007f474aa41d4b92a9235d29e43b07c6691ad862d4dcad6895ae227fe029840ea4e80720ef96a92f161f343ddd4a547cc0ab5faf1894edde0f2daa960029982a72d9395638838c884a0cf68749770bdb145f821957eeb3185db2579eb0cfb2eb74514ecd882bd8b7e43f588a0b396215ce1772965daa5b166d0b8aa57c1a1f5df62202eec6d12bb35f0962a68e7bef8dfdc6c885b5f8a1546926ddbf1bd81f5e9f3", @nested={0x184, 0xe, 0x0, 0x1, [@typed={0xa6, 0xc, 0x0, 0x0, @binary="4005ccfed04c99bb5b44379e2ad9522acb89163027edee2ddcae716fbed8f7352bbdd45e0dc2408ff67f22d4a976c92f973d715cf268a58a7dca1da68a4efac8e916f151b3792d567e049de7a27db20be82652bbfe88f0a64b06ea0a3ab2bff42d56c3a7b8473681980011d5ff8961a76a89a6ac19377b31ef3d0e5eea4e15f56873c174aff75a996808bf4b89a1f3df13436c685df0d8ad2919850bc3e8984e62d8"}, @generic="8096218622cc67e6edf6cffb9ef47552bfcb72830d96e6deee9d7f2a", @generic="58e00f277cbcbb06c02a64a6fba1a50a8eb1d9ac686e029f308be24227c200174f92b82f8b7812778f34792cb502e57e68605bf0544052575b01ea5f56dea98db74255bc513dca22168c17d37a1305ce3a36b47f8dd4cf84313c3fadb25035da966a5a2b", @typed={0x8, 0x35, 0x0, 0x0, @pid}, @typed={0x4e, 0x73, 0x0, 0x0, @binary="6893ed4bffc801cd8b286e493134f3058ed8ff3473c8a9288ed63fb78e3cdb726f4d43dd71fa872bb5f9e75f4d93aa33884e4137b64a77e13c4b372b9e8e33d884204d53dbc525f1d651"}]}]}, 0x358}, 0x1, 0x0, 0x0, 0x24000004}, 0x90) (async) [ 529.144812] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 529.154091] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 529.163489] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 17:36:25 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) (async) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) (async) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x200002) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 17:36:25 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f00000000c0)=0x1, 0x2, 0x2, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000140)=0x2, 0x1) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000000), 0x9, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x0) 17:36:25 executing program 4: futex(&(0x7f0000000300), 0xb, 0x0, 0x0, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f00000000c0), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) (async) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000000)=0x1, 0x6, 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080), 0x2) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) futex(&(0x7f0000000340)=0x2, 0xb, 0x2, &(0x7f00000003c0)={r0, r1+60000000}, &(0x7f0000000400), 0x0) (async) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200), 0x20200, 0x0) ppoll(&(0x7f0000000240)=[{r2, 0xa124}, {0xffffffffffffffff, 0x4}], 0x2, &(0x7f0000000280)={0x0, 0x3938700}, &(0x7f00000002c0)={[0x3]}, 0x8) (async) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) futex(&(0x7f0000000100)=0x1, 0x4, 0x1, &(0x7f0000000180)={r3, r4+60000000}, &(0x7f00000001c0)=0x1, 0x0) (async, rerun: 32) futex(&(0x7f0000000440), 0x0, 0x1, 0x0, &(0x7f0000048000), 0x0) (rerun: 32) 17:36:25 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x6800000000000000, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:25 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000200)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@dstaddrv6={0x1c, 0x84, 0xa, @remote={0xfe, 0x80, '\x00', 0x0}}], 0x1c}, 0x0) 17:36:25 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0xf000}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:36:25 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x4, &(0x7f0000000940)=@framed={{}, [@kfunc]}, &(0x7f00000009c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 529.344056] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 529.372062] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 17:36:25 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f00000000c0)=0x1, 0x2, 0x2, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000140)=0x2, 0x1) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000000), 0x9, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f00000000c0)=0x1, 0x2, 0x2, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000140)=0x2, 0x1) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f0000000000), 0x9, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x0) (async) 17:36:26 executing program 1: sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}}, 0x20000040) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x8010, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) open(&(0x7f0000000040)='./file0\x00', 0x1410c2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000001000007080001000400000008000200010000000c000480050003000100000004000880"], 0x34}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ftruncate(r3, 0x200004) 17:36:26 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x6c00000000000000, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) [ 529.399493] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 17:36:26 executing program 3: syz_mount_image$qnx6(&(0x7f0000000c00), &(0x7f0000000c40)='./file0\x00', 0xfc00000000000, 0x1, &(0x7f00000010c0)=[{0x0}], 0x0, &(0x7f0000001180)) 17:36:26 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000000), 0x4, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x2, 0x0) futex(&(0x7f00000000c0)=0x800f, 0x6, 0x1, 0x0, &(0x7f0000048000), 0xfffffffd) 17:36:26 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x7400000000000000, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:26 executing program 1: sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}}, 0x20000040) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x8010, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) open(&(0x7f0000000040)='./file0\x00', 0x1410c2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000001000007080001000400000008000200010000000c000480050003000100000004000880"], 0x34}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ftruncate(r3, 0x200004) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}}, 0x20000040) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) (async) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x8010, &(0x7f00000004c0)=ANY=[]) (async) chdir(&(0x7f0000000040)='./file0\x00') (async) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) (async) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) (async) open(&(0x7f0000000040)='./file0\x00', 0x1410c2, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r1) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000001000007080001000400000008000200010000000c000480050003000100000004000880"], 0x34}}, 0x0) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ftruncate(r3, 0x200004) (async) [ 529.608514] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 529.665590] qnx6: wrong signature (magic) in superblock #1. [ 529.685072] qnx6: unable to read the first superblock 17:36:26 executing program 4: futex(&(0x7f0000000300), 0xb, 0x0, 0x0, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f00000000c0), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000000)=0x1, 0x6, 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080), 0x2) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) futex(&(0x7f0000000340)=0x2, 0xb, 0x2, &(0x7f00000003c0)={r0, r1+60000000}, &(0x7f0000000400), 0x0) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200), 0x20200, 0x0) ppoll(&(0x7f0000000240)=[{r2, 0xa124}, {0xffffffffffffffff, 0x4}], 0x2, &(0x7f0000000280)={0x0, 0x3938700}, &(0x7f00000002c0)={[0x3]}, 0x8) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) futex(&(0x7f0000000100)=0x1, 0x4, 0x1, &(0x7f0000000180)={r3, r4+60000000}, &(0x7f00000001c0)=0x1, 0x0) futex(&(0x7f0000000440), 0x0, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000300), 0xb, 0x0, 0x0, &(0x7f0000048000)=0x1, 0x0) (async) futex(&(0x7f00000000c0), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) (async) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) (async) futex(&(0x7f0000000000)=0x1, 0x6, 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080), 0x2) (async) clock_gettime(0x0, &(0x7f0000000380)) (async) futex(&(0x7f0000000340)=0x2, 0xb, 0x2, &(0x7f00000003c0)={r0, r1+60000000}, &(0x7f0000000400), 0x0) (async) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200), 0x20200, 0x0) (async) ppoll(&(0x7f0000000240)=[{r2, 0xa124}, {0xffffffffffffffff, 0x4}], 0x2, &(0x7f0000000280)={0x0, 0x3938700}, &(0x7f00000002c0)={[0x3]}, 0x8) (async) clock_gettime(0x0, &(0x7f0000000140)) (async) futex(&(0x7f0000000100)=0x1, 0x4, 0x1, &(0x7f0000000180)={r3, r4+60000000}, &(0x7f00000001c0)=0x1, 0x0) (async) futex(&(0x7f0000000440), 0x0, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) 17:36:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:36:26 executing program 3: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) socket$bt_rfcomm(0x1f, 0x0, 0x3) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000008c0)) 17:36:26 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x7a00000000000000, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:26 executing program 1: sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}}, 0x20000040) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x8010, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) open(&(0x7f0000000040)='./file0\x00', 0x1410c2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000001000007080001000400000008000200010000000c000480050003000100000004000880"], 0x34}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ftruncate(r3, 0x200004) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}}, 0x20000040) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) (async) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x8010, &(0x7f00000004c0)=ANY=[]) (async) chdir(&(0x7f0000000040)='./file0\x00') (async) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) (async) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) (async) open(&(0x7f0000000040)='./file0\x00', 0x1410c2, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r1) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000001000007080001000400000008000200010000000c000480050003000100000004000880"], 0x34}}, 0x0) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ftruncate(r3, 0x200004) (async) 17:36:26 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) 17:36:26 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000900)) 17:36:26 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x8cffffff00000000, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) [ 530.221524] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 530.232104] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 530.241185] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 17:36:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) [ 530.355959] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 530.370033] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 530.377115] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 17:36:27 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000000), 0x4, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x2, 0x0) futex(&(0x7f00000000c0)=0x800f, 0x6, 0x1, 0x0, &(0x7f0000048000), 0xfffffffd) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0x80, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f0000000000), 0x4, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x2, 0x0) (async) futex(&(0x7f00000000c0)=0x800f, 0x6, 0x1, 0x0, &(0x7f0000048000), 0xfffffffd) (async) 17:36:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x200002) 17:36:27 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 17:36:27 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000000), 0x80, 0x2, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)=0x2, 0x1) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) futex(&(0x7f00000000c0)=0x1, 0x1, 0x2, &(0x7f0000000140)={r0, r1+10000000}, &(0x7f0000000180)=0x2, 0x2) futex(&(0x7f000000cffc)=0x10, 0xe, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) 17:36:27 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x97ffffff00000000, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:27 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:36:27 executing program 3: r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000001740)={&(0x7f0000000000), 0xc, &(0x7f0000001700)={0x0, 0x9c0}}, 0x0) 17:36:27 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000300)="b9", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000002c0), &(0x7f0000006080)=0x20) 17:36:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) (async) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) (async, rerun: 32) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) (rerun: 32) ftruncate(r1, 0x200002) 17:36:27 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0xe0ffffffffffffff, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) [ 530.599037] attempt to access beyond end of device [ 530.604011] loop1: rw=1, want=16, limit=15 [ 530.615869] buffer_io_error: 8 callbacks suppressed [ 530.615879] Buffer I/O error on dev loop1, logical block 15, lost async page write [ 530.650228] attempt to access beyond end of device 17:36:27 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0xf0032ef900000000, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) [ 530.672722] loop1: rw=1, want=128, limit=15 17:36:27 executing program 3: pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) accept$inet6(r0, 0x0, 0x0) [ 530.870164] attempt to access beyond end of device [ 530.878226] loop1: rw=2049, want=16, limit=15 [ 530.896197] Buffer I/O error on dev loop1, logical block 15, lost async page write [ 530.966071] attempt to access beyond end of device [ 530.992503] loop1: rw=1, want=128, limit=15 17:36:27 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000000), 0x4, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x2, 0x0) (async) futex(&(0x7f00000000c0)=0x800f, 0x6, 0x1, 0x0, &(0x7f0000048000), 0xfffffffd) 17:36:27 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0xf6ffffff00000000, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:27 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0) 17:36:27 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async, rerun: 32) futex(&(0x7f0000000000), 0x80, 0x2, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)=0x2, 0x1) (async, rerun: 32) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) futex(&(0x7f00000000c0)=0x1, 0x1, 0x2, &(0x7f0000000140)={r0, r1+10000000}, &(0x7f0000000180)=0x2, 0x2) futex(&(0x7f000000cffc)=0x10, 0xe, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) (async, rerun: 32) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) (rerun: 32) 17:36:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x200002) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) (async) chdir(&(0x7f0000000040)='./file0\x00') (async) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) (async) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) (async) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) (async) ftruncate(r1, 0x200002) (async) [ 531.565064] attempt to access beyond end of device [ 531.581750] loop1: rw=1, want=128, limit=15 [ 533.233258] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.239940] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.673705] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 536.996255] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 540.371094] device geneve2 left promiscuous mode [ 540.498941] device veth9 left promiscuous mode 17:36:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:36:37 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000006200)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@dstopts_2292={{0x18}}], 0x18}}], 0x1, 0x0) 17:36:37 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0xfcfdffff00000000, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:37 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0/file0\x00', 0x2, 0x2, &(0x7f0000000100)=[{&(0x7f00000002c0)="eb3c906d6b66732e666b7400020101000240008000f801", 0x17}, {0x0, 0x0, 0x4}], 0x20, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x200202) 17:36:37 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000000)=0x1, 0x3, 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)=0x1, 0x1) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x23, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@generic={0x9, 0x8, 0x0, 0x4, 0x6}]}, &(0x7f0000000300)='GPL\x00', 0xffffff01, 0x1, &(0x7f0000000380)=""/1, 0x0, 0x1e, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x84, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x3, 0x4, 0x80, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x15, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xe1, &(0x7f0000000340)=""/225, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000cf134000ffffffff9500000000000000844edc1358484d33d45b3daefdcb526d"], &(0x7f0000000040)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x0, 0x4, 0x1, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r0, 0x1, 0xffffffffffffffff, r1, 0xffffffffffffffff]}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r2, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r3, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r4, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x2, &(0x7f0000000040)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x2}], &(0x7f0000000080)='syzkaller\x00', 0x3f, 0x8c, &(0x7f0000000140)=""/140, 0x41000, 0x1f, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xc, 0x0, 0xe6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[r2, 0x1, r3, r4, 0xffffffffffffffff]}, 0x80) mq_timedsend(r2, &(0x7f00000000c0)="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", 0xfc, 0x4, &(0x7f00000001c0)={0x0, 0x989680}) 17:36:37 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000000), 0x80, 0x2, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)=0x2, 0x1) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) futex(&(0x7f00000000c0)=0x1, 0x1, 0x2, &(0x7f0000000140)={r0, r1+10000000}, &(0x7f0000000180)=0x2, 0x2) (async) futex(&(0x7f000000cffc)=0x10, 0xe, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) (async) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) 17:36:37 executing program 3: r0 = socket(0x2, 0xa, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={0x0, 0x1c}}, 0x0) 17:36:37 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000000)=0x1, 0x3, 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)=0x1, 0x1) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x23, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@generic={0x9, 0x8, 0x0, 0x4, 0x6}]}, &(0x7f0000000300)='GPL\x00', 0xffffff01, 0x1, &(0x7f0000000380)=""/1, 0x0, 0x1e, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x84, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x3, 0x4, 0x80, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x15, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xe1, &(0x7f0000000340)=""/225, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000cf134000ffffffff9500000000000000844edc1358484d33d45b3daefdcb526d"], &(0x7f0000000040)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x0, 0x4, 0x1, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r0, 0x1, 0xffffffffffffffff, r1, 0xffffffffffffffff]}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r2, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r3, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r4, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x2, &(0x7f0000000040)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x2}], &(0x7f0000000080)='syzkaller\x00', 0x3f, 0x8c, &(0x7f0000000140)=""/140, 0x41000, 0x1f, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xc, 0x0, 0xe6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[r2, 0x1, r3, r4, 0xffffffffffffffff]}, 0x80) mq_timedsend(r2, &(0x7f00000000c0)="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", 0xfc, 0x4, &(0x7f00000001c0)={0x0, 0x989680}) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f0000000000)=0x1, 0x3, 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)=0x1, 0x1) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x23, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@generic={0x9, 0x8, 0x0, 0x4, 0x6}]}, &(0x7f0000000300)='GPL\x00', 0xffffff01, 0x1, &(0x7f0000000380)=""/1, 0x0, 0x1e, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x84, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x3, 0x4, 0x80, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x15, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xe1, &(0x7f0000000340)=""/225, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000cf134000ffffffff9500000000000000844edc1358484d33d45b3daefdcb526d"], &(0x7f0000000040)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x0, 0x4, 0x1, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r0, 0x1, 0xffffffffffffffff, r1, 0xffffffffffffffff]}, 0x80) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async) openat$cgroup(r2, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async) openat$cgroup(r3, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async) openat$cgroup(r4, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x2, &(0x7f0000000040)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x2}], &(0x7f0000000080)='syzkaller\x00', 0x3f, 0x8c, &(0x7f0000000140)=""/140, 0x41000, 0x1f, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xc, 0x0, 0xe6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[r2, 0x1, r3, r4, 0xffffffffffffffff]}, 0x80) (async) mq_timedsend(r2, &(0x7f00000000c0)="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", 0xfc, 0x4, &(0x7f00000001c0)={0x0, 0x989680}) (async) 17:36:37 executing program 3: add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0xa, r0, &(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0) 17:36:37 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0xfdfdffff00000000, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:37 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0/file0\x00', 0x2, 0x2, &(0x7f0000000100)=[{&(0x7f00000002c0)="eb3c906d6b66732e666b7400020101000240008000f801", 0x17}, {0x0, 0x0, 0x4}], 0x20, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x200202) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0/file0\x00', 0x2, 0x2, &(0x7f0000000100)=[{&(0x7f00000002c0)="eb3c906d6b66732e666b7400020101000240008000f801", 0x17}, {0x0, 0x0, 0x4}], 0x20, &(0x7f00000004c0)=ANY=[]) (async) chdir(&(0x7f0000000040)='./file0\x00') (async) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) (async) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) (async) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) (async) ftruncate(r1, 0x200202) (async) 17:36:37 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_link_settings={0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) [ 540.849562] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 540.872295] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 540.886518] 8021q: adding VLAN 0 to HW filter on device bond0 17:36:37 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000000)=0x1, 0x3, 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)=0x1, 0x1) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x23, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@generic={0x9, 0x8, 0x0, 0x4, 0x6}]}, &(0x7f0000000300)='GPL\x00', 0xffffff01, 0x1, &(0x7f0000000380)=""/1, 0x0, 0x1e, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x84, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x3, 0x4, 0x80, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x15, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xe1, &(0x7f0000000340)=""/225, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000cf134000ffffffff9500000000000000844edc1358484d33d45b3daefdcb526d"], &(0x7f0000000040)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x0, 0x4, 0x1, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r0, 0x1, 0xffffffffffffffff, r1, 0xffffffffffffffff]}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r2, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r3, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r4, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x2, &(0x7f0000000040)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x2}], &(0x7f0000000080)='syzkaller\x00', 0x3f, 0x8c, &(0x7f0000000140)=""/140, 0x41000, 0x1f, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xc, 0x0, 0xe6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[r2, 0x1, r3, r4, 0xffffffffffffffff]}, 0x80) mq_timedsend(r2, &(0x7f00000000c0)="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", 0xfc, 0x4, &(0x7f00000001c0)={0x0, 0x989680}) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f0000000000)=0x1, 0x3, 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)=0x1, 0x1) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x23, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@generic={0x9, 0x8, 0x0, 0x4, 0x6}]}, &(0x7f0000000300)='GPL\x00', 0xffffff01, 0x1, &(0x7f0000000380)=""/1, 0x0, 0x1e, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x84, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x3, 0x4, 0x80, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x15, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xe1, &(0x7f0000000340)=""/225, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000cf134000ffffffff9500000000000000844edc1358484d33d45b3daefdcb526d"], &(0x7f0000000040)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x0, 0x4, 0x1, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r0, 0x1, 0xffffffffffffffff, r1, 0xffffffffffffffff]}, 0x80) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async) openat$cgroup(r2, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async) openat$cgroup(r3, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async) openat$cgroup(r4, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x2, &(0x7f0000000040)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x2}], &(0x7f0000000080)='syzkaller\x00', 0x3f, 0x8c, &(0x7f0000000140)=""/140, 0x41000, 0x1f, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xc, 0x0, 0xe6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[r2, 0x1, r3, r4, 0xffffffffffffffff]}, 0x80) (async) mq_timedsend(r2, &(0x7f00000000c0)="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", 0xfc, 0x4, &(0x7f00000001c0)={0x0, 0x989680}) (async) 17:36:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:36:37 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0xfdffffff00000000, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:37 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0/file0\x00', 0x2, 0x2, &(0x7f0000000100)=[{&(0x7f00000002c0)="eb3c906d6b66732e666b7400020101000240008000f801", 0x17}, {0x0, 0x0, 0x4}], 0x20, &(0x7f00000004c0)=ANY=[]) (async) chdir(&(0x7f0000000040)='./file0\x00') (async) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) (async) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x200202) [ 540.894051] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 540.902451] 8021q: adding VLAN 0 to HW filter on device team0 [ 540.915465] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 17:36:37 executing program 3: syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x84700) [ 540.970307] syz-executor.2 (8981) used greatest stack depth: 22688 bytes left 17:36:38 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) clock_gettime(0x4, &(0x7f0000000000)) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) clock_gettime(0x6, &(0x7f0000000100)) futex(&(0x7f00000000c0)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x7, &(0x7f0000000080)) futex(&(0x7f000000cffc)=0xfffffffd, 0x4, 0x2, 0x0, &(0x7f0000000040)=0x1, 0xfffffffc) 17:36:38 executing program 3: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_persistent(0x16, 0x0, r0) 17:36:38 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000400)=ANY=[], 0x44) sendfile(r1, r1, &(0x7f0000000180)=0x101, 0x200) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) write$P9_RREADDIR(r2, &(0x7f00000000c0)={0xd7, 0x29, 0x1, {0x6, [{{0x40, 0x3, 0x8}, 0x963e, 0xfb, 0xd, './file0/file0'}, {{0x80, 0x4, 0x6}, 0x100000001, 0x6a, 0x7, './file0'}, {{0x40, 0x3, 0x4}, 0x2, 0x7f, 0x7, './file1'}, {{0x10, 0x2, 0x2000000000000000}, 0x5, 0xff, 0x7, './file0'}, {{0x1, 0x0, 0x5}, 0xff, 0x0, 0x7, './file0'}]}}, 0xac) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r3, 0x200002) 17:36:38 executing program 0: ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f0000000000)={0x4, 0x4, 0x1}) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0x7, 0x0, 0x0, &(0x7f0000048000)=0x2, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 17:36:38 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0xffff1f0000000000, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:38 executing program 0: ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f0000000000)={0x4, 0x4, 0x1}) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(0x0, 0x7, 0x0, 0x0, &(0x7f0000048000)=0x2, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 17:36:38 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r0, 0x6384}], 0x1, 0x0) 17:36:38 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0xffffff7f00000000, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) [ 541.606125] attempt to access beyond end of device [ 541.611202] loop1: rw=1, want=16, limit=15 [ 541.641221] Buffer I/O error on dev loop1, logical block 15, lost async page write [ 541.668650] attempt to access beyond end of device [ 541.674667] loop1: rw=1, want=128, limit=15 17:36:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:36:40 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) (async, rerun: 32) chdir(&(0x7f0000000040)='./file0\x00') (rerun: 32) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000400)=ANY=[], 0x44) sendfile(r1, r1, &(0x7f0000000180)=0x101, 0x200) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) (rerun: 32) write$P9_RREADDIR(r2, &(0x7f00000000c0)={0xd7, 0x29, 0x1, {0x6, [{{0x40, 0x3, 0x8}, 0x963e, 0xfb, 0xd, './file0/file0'}, {{0x80, 0x4, 0x6}, 0x100000001, 0x6a, 0x7, './file0'}, {{0x40, 0x3, 0x4}, 0x2, 0x7f, 0x7, './file1'}, {{0x10, 0x2, 0x2000000000000000}, 0x5, 0xff, 0x7, './file0'}, {{0x1, 0x0, 0x5}, 0xff, 0x0, 0x7, './file0'}]}}, 0xac) (async) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r3, 0x200002) 17:36:40 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) clock_gettime(0x4, &(0x7f0000000000)) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) clock_gettime(0x6, &(0x7f0000000100)) futex(&(0x7f00000000c0)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x7, &(0x7f0000000080)) futex(&(0x7f000000cffc)=0xfffffffd, 0x4, 0x2, 0x0, &(0x7f0000000040)=0x1, 0xfffffffc) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) clock_gettime(0x4, &(0x7f0000000000)) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) clock_gettime(0x6, &(0x7f0000000100)) (async) futex(&(0x7f00000000c0)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) (async) clock_gettime(0x7, &(0x7f0000000080)) (async) futex(&(0x7f000000cffc)=0xfffffffd, 0x4, 0x2, 0x0, &(0x7f0000000040)=0x1, 0xfffffffc) (async) 17:36:40 executing program 0: ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f0000000000)={0x4, 0x4, 0x1}) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async, rerun: 64) futex(0x0, 0x7, 0x0, 0x0, &(0x7f0000048000)=0x2, 0x0) (async, rerun: 64) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 17:36:40 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000003c0)="5059a7b5ed1e9b1b05719867e9224137ff343ff8b9a47226a526115303a11ce7c6aa2a74b7e57a51e22c44695bd1cf650303165ac3e89e938b5594b7bbaf4b8eca5044707d788e8924a8a975f44b27d82795146058eda1a33f393850b0f772439c3fc272bcf6cceb05ad92cce8cbd354fa", 0x71}], 0x1}}], 0x1, 0x0) 17:36:40 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0xffffffff00000000, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:40 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000000)=0x2, 0xd, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x1, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) futex(&(0x7f00000000c0), 0x4, 0x2, &(0x7f0000000140)={r0, r1+60000000}, &(0x7f0000000180)=0x1, 0x2) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 17:36:40 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x28}, './file0\x00'}) 17:36:40 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) clock_gettime(0x4, &(0x7f0000000000)) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) clock_gettime(0x6, &(0x7f0000000100)) futex(&(0x7f00000000c0)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) (async) clock_gettime(0x7, &(0x7f0000000080)) (async) futex(&(0x7f000000cffc)=0xfffffffd, 0x4, 0x2, 0x0, &(0x7f0000000040)=0x1, 0xfffffffc) 17:36:40 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0xffffffffffffffe0, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) 17:36:40 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) (async) chdir(&(0x7f0000000040)='./file0\x00') (async) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000400)=ANY=[], 0x44) (async) sendfile(r1, r1, &(0x7f0000000180)=0x101, 0x200) (async) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) write$P9_RREADDIR(r2, &(0x7f00000000c0)={0xd7, 0x29, 0x1, {0x6, [{{0x40, 0x3, 0x8}, 0x963e, 0xfb, 0xd, './file0/file0'}, {{0x80, 0x4, 0x6}, 0x100000001, 0x6a, 0x7, './file0'}, {{0x40, 0x3, 0x4}, 0x2, 0x7f, 0x7, './file1'}, {{0x10, 0x2, 0x2000000000000000}, 0x5, 0xff, 0x7, './file0'}, {{0x1, 0x0, 0x5}, 0xff, 0x0, 0x7, './file0'}]}}, 0xac) (async) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r3, 0x200002) 17:36:40 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0xffffffa9, 0x0, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_LEVEL={0x4c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x78}}, 0x0) [ 544.061663] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 544.116138] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 544.150898] 8021q: adding VLAN 0 to HW filter on device bond0 17:36:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="80010090ae289fa4c4f968a54074d68d48e7bfcad210b9ffffffff02be138069fbf6b2f7b7eafd038feead747ae58ec9c4d5ef5ebc2086eacc1b503f17ab67dff5978a723c8fd198a0cf0b0db9f66eae0e19dab337f8cfada64f0e44bce484440410befd4099fd8cbc08a037b5698ddefdc66dd7902d3d017a8a5cbfec05ad6adf9647876dcef678abe954fc8238d5f317e043fc121251ad9bdc8874d6c07d1b562ff788a00817bb046b60c22a8237d9984f03baba8fd875ba4a1be0c028898869091eea36a05457bb14382ae26353ae9a6af2eccaa71d17253fe68795413e20f2cceeb24009cec740fc", @ANYRES16=r1, @ANYBLOB="010f2ca07000ffdadf255848cd3500159af727108db558dc7a87aee73194d6d065558669c5e670b8f5ee2c91760427fe72ba4b82d427e3677c22eb6c5ca3c3a594fe576d4d926006a34e697f91a69a9530fabf5ca2334f3f40f9b0d43f0104000000000000cb148c86329d"], 0x180}}, 0x0) ftruncate(r0, 0x6) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 17:36:40 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f0000000000)=0x2, 0xd, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x1, 0x0) (async) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) futex(&(0x7f00000000c0), 0x4, 0x2, &(0x7f0000000140)={r0, r1+60000000}, &(0x7f0000000180)=0x1, 0x2) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 17:36:40 executing program 3: creat(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 17:36:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:36:40 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)={[{@part={'part', 0x25, 0x8000000000000001}}]}) [ 544.163510] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 544.170669] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.179656] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 17:36:40 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x3, 0x0, 0x0, [{}]}]}}, &(0x7f0000000140)=""/4096, 0x32, 0x1000, 0x1}, 0x20) 17:36:40 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000014c0)=@bpf_ext={0x8, 0x3, &(0x7f0000000340)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 544.286294] hfs: unable to parse mount options 17:36:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="80010090ae289fa4c4f968a54074d68d48e7bfcad210b9ffffffff02be138069fbf6b2f7b7eafd038feead747ae58ec9c4d5ef5ebc2086eacc1b503f17ab67dff5978a723c8fd198a0cf0b0db9f66eae0e19dab337f8cfada64f0e44bce484440410befd4099fd8cbc08a037b5698ddefdc66dd7902d3d017a8a5cbfec05ad6adf9647876dcef678abe954fc8238d5f317e043fc121251ad9bdc8874d6c07d1b562ff788a00817bb046b60c22a8237d9984f03baba8fd875ba4a1be0c028898869091eea36a05457bb14382ae26353ae9a6af2eccaa71d17253fe68795413e20f2cceeb24009cec740fc", @ANYRES16=r1, @ANYBLOB="010f2ca07000ffdadf255848cd3500159af727108db558dc7a87aee73194d6d065558669c5e670b8f5ee2c91760427fe72ba4b82d427e3677c22eb6c5ca3c3a594fe576d4d926006a34e697f91a69a9530fabf5ca2334f3f40f9b0d43f0104000000000000cb148c86329d"], 0x180}}, 0x0) ftruncate(r0, 0x6) (async) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 17:36:40 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000002}}]}) 17:36:40 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f0000000000)=0x2, 0xd, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x1, 0x0) (async) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) futex(&(0x7f00000000c0), 0x4, 0x2, &(0x7f0000000140)={r0, r1+60000000}, &(0x7f0000000180)=0x1, 0x2) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 17:36:40 executing program 3: msgrcv(0x0, 0x0, 0x32, 0x8aa9c604613efee5, 0x0) 17:36:41 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000000)=0x1, 0x1, 0x2, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x1) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) [ 544.426851] hfs: part requires an argument [ 544.436898] hfs: unable to parse mount options 17:36:41 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x48, 0x0, &(0x7f0000000080)) 17:36:41 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000003}}]}) 17:36:41 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r3, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r5, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, r7, 0x301}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)={0x1e0, r7, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000011) dup(r2) ftruncate(r1, 0x200002) [ 544.569443] hfs: part requires an argument [ 544.588968] hfs: unable to parse mount options 17:36:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:36:43 executing program 3: add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffff9) r0 = syz_open_dev$media(&(0x7f0000000240), 0x0, 0x40) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f00000008c0)={&(0x7f0000000400), 0xc, &(0x7f0000000880)={&(0x7f0000000440)={0x420}, 0x420}}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r2, 0x800c5011, &(0x7f0000000940)) openat$nvram(0xffffffffffffff9c, &(0x7f0000000980), 0x4000, 0x0) 17:36:43 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000000)=0x1, 0x1, 0x2, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x1) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 17:36:43 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000004}}]}) 17:36:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="80010090ae289fa4c4f968a54074d68d48e7bfcad210b9ffffffff02be138069fbf6b2f7b7eafd038feead747ae58ec9c4d5ef5ebc2086eacc1b503f17ab67dff5978a723c8fd198a0cf0b0db9f66eae0e19dab337f8cfada64f0e44bce484440410befd4099fd8cbc08a037b5698ddefdc66dd7902d3d017a8a5cbfec05ad6adf9647876dcef678abe954fc8238d5f317e043fc121251ad9bdc8874d6c07d1b562ff788a00817bb046b60c22a8237d9984f03baba8fd875ba4a1be0c028898869091eea36a05457bb14382ae26353ae9a6af2eccaa71d17253fe68795413e20f2cceeb24009cec740fc", @ANYRES16=r1, @ANYBLOB="010f2ca07000ffdadf255848cd3500159af727108db558dc7a87aee73194d6d065558669c5e670b8f5ee2c91760427fe72ba4b82d427e3677c22eb6c5ca3c3a594fe576d4d926006a34e697f91a69a9530fabf5ca2334f3f40f9b0d43f0104000000000000cb148c86329d"], 0x180}}, 0x0) (async) ftruncate(r0, 0x6) (async) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 17:36:43 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) (async) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r3, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r5, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, r7, 0x301}, 0x14}}, 0x0) (async) sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)={0x1e0, r7, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000011) (async) dup(r2) (async) ftruncate(r1, 0x200002) [ 547.015487] netlink: 364 bytes leftover after parsing attributes in process `syz-executor.1'. [ 547.048260] attempt to access beyond end of device 17:36:43 executing program 3: openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x200000, 0x0) [ 547.067397] loop1: rw=1, want=16, limit=15 [ 547.086276] Buffer I/O error on dev loop1, logical block 15, lost async page write 17:36:43 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) futex(&(0x7f000000cffc), 0x41c6f9bfb8c508c4, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) [ 547.122151] attempt to access beyond end of device [ 547.130040] hfs: part requires an argument [ 547.144404] loop1: rw=1, want=128, limit=15 [ 547.149638] hfs: unable to parse mount options 17:36:43 executing program 3: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000200)={'filter\x00', 0x4}, 0x68) 17:36:43 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000000)=0x1, 0x1, 0x2, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x1) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f0000000000)=0x1, 0x1, 0x2, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x1) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) 17:36:43 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) futex(&(0x7f000000cffc), 0x41c6f9bfb8c508c4, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 17:36:43 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000006}}]}) [ 547.183753] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 547.214324] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 547.263833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.303335] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 547.312938] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.333859] hfs: part requires an argument [ 547.343172] hfs: unable to parse mount options 17:36:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:36:43 executing program 0: futex(&(0x7f000000cffc), 0x800000000008, 0x0, 0x0, &(0x7f0000048000)=0x1, 0x1) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000000)=0x3, 0x80, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x2, 0x1) futex(&(0x7f00000000c0)=0x1, 0x8, 0x2, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000180)=0x2, 0x1) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 17:36:43 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$invalidate(0x15, r0) 17:36:43 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) futex(&(0x7f000000cffc), 0x41c6f9bfb8c508c4, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (rerun: 32) 17:36:44 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000007}}]}) [ 547.374298] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 547.394393] netlink: 364 bytes leftover after parsing attributes in process `syz-executor.1'. 17:36:44 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r3, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r5, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, r7, 0x301}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)={0x1e0, r7, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000011) dup(r2) ftruncate(r1, 0x200002) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) (async) chdir(&(0x7f0000000040)='./file0\x00') (async) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) (async) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) (async) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r3, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r5, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_SB_POOL_GET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, r7, 0x301}, 0x14}}, 0x0) (async) sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)={0x1e0, r7, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000011) (async) dup(r2) (async) ftruncate(r1, 0x200002) (async) 17:36:44 executing program 3: ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, 0x0) 17:36:44 executing program 0: futex(&(0x7f000000cffc), 0x800000000008, 0x0, 0x0, &(0x7f0000048000)=0x1, 0x1) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000000)=0x3, 0x80, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x2, 0x1) futex(&(0x7f00000000c0)=0x1, 0x8, 0x2, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000180)=0x2, 0x1) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x800000000008, 0x0, 0x0, &(0x7f0000048000)=0x1, 0x1) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f0000000000)=0x3, 0x80, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x2, 0x1) (async) futex(&(0x7f00000000c0)=0x1, 0x8, 0x2, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000180)=0x2, 0x1) (async) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) 17:36:44 executing program 4: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000e40)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x23, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@generic={0x9, 0x8, 0x0, 0x4, 0x6}]}, &(0x7f0000000300)='GPL\x00', 0xffffff01, 0x1, &(0x7f0000000380)=""/1, 0x0, 0x1e, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x84, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x3, 0x4, 0x80, 0x2}, 0x10, r0, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x15, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xe1, &(0x7f0000000340)=""/225, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000cf1b4000ffffffff9500000000000000844edcfc57484d33d41df23960ba7439"], &(0x7f0000000040)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x0, 0x4, 0x1, 0x1}, 0x10, r0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r1, 0x1, 0xffffffffffffffff, r2, 0xffffffffffffffff]}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r3, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r4, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r5, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x2, &(0x7f0000000040)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x2}], &(0x7f0000000080)='syzkaller\x00', 0x3f, 0x8c, &(0x7f0000000140)=""/140, 0x41000, 0x1f, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xc, 0x0, 0xe6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[r3, 0x1, r4, r5, 0xffffffffffffffff]}, 0x80) getsockopt$ARPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x63, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000040)=0x1e) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 17:36:44 executing program 0: futex(&(0x7f000000cffc), 0x800000000008, 0x0, 0x0, &(0x7f0000048000)=0x1, 0x1) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000000)=0x3, 0x80, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x2, 0x1) futex(&(0x7f00000000c0)=0x1, 0x8, 0x2, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000180)=0x2, 0x1) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x800000000008, 0x0, 0x0, &(0x7f0000048000)=0x1, 0x1) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f0000000000)=0x3, 0x80, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x2, 0x1) (async) futex(&(0x7f00000000c0)=0x1, 0x8, 0x2, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000180)=0x2, 0x1) (async) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) [ 547.511141] hfs: part requires an argument [ 547.523571] hfs: unable to parse mount options 17:36:44 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000008}}]}) 17:36:44 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000003980)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0xdc4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, 0x48) [ 547.683014] hfs: part requires an argument [ 547.695736] hfs: unable to parse mount options 17:36:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:36:46 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) clock_gettime(0x5, &(0x7f0000000000)) clock_gettime(0x2, &(0x7f0000000040)) futex(&(0x7f000000cffc), 0xc, 0x0, 0x0, &(0x7f0000048000), 0x0) 17:36:46 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) 17:36:46 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000009}}]}) 17:36:46 executing program 4: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000e40)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x23, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@generic={0x9, 0x8, 0x0, 0x4, 0x6}]}, &(0x7f0000000300)='GPL\x00', 0xffffff01, 0x1, &(0x7f0000000380)=""/1, 0x0, 0x1e, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x84, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x3, 0x4, 0x80, 0x2}, 0x10, r0, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x15, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xe1, &(0x7f0000000340)=""/225, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000cf1b4000ffffffff9500000000000000844edcfc57484d33d41df23960ba7439"], &(0x7f0000000040)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x0, 0x4, 0x1, 0x1}, 0x10, r0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r1, 0x1, 0xffffffffffffffff, r2, 0xffffffffffffffff]}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r3, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r4, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r5, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x2, &(0x7f0000000040)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x2}], &(0x7f0000000080)='syzkaller\x00', 0x3f, 0x8c, &(0x7f0000000140)=""/140, 0x41000, 0x1f, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xc, 0x0, 0xe6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[r3, 0x1, r4, r5, 0xffffffffffffffff]}, 0x80) getsockopt$ARPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x63, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000040)=0x1e) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000e40), 0x8) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r0, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x23, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@generic={0x9, 0x8, 0x0, 0x4, 0x6}]}, &(0x7f0000000300)='GPL\x00', 0xffffff01, 0x1, &(0x7f0000000380)=""/1, 0x0, 0x1e, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x84, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x3, 0x4, 0x80, 0x2}, 0x10, r0, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x15, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xe1, &(0x7f0000000340)=""/225, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000cf1b4000ffffffff9500000000000000844edcfc57484d33d41df23960ba7439"], &(0x7f0000000040)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x0, 0x4, 0x1, 0x1}, 0x10, r0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r1, 0x1, 0xffffffffffffffff, r2, 0xffffffffffffffff]}, 0x80) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async) openat$cgroup(r3, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async) openat$cgroup(r4, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async) openat$cgroup(r5, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x2, &(0x7f0000000040)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x2}], &(0x7f0000000080)='syzkaller\x00', 0x3f, 0x8c, &(0x7f0000000140)=""/140, 0x41000, 0x1f, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xc, 0x0, 0xe6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[r3, 0x1, r4, r5, 0xffffffffffffffff]}, 0x80) (async) getsockopt$ARPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x63, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000040)=0x1e) (async) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) 17:36:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x85) ftruncate(r1, 0x200002) [ 550.274951] netlink: 364 bytes leftover after parsing attributes in process `syz-executor.1'. [ 550.316729] attempt to access beyond end of device [ 550.321958] loop1: rw=1, want=16, limit=15 [ 550.341891] Buffer I/O error on dev loop1, logical block 15, lost async page write 17:36:46 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0xffffff1f}, 0x0) 17:36:46 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) clock_gettime(0x5, &(0x7f0000000000)) clock_gettime(0x2, &(0x7f0000000040)) futex(&(0x7f000000cffc), 0xc, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) clock_gettime(0x5, &(0x7f0000000000)) (async) clock_gettime(0x2, &(0x7f0000000040)) (async) futex(&(0x7f000000cffc), 0xc, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) [ 550.375059] hfs: part requires an argument [ 550.381875] attempt to access beyond end of device [ 550.391480] hfs: unable to parse mount options [ 550.400359] loop1: rw=1, want=128, limit=15 17:36:47 executing program 4: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000e40)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x23, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@generic={0x9, 0x8, 0x0, 0x4, 0x6}]}, &(0x7f0000000300)='GPL\x00', 0xffffff01, 0x1, &(0x7f0000000380)=""/1, 0x0, 0x1e, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x84, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x3, 0x4, 0x80, 0x2}, 0x10, r0, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x15, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xe1, &(0x7f0000000340)=""/225, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000cf1b4000ffffffff9500000000000000844edcfc57484d33d41df23960ba7439"], &(0x7f0000000040)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x0, 0x4, 0x1, 0x1}, 0x10, r0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r1, 0x1, 0xffffffffffffffff, r2, 0xffffffffffffffff]}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r3, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r4, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r5, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x2, &(0x7f0000000040)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x2}], &(0x7f0000000080)='syzkaller\x00', 0x3f, 0x8c, &(0x7f0000000140)=""/140, 0x41000, 0x1f, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xc, 0x0, 0xe6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[r3, 0x1, r4, r5, 0xffffffffffffffff]}, 0x80) getsockopt$ARPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x63, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000040)=0x1e) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000e40), 0x8) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r0, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x23, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@generic={0x9, 0x8, 0x0, 0x4, 0x6}]}, &(0x7f0000000300)='GPL\x00', 0xffffff01, 0x1, &(0x7f0000000380)=""/1, 0x0, 0x1e, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x84, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x3, 0x4, 0x80, 0x2}, 0x10, r0, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x15, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xe1, &(0x7f0000000340)=""/225, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000cf1b4000ffffffff9500000000000000844edcfc57484d33d41df23960ba7439"], &(0x7f0000000040)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x0, 0x4, 0x1, 0x1}, 0x10, r0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r1, 0x1, 0xffffffffffffffff, r2, 0xffffffffffffffff]}, 0x80) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async) openat$cgroup(r3, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async) openat$cgroup(r4, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async) openat$cgroup(r5, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x2, &(0x7f0000000040)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x2}], &(0x7f0000000080)='syzkaller\x00', 0x3f, 0x8c, &(0x7f0000000140)=""/140, 0x41000, 0x1f, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xc, 0x0, 0xe6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[r3, 0x1, r4, r5, 0xffffffffffffffff]}, 0x80) (async) getsockopt$ARPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x63, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000040)=0x1e) (async) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) 17:36:47 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000010}}]}) [ 550.477949] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 550.486470] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 17:36:47 executing program 3: request_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='keyring\x00', 0x0) 17:36:47 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) clock_gettime(0x5, &(0x7f0000000000)) clock_gettime(0x2, &(0x7f0000000040)) futex(&(0x7f000000cffc), 0xc, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) clock_gettime(0x5, &(0x7f0000000000)) (async) clock_gettime(0x2, &(0x7f0000000040)) (async) futex(&(0x7f000000cffc), 0xc, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) [ 550.569967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 550.618796] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 550.636203] hfs: part requires an argument [ 550.649715] 8021q: adding VLAN 0 to HW filter on device team0 [ 550.652441] hfs: unable to parse mount options [ 550.690165] attempt to access beyond end of device [ 550.702782] loop1: rw=1, want=121, limit=15 [ 550.714071] attempt to access beyond end of device [ 550.753384] loop1: rw=1, want=122, limit=15 [ 550.764380] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 550.782397] Buffer I/O error on dev loop1, logical block 121, lost async page write [ 550.791660] attempt to access beyond end of device [ 550.799015] loop1: rw=1, want=123, limit=15 17:36:47 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:36:47 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x85) ftruncate(r1, 0x200002) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) (async) chdir(&(0x7f0000000040)='./file0\x00') (async) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) (async) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) (async) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) (async) creat(&(0x7f0000000080)='./file0\x00', 0x85) (async) ftruncate(r1, 0x200002) (async) 17:36:47 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x5502, 0x0) 17:36:47 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000014}}]}) 17:36:47 executing program 4: futex(&(0x7f000000cffc)=0x1, 0x80, 0x0, 0x0, &(0x7f0000000100), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000180)=0x14, 0x80, 0x202, 0x0, 0x0, 0x10001) futex(&(0x7f0000000000)=0x2, 0x5, 0x2, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x1) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) futex(&(0x7f0000000240)=0x2, 0xd, 0x2, &(0x7f00000002c0)={r0, r1+10000000}, &(0x7f0000000300)=0x1, 0x2) futex(&(0x7f0000000140)=0x1, 0x1, 0x2, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000200)=0x1, 0x1) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) nanosleep(&(0x7f0000000440)={r2, r3+10000000}, &(0x7f0000000480)) futex(&(0x7f0000000340), 0x6a11ad17f2c1580f, 0x2, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f00000003c0), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) clock_gettime(0x4, &(0x7f00000000c0)) [ 550.811988] Buffer I/O error on dev loop1, logical block 122, lost async page write [ 550.843615] attempt to access beyond end of device [ 550.861379] loop1: rw=1, want=124, limit=15 [ 550.874393] hfs: part requires an argument [ 550.876698] Buffer I/O error on dev loop1, logical block 123, lost async page write [ 550.897801] hfs: unable to parse mount options [ 550.903670] attempt to access beyond end of device 17:36:47 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000025}}]}) 17:36:47 executing program 3: sigaltstack(&(0x7f0000000100)={0x0}, &(0x7f0000000180)={0x0}) [ 550.913920] loop1: rw=1, want=125, limit=15 [ 550.919343] Buffer I/O error on dev loop1, logical block 124, lost async page write [ 550.932853] attempt to access beyond end of device [ 550.939991] loop1: rw=1, want=126, limit=15 [ 550.991416] Buffer I/O error on dev loop1, logical block 125, lost async page write 17:36:47 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x4580, 0x0) [ 551.035638] attempt to access beyond end of device [ 551.061586] loop1: rw=1, want=127, limit=15 [ 551.082609] hfs: part requires an argument [ 551.093693] Buffer I/O error on dev loop1, logical block 126, lost async page write [ 551.109510] hfs: unable to parse mount options 17:36:47 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x800000000000002e}}]}) [ 551.141959] attempt to access beyond end of device [ 551.151779] loop1: rw=1, want=128, limit=15 [ 551.158706] Buffer I/O error on dev loop1, logical block 127, lost async page write [ 551.276232] hfs: part requires an argument [ 551.298113] hfs: unable to parse mount options 17:36:47 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000032}}]}) 17:36:48 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') (async) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x85) (async) ftruncate(r1, 0x200002) 17:36:48 executing program 0: futex(&(0x7f00000000c0)=0x2, 0x8, 0x0, &(0x7f0000000100), &(0x7f0000000140)=0x1, 0x1) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000200), 0x3, 0x1, &(0x7f0000000240), &(0x7f0000000280), 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000180), 0x8, 0x1, &(0x7f00000003c0)={0x77359400}, &(0x7f0000000400)=0x1, 0x0) futex(&(0x7f0000000440), 0x109, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, &(0x7f0000000340)=0xffffffff, 0x2) futex(&(0x7f0000000000), 0x7, 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)=0x1, 0x2) futex(&(0x7f00000002c0)=0x2, 0x1, 0x0, &(0x7f0000000480)={0x77359400}, &(0x7f00000004c0)=0x1, 0x0) futex(&(0x7f0000000380), 0x2, 0x0, &(0x7f00000001c0), 0xfffffffffffffffc, 0x0) [ 551.545874] hfs: part requires an argument [ 551.566976] hfs: unable to parse mount options 17:36:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:36:50 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000063}}]}) 17:36:50 executing program 0: futex(&(0x7f00000000c0)=0x2, 0x8, 0x0, &(0x7f0000000100), &(0x7f0000000140)=0x1, 0x1) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f0000000200), 0x3, 0x1, &(0x7f0000000240), &(0x7f0000000280), 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000180), 0x8, 0x1, &(0x7f00000003c0)={0x77359400}, &(0x7f0000000400)=0x1, 0x0) (async) futex(&(0x7f0000000440), 0x109, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, &(0x7f0000000340)=0xffffffff, 0x2) futex(&(0x7f0000000000), 0x7, 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)=0x1, 0x2) (async) futex(&(0x7f00000002c0)=0x2, 0x1, 0x0, &(0x7f0000000480)={0x77359400}, &(0x7f00000004c0)=0x1, 0x0) (async) futex(&(0x7f0000000380), 0x2, 0x0, &(0x7f00000001c0), 0xfffffffffffffffc, 0x0) 17:36:50 executing program 4: futex(&(0x7f000000cffc)=0x1, 0x80, 0x0, 0x0, &(0x7f0000000100), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000180)=0x14, 0x80, 0x202, 0x0, 0x0, 0x10001) (async) futex(&(0x7f0000000000)=0x2, 0x5, 0x2, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x1) (async) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) futex(&(0x7f0000000240)=0x2, 0xd, 0x2, &(0x7f00000002c0)={r0, r1+10000000}, &(0x7f0000000300)=0x1, 0x2) (async, rerun: 64) futex(&(0x7f0000000140)=0x1, 0x1, 0x2, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000200)=0x1, 0x1) (async, rerun: 64) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) nanosleep(&(0x7f0000000440)={r2, r3+10000000}, &(0x7f0000000480)) (async) futex(&(0x7f0000000340), 0x6a11ad17f2c1580f, 0x2, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f00000003c0), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) clock_gettime(0x4, &(0x7f00000000c0)) 17:36:50 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x4, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x40000, &(0x7f0000000080)=ANY=[@ANYRESOCT=0x0, @ANYRES64=0x0]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x200002) 17:36:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x9, 0x0, &(0x7f00000001c0)) 17:36:50 executing program 3: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x165200, 0x0) 17:36:50 executing program 0: futex(&(0x7f00000000c0)=0x2, 0x8, 0x0, &(0x7f0000000100), &(0x7f0000000140)=0x1, 0x1) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async, rerun: 64) futex(&(0x7f0000000200), 0x3, 0x1, &(0x7f0000000240), &(0x7f0000000280), 0x0) (rerun: 64) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000180), 0x8, 0x1, &(0x7f00000003c0)={0x77359400}, &(0x7f0000000400)=0x1, 0x0) (async) futex(&(0x7f0000000440), 0x109, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, &(0x7f0000000340)=0xffffffff, 0x2) (async) futex(&(0x7f0000000000), 0x7, 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)=0x1, 0x2) (async) futex(&(0x7f00000002c0)=0x2, 0x1, 0x0, &(0x7f0000000480)={0x77359400}, &(0x7f00000004c0)=0x1, 0x0) (async, rerun: 64) futex(&(0x7f0000000380), 0x2, 0x0, &(0x7f00000001c0), 0xfffffffffffffffc, 0x0) (rerun: 64) [ 554.130735] hfs: part requires an argument 17:36:50 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x4, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x40000, &(0x7f0000000080)=ANY=[@ANYRESOCT=0x0, @ANYRES64=0x0]) (async) chdir(&(0x7f0000000040)='./file0\x00') (async) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) (async) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x200002) 17:36:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) [ 554.152733] hfs: unable to parse mount options 17:36:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x5421, &(0x7f0000000080)={'sit0\x00', 0x0}) 17:36:50 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000000), 0xa, 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x2) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 17:36:50 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000300}}]}) 17:36:50 executing program 3: add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000180)="df", 0x1, 0x0) 17:36:50 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x4, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x40000, &(0x7f0000000080)=ANY=[@ANYRESOCT=0x0, @ANYRES64=0x0]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) (async) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x200002) [ 554.349758] hfs: part requires an argument [ 554.365326] hfs: unable to parse mount options 17:36:51 executing program 4: futex(&(0x7f000000cffc)=0x1, 0x80, 0x0, 0x0, &(0x7f0000000100), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000180)=0x14, 0x80, 0x202, 0x0, 0x0, 0x10001) futex(&(0x7f0000000000)=0x2, 0x5, 0x2, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x1) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) futex(&(0x7f0000000240)=0x2, 0xd, 0x2, &(0x7f00000002c0)={r0, r1+10000000}, &(0x7f0000000300)=0x1, 0x2) futex(&(0x7f0000000140)=0x1, 0x1, 0x2, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000200)=0x1, 0x1) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) nanosleep(&(0x7f0000000440)={r2, r3+10000000}, &(0x7f0000000480)) futex(&(0x7f0000000340), 0x6a11ad17f2c1580f, 0x2, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f00000003c0), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) clock_gettime(0x4, &(0x7f00000000c0)) futex(&(0x7f000000cffc)=0x1, 0x80, 0x0, 0x0, &(0x7f0000000100), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f0000000180)=0x14, 0x80, 0x202, 0x0, 0x0, 0x10001) (async) futex(&(0x7f0000000000)=0x2, 0x5, 0x2, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x1) (async) clock_gettime(0x0, &(0x7f0000000280)) (async) futex(&(0x7f0000000240)=0x2, 0xd, 0x2, &(0x7f00000002c0)={r0, r1+10000000}, &(0x7f0000000300)=0x1, 0x2) (async) futex(&(0x7f0000000140)=0x1, 0x1, 0x2, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000200)=0x1, 0x1) (async) clock_gettime(0x0, &(0x7f0000000400)) (async) nanosleep(&(0x7f0000000440)={r2, r3+10000000}, &(0x7f0000000480)) (async) futex(&(0x7f0000000340), 0x6a11ad17f2c1580f, 0x2, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f00000003c0), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) clock_gettime(0x4, &(0x7f00000000c0)) (async) 17:36:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:36:51 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000000), 0xa, 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x2) (async) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 17:36:51 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) statx(r0, &(0x7f0000000040)='./file0\x00', 0x800, 0x0, 0x0) 17:36:51 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000002000}}]}) 17:36:51 executing program 1: ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000340)={0x2, 0x1, @status={[0x7, 0x80, 0xfe34135, 0xfff, 0x3, 0x7]}, [0x6, 0xffffffffffffe1a8, 0x7, 0x0, 0x1, 0x15, 0x20, 0x80, 0x0, 0xd4a, 0x6, 0xffffffff, 0x7fffffffffffffff, 0x1000, 0xfffffffffffeffff, 0x1, 0xfffffffffffffff7, 0xff, 0x6, 0x80, 0x5, 0x2, 0x80, 0x8000, 0x3, 0x5, 0x5, 0x6, 0xff, 0x9, 0x1, 0x4, 0x7f, 0x4, 0x3, 0xfffffffffffffffb, 0x7f, 0x55fb, 0x8000000000000000, 0x5, 0x0, 0x2e, 0x3, 0xffffffff, 0x0, 0x3f, 0x4, 0x12f8, 0x10001, 0xfff, 0x3084, 0x7, 0x46, 0xffffffffffffffff, 0x7fffffffffffffff, 0x8, 0xffffffff, 0x45, 0x8000, 0x3ff, 0x8000, 0x5, 0x81, 0x6]}) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000400)=ANY=[], 0x44) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) fstatfs(r0, &(0x7f0000000080)=""/63) ftruncate(r2, 0x200002) 17:36:51 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='stat\x00') [ 554.913183] hfs: part requires an argument [ 554.926670] hfs: unable to parse mount options 17:36:51 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000000), 0xa, 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x2) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f0000000000), 0xa, 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x2) (async) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) 17:36:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:36:51 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8993, &(0x7f0000000040)={'wg1\x00'}) 17:36:51 executing program 1: ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000340)={0x2, 0x1, @status={[0x7, 0x80, 0xfe34135, 0xfff, 0x3, 0x7]}, [0x6, 0xffffffffffffe1a8, 0x7, 0x0, 0x1, 0x15, 0x20, 0x80, 0x0, 0xd4a, 0x6, 0xffffffff, 0x7fffffffffffffff, 0x1000, 0xfffffffffffeffff, 0x1, 0xfffffffffffffff7, 0xff, 0x6, 0x80, 0x5, 0x2, 0x80, 0x8000, 0x3, 0x5, 0x5, 0x6, 0xff, 0x9, 0x1, 0x4, 0x7f, 0x4, 0x3, 0xfffffffffffffffb, 0x7f, 0x55fb, 0x8000000000000000, 0x5, 0x0, 0x2e, 0x3, 0xffffffff, 0x0, 0x3f, 0x4, 0x12f8, 0x10001, 0xfff, 0x3084, 0x7, 0x46, 0xffffffffffffffff, 0x7fffffffffffffff, 0x8, 0xffffffff, 0x45, 0x8000, 0x3ff, 0x8000, 0x5, 0x81, 0x6]}) (async) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) (async) chdir(&(0x7f0000000040)='./file0\x00') (async) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000400)=ANY=[], 0x44) (async) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) fstatfs(r0, &(0x7f0000000080)=""/63) ftruncate(r2, 0x200002) 17:36:51 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000006f00}}]}) [ 555.006545] attempt to access beyond end of device [ 555.018686] loop1: rw=1, want=16, limit=15 17:36:51 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000000), 0x9, 0x1, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000080)=0x1, 0x1) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f00000000c0)=0x1, 0xd, 0x2, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)=0x1, 0x0) r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, &(0x7f0000000180)=0x8) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) r3 = semget$private(0x0, 0x2, 0x2c4) futex(&(0x7f0000001040)=0x1, 0x9, 0x1, &(0x7f0000001080)={0x77359400}, &(0x7f00000010c0), 0x1) semop(r3, &(0x7f0000000100)=[{0x0, 0x5}, {0x2, 0x0, 0x800}], 0x2) semop(r3, 0xffffffffffffffff, 0x53) semctl$GETZCNT(r3, 0x4, 0x7, &(0x7f0000001140)=""/41) semctl$GETZCNT(r3, 0x0, 0x7, &(0x7f0000000440)=""/61) semctl$GETVAL(r3, 0x0, 0x5, &(0x7f0000000040)=""/4096) r4 = geteuid() getgroups(0x3, &(0x7f0000000240)=[r2, r2, r2]) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000280)={{0x1, r1, r2, r4, r5, 0x80, 0x2}, 0x4, 0x7fffffffffffffff, 0xfffffffffffffffe}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) semtimedop(r3, &(0x7f0000000180)=[{0x2, 0xff, 0x1000}, {0x0, 0x6, 0x800}, {0x3, 0xff, 0x1000}, {0x4, 0x1, 0x1000}], 0x4, &(0x7f0000000200)={r6, r7+60000000}) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) [ 555.049083] Buffer I/O error on dev loop1, logical block 15, lost async page write [ 555.071919] attempt to access beyond end of device [ 555.087619] hfs: part requires an argument [ 555.092020] loop1: rw=1, want=128, limit=15 17:36:51 executing program 0: r0 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f00000000c0)={0x0, @adiantum, 0x0, @desc3}) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000000)=0x2, 0x1, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x1, 0x2) [ 555.097507] hfs: unable to parse mount options 17:36:51 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x89a1, 0x0) 17:36:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:36:51 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000007900}}]}) 17:36:51 executing program 0: r0 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f00000000c0)={0x0, @adiantum, 0x0, @desc3}) (async) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f0000000000)=0x2, 0x1, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x1, 0x2) 17:36:51 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZE(r0, 0x5425, 0x0) 17:36:51 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) 17:36:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) [ 555.237302] hfs: part requires an argument [ 555.251423] hfs: unable to parse mount options 17:36:51 executing program 1: ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000340)={0x2, 0x1, @status={[0x7, 0x80, 0xfe34135, 0xfff, 0x3, 0x7]}, [0x6, 0xffffffffffffe1a8, 0x7, 0x0, 0x1, 0x15, 0x20, 0x80, 0x0, 0xd4a, 0x6, 0xffffffff, 0x7fffffffffffffff, 0x1000, 0xfffffffffffeffff, 0x1, 0xfffffffffffffff7, 0xff, 0x6, 0x80, 0x5, 0x2, 0x80, 0x8000, 0x3, 0x5, 0x5, 0x6, 0xff, 0x9, 0x1, 0x4, 0x7f, 0x4, 0x3, 0xfffffffffffffffb, 0x7f, 0x55fb, 0x8000000000000000, 0x5, 0x0, 0x2e, 0x3, 0xffffffff, 0x0, 0x3f, 0x4, 0x12f8, 0x10001, 0xfff, 0x3084, 0x7, 0x46, 0xffffffffffffffff, 0x7fffffffffffffff, 0x8, 0xffffffff, 0x45, 0x8000, 0x3ff, 0x8000, 0x5, 0x81, 0x6]}) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') (async) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000400)=ANY=[], 0x44) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) (async) fstatfs(r0, &(0x7f0000000080)=""/63) ftruncate(r2, 0x200002) 17:36:51 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000072dfdcd9}}]}) 17:36:51 executing program 3: syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) [ 555.341223] device lo entered promiscuous mode [ 555.359889] device tunl0 entered promiscuous mode [ 555.376970] device gre0 entered promiscuous mode [ 555.385412] device gretap0 entered promiscuous mode [ 555.391015] device erspan0 entered promiscuous mode [ 555.412889] device ip_vti0 entered promiscuous mode [ 555.413797] hfs: part requires an argument [ 555.431714] device ip6_vti0 entered promiscuous mode [ 555.431908] attempt to access beyond end of device [ 555.440754] device sit0 entered promiscuous mode [ 555.451110] hfs: unable to parse mount options [ 555.453063] device ip6tnl0 entered promiscuous mode [ 555.459964] loop1: rw=1, want=16, limit=15 [ 555.462388] device ip6gre0 entered promiscuous mode [ 555.470793] Buffer I/O error on dev loop1, logical block 15, lost async page write [ 555.476944] device syz_tun entered promiscuous mode [ 555.479542] attempt to access beyond end of device [ 555.489001] loop1: rw=1, want=128, limit=15 [ 555.489203] device ip6gretap0 entered promiscuous mode [ 555.499080] device bridge0 entered promiscuous mode [ 555.504524] device vcan0 entered promiscuous mode [ 555.509834] device bond0 entered promiscuous mode [ 555.515049] device bond_slave_0 entered promiscuous mode [ 555.520674] device bond_slave_1 entered promiscuous mode [ 555.526704] device team0 entered promiscuous mode [ 555.531570] device team_slave_0 entered promiscuous mode [ 555.538901] device team_slave_1 entered promiscuous mode [ 555.544733] device dummy0 entered promiscuous mode [ 555.550503] device nlmon0 entered promiscuous mode [ 555.556410] device caif0 entered promiscuous mode [ 555.561457] device batadv0 entered promiscuous mode [ 555.566999] device vxcan0 entered promiscuous mode [ 555.572022] device vxcan1 entered promiscuous mode [ 555.577284] device netdevsim2 entered promiscuous mode [ 555.583350] device veth0 entered promiscuous mode [ 555.588509] device veth1 entered promiscuous mode [ 555.593511] device xfrm0 entered promiscuous mode [ 555.598768] device veth0_to_bridge entered promiscuous mode [ 555.604924] device veth1_to_bridge entered promiscuous mode [ 555.610942] device veth0_to_bond entered promiscuous mode [ 555.617113] device veth1_to_bond entered promiscuous mode [ 555.622964] device veth0_to_team entered promiscuous mode [ 555.628908] device veth1_to_team entered promiscuous mode [ 555.635019] device veth0_to_batadv entered promiscuous mode [ 555.640907] device batadv_slave_0 entered promiscuous mode [ 555.648736] device veth1_to_batadv entered promiscuous mode [ 555.661792] device batadv_slave_1 entered promiscuous mode [ 555.675337] device veth0_to_hsr entered promiscuous mode [ 555.697813] device veth1_to_hsr entered promiscuous mode [ 555.706996] device hsr0 entered promiscuous mode [ 555.725145] device veth1_virt_wifi entered promiscuous mode [ 555.741418] device veth0_virt_wifi entered promiscuous mode [ 555.748225] device vlan0 entered promiscuous mode [ 555.753569] device vlan1 entered promiscuous mode [ 555.759360] device macvlan0 entered promiscuous mode [ 555.764719] device macvlan1 entered promiscuous mode [ 555.770278] device ipvlan0 entered promiscuous mode [ 555.775534] device ipvlan1 entered promiscuous mode [ 555.780838] device macvtap0 entered promiscuous mode [ 555.786208] device macsec0 entered promiscuous mode [ 555.791336] device geneve0 entered promiscuous mode [ 555.796840] device geneve1 entered promiscuous mode [ 555.801973] device wlan0 entered promiscuous mode [ 555.807145] device wlan1 entered promiscuous mode [ 555.812870] device geneve2 entered promiscuous mode [ 555.818153] device veth2 entered promiscuous mode [ 555.823112] device veth3 entered promiscuous mode [ 555.828185] device veth4 entered promiscuous mode [ 555.833225] device veth5 entered promiscuous mode [ 555.838298] device veth6 entered promiscuous mode [ 555.843256] device veth7 entered promiscuous mode [ 555.848324] device veth8 entered promiscuous mode [ 555.853272] device veth9 entered promiscuous mode 17:36:52 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000000), 0x9, 0x1, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000080)=0x1, 0x1) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) (async) futex(&(0x7f00000000c0)=0x1, 0xd, 0x2, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)=0x1, 0x0) (async) r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, &(0x7f0000000180)=0x8) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) r3 = semget$private(0x0, 0x2, 0x2c4) futex(&(0x7f0000001040)=0x1, 0x9, 0x1, &(0x7f0000001080)={0x77359400}, &(0x7f00000010c0), 0x1) (async) semop(r3, &(0x7f0000000100)=[{0x0, 0x5}, {0x2, 0x0, 0x800}], 0x2) (async) semop(r3, 0xffffffffffffffff, 0x53) (async) semctl$GETZCNT(r3, 0x4, 0x7, &(0x7f0000001140)=""/41) semctl$GETZCNT(r3, 0x0, 0x7, &(0x7f0000000440)=""/61) (async) semctl$GETVAL(r3, 0x0, 0x5, &(0x7f0000000040)=""/4096) (async) r4 = geteuid() (async) getgroups(0x3, &(0x7f0000000240)=[r2, r2, r2]) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000280)={{0x1, r1, r2, r4, r5, 0x80, 0x2}, 0x4, 0x7fffffffffffffff, 0xfffffffffffffffe}) (async) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) semtimedop(r3, &(0x7f0000000180)=[{0x2, 0xff, 0x1000}, {0x0, 0x6, 0x800}, {0x3, 0xff, 0x1000}, {0x4, 0x1, 0x1000}], 0x4, &(0x7f0000000200)={r6, r7+60000000}) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 17:36:52 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0]) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r2, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) sendfile(r0, r1, &(0x7f0000000080)=0x1000, 0x4) chdir(&(0x7f0000000040)='./file0\x00') r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000400)=ANY=[], 0x44) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r4, 0x200002) 17:36:52 executing program 3: syz_open_procfs(0x0, &(0x7f0000000040)='attr/keycreate\x00') 17:36:52 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000072dfdcdf}}]}) 17:36:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) [ 556.012950] hfs: part requires an argument [ 556.032633] hfs: unable to parse mount options 17:36:52 executing program 3: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) 17:36:52 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x800000007ffffff9}}]}) 17:36:52 executing program 0: r0 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f00000000c0)={0x0, @adiantum, 0x0, @desc3}) (async) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f0000000000)=0x2, 0x1, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x1, 0x2) 17:36:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:36:52 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0]) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r2, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) (async, rerun: 32) sendfile(r0, r1, &(0x7f0000000080)=0x1000, 0x4) (async, rerun: 32) chdir(&(0x7f0000000040)='./file0\x00') (async) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000400)=ANY=[], 0x44) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r4, 0x200002) [ 556.093781] netlink: 364 bytes leftover after parsing attributes in process `syz-executor.1'. 17:36:52 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZE(r0, 0x4b47, 0x0) [ 556.141793] attempt to access beyond end of device [ 556.145865] hfs: part requires an argument [ 556.146954] loop1: rw=1, want=16, limit=15 [ 556.151226] hfs: unable to parse mount options [ 556.171886] device lo left promiscuous mode [ 556.174890] Buffer I/O error on dev loop1, logical block 15, lost async page write [ 556.178443] device tunl0 left promiscuous mode 17:36:52 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x80000000ffffff1f}}]}) [ 556.192570] device gre0 left promiscuous mode [ 556.198037] attempt to access beyond end of device [ 556.202230] device gretap0 left promiscuous mode [ 556.205681] loop1: rw=1, want=128, limit=15 [ 556.232429] device erspan0 left promiscuous mode [ 556.251884] device ip_vti0 left promiscuous mode [ 556.262869] device ip6_vti0 left promiscuous mode [ 556.269946] device sit0 left promiscuous mode [ 556.292293] device ip6tnl0 left promiscuous mode [ 556.296923] hfs: part requires an argument [ 556.301069] device ip6gre0 left promiscuous mode [ 556.308250] device syz_tun left promiscuous mode [ 556.313303] hfs: unable to parse mount options [ 556.316152] device ip6gretap0 left promiscuous mode [ 556.338781] device bridge0 left promiscuous mode [ 556.346302] device vcan0 left promiscuous mode [ 556.355949] device bond0 left promiscuous mode [ 556.361355] device team0 left promiscuous mode [ 556.368123] device dummy0 left promiscuous mode [ 556.373055] device nlmon0 left promiscuous mode [ 556.389860] device caif0 left promiscuous mode [ 556.401629] device batadv0 left promiscuous mode [ 556.416416] device vxcan0 left promiscuous mode [ 556.422268] device vxcan1 left promiscuous mode [ 556.433594] device netdevsim2 left promiscuous mode [ 556.449929] device veth0 left promiscuous mode [ 556.456886] device veth1 left promiscuous mode [ 556.462862] device xfrm0 left promiscuous mode [ 556.470408] device veth0_to_bridge left promiscuous mode [ 556.477423] device veth1_to_bridge left promiscuous mode [ 556.483176] device veth0_to_bond left promiscuous mode [ 556.489536] device bond_slave_0 left promiscuous mode [ 556.495348] device veth1_to_bond left promiscuous mode [ 556.500716] device bond_slave_1 left promiscuous mode [ 556.506996] device veth0_to_team left promiscuous mode [ 556.512440] device team_slave_0 left promiscuous mode [ 556.518936] device veth1_to_team left promiscuous mode [ 556.524903] device team_slave_1 left promiscuous mode [ 556.530224] device veth0_to_batadv left promiscuous mode [ 556.536859] device batadv_slave_0 left promiscuous mode [ 556.542338] device veth1_to_batadv left promiscuous mode [ 556.549488] device batadv_slave_1 left promiscuous mode [ 556.555653] device veth0_to_hsr left promiscuous mode [ 556.561062] device veth1_to_hsr left promiscuous mode [ 556.567536] device hsr0 left promiscuous mode [ 556.572981] device veth1_virt_wifi left promiscuous mode [ 556.579392] device veth0_virt_wifi left promiscuous mode [ 556.585936] device vlan0 left promiscuous mode [ 556.590641] device vlan1 left promiscuous mode [ 556.596366] device macvlan0 left promiscuous mode [ 556.601346] device macvlan1 left promiscuous mode [ 556.607213] device ipvlan0 left promiscuous mode [ 556.612063] device ipvlan1 left promiscuous mode [ 556.618287] device macvtap0 left promiscuous mode [ 556.623250] device macsec0 left promiscuous mode [ 556.629031] device geneve0 left promiscuous mode [ 556.634561] device geneve1 left promiscuous mode [ 556.639481] device wlan0 left promiscuous mode [ 556.644974] device wlan1 left promiscuous mode [ 556.649694] device geneve2 left promiscuous mode [ 556.655356] device veth2 left promiscuous mode [ 556.660087] device veth3 left promiscuous mode [ 556.665965] device veth4 left promiscuous mode [ 556.670713] device veth5 left promiscuous mode [ 556.677116] device veth6 left promiscuous mode [ 556.681851] device veth7 left promiscuous mode [ 556.687533] device veth8 left promiscuous mode [ 556.692222] device veth9 left promiscuous mode [ 556.697963] netlink: 364 bytes leftover after parsing attributes in process `syz-executor.1'. [ 556.709971] netlink: 364 bytes leftover after parsing attributes in process `syz-executor.1'. [ 556.719904] netlink: 364 bytes leftover after parsing attributes in process `syz-executor.1'. [ 556.739722] netlink: 364 bytes leftover after parsing attributes in process `syz-executor.1'. 17:36:53 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}, 0x2e}]}) 17:36:53 executing program 3: prctl$PR_CAP_AMBIENT(0x17, 0x26, 0x0) 17:36:53 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000000), 0x9, 0x1, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000080)=0x1, 0x1) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f00000000c0)=0x1, 0xd, 0x2, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)=0x1, 0x0) r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, &(0x7f0000000180)=0x8) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) r3 = semget$private(0x0, 0x2, 0x2c4) futex(&(0x7f0000001040)=0x1, 0x9, 0x1, &(0x7f0000001080)={0x77359400}, &(0x7f00000010c0), 0x1) semop(r3, &(0x7f0000000100)=[{0x0, 0x5}, {0x2, 0x0, 0x800}], 0x2) semop(r3, 0xffffffffffffffff, 0x53) semctl$GETZCNT(r3, 0x4, 0x7, &(0x7f0000001140)=""/41) semctl$GETZCNT(r3, 0x0, 0x7, &(0x7f0000000440)=""/61) semctl$GETVAL(r3, 0x0, 0x5, &(0x7f0000000040)=""/4096) r4 = geteuid() getgroups(0x3, &(0x7f0000000240)=[r2, r2, r2]) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000280)={{0x1, r1, r2, r4, r5, 0x80, 0x2}, 0x4, 0x7fffffffffffffff, 0xfffffffffffffffe}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) semtimedop(r3, &(0x7f0000000180)=[{0x2, 0xff, 0x1000}, {0x0, 0x6, 0x800}, {0x3, 0xff, 0x1000}, {0x4, 0x1, 0x1000}], 0x4, &(0x7f0000000200)={r6, r7+60000000}) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f0000000000), 0x9, 0x1, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000080)=0x1, 0x1) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) (async) futex(&(0x7f00000000c0)=0x1, 0xd, 0x2, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)=0x1, 0x0) (async) accept$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, &(0x7f0000000180)=0x8) (async) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000001c0), &(0x7f0000000200)=0xc) (async) semget$private(0x0, 0x2, 0x2c4) (async) futex(&(0x7f0000001040)=0x1, 0x9, 0x1, &(0x7f0000001080)={0x77359400}, &(0x7f00000010c0), 0x1) (async) semop(r3, &(0x7f0000000100)=[{0x0, 0x5}, {0x2, 0x0, 0x800}], 0x2) (async) semop(r3, 0xffffffffffffffff, 0x53) (async) semctl$GETZCNT(r3, 0x4, 0x7, &(0x7f0000001140)=""/41) (async) semctl$GETZCNT(r3, 0x0, 0x7, &(0x7f0000000440)=""/61) (async) semctl$GETVAL(r3, 0x0, 0x5, &(0x7f0000000040)=""/4096) (async) geteuid() (async) getgroups(0x3, &(0x7f0000000240)=[r2, r2, r2]) (async) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000280)={{0x1, r1, r2, r4, r5, 0x80, 0x2}, 0x4, 0x7fffffffffffffff, 0xfffffffffffffffe}) (async) clock_gettime(0x0, &(0x7f00000001c0)) (async) semtimedop(r3, &(0x7f0000000180)=[{0x2, 0xff, 0x1000}, {0x0, 0x6, 0x800}, {0x3, 0xff, 0x1000}, {0x4, 0x1, 0x1000}], 0x4, &(0x7f0000000200)={r6, r7+60000000}) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) 17:36:53 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0]) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r2, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) (async) sendfile(r0, r1, &(0x7f0000000080)=0x1000, 0x4) (async, rerun: 64) chdir(&(0x7f0000000040)='./file0\x00') (async, rerun: 64) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000400)=ANY=[], 0x44) (async, rerun: 32) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) (rerun: 32) ftruncate(r4, 0x200002) 17:36:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x700}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) [ 556.749578] netlink: 364 bytes leftover after parsing attributes in process `syz-executor.1'. [ 556.759181] netlink: 364 bytes leftover after parsing attributes in process `syz-executor.1'. [ 556.768783] netlink: 364 bytes leftover after parsing attributes in process `syz-executor.1'. [ 556.777898] netlink: 364 bytes leftover after parsing attributes in process `syz-executor.1'. [ 556.787130] netlink: 364 bytes leftover after parsing attributes in process `syz-executor.1'. 17:36:53 executing program 3: bpf$PROG_LOAD(0x9, 0x0, 0x0) [ 556.835227] device lo entered promiscuous mode [ 556.841720] device tunl0 entered promiscuous mode [ 556.853225] device gre0 entered promiscuous mode [ 556.864035] hfs: unable to parse mount options [ 556.876273] device gretap0 entered promiscuous mode [ 556.893494] device erspan0 entered promiscuous mode [ 556.919523] device ip_vti0 entered promiscuous mode [ 556.941825] device ip6_vti0 entered promiscuous mode 17:36:53 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) clock_gettime(0x4, &(0x7f0000000040)) futex(&(0x7f000000cffc)=0x1, 0xc, 0x3, 0x0, &(0x7f0000048000)=0x4000000, 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000)=0x1000000, 0x100000) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) clock_gettime(0x6, &(0x7f0000000000)) futex(&(0x7f0000000080)=0x1, 0x7, 0x2, &(0x7f00000000c0), &(0x7f0000000100), 0x7) 17:36:53 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}, 0x32}]}) 17:36:53 executing program 3: bpf$PROG_LOAD(0x15, 0x0, 0x0) [ 556.963452] device sit0 entered promiscuous mode [ 556.978874] attempt to access beyond end of device [ 556.983059] device ip6tnl0 entered promiscuous mode [ 556.993182] device ip6gre0 entered promiscuous mode 17:36:53 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1000000, 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000000)=0x1, 0x1, 0x1, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000080), 0x1) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f00000000c0)=0x1, 0x7, 0x1, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)=0x1, 0x1) futex(&(0x7f0000000180), 0x3, 0x2, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000200)=0x2, 0x2) [ 557.009843] loop1: rw=2049, want=16, limit=15 [ 557.011526] device syz_tun entered promiscuous mode [ 557.032790] hfs: can't find a HFS filesystem on dev loop5 [ 557.039086] Buffer I/O error on dev loop1, logical block 15, lost async page write [ 557.046026] device ip6gretap0 entered promiscuous mode 17:36:53 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x890c, 0x0) [ 557.059620] device bridge0 entered promiscuous mode 17:36:53 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) [ 557.090090] device vcan0 entered promiscuous mode 17:36:53 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async, rerun: 32) clock_gettime(0x4, &(0x7f0000000040)) (async, rerun: 32) futex(&(0x7f000000cffc)=0x1, 0xc, 0x3, 0x0, &(0x7f0000048000)=0x4000000, 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000)=0x1000000, 0x100000) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) clock_gettime(0x6, &(0x7f0000000000)) (async) futex(&(0x7f0000000080)=0x1, 0x7, 0x2, &(0x7f00000000c0), &(0x7f0000000100), 0x7) 17:36:53 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000000)={@random="af70fe70e000", @random="a8ce77f60f70", @val, {@ipv6}}, 0x0) [ 557.122601] device bond0 entered promiscuous mode [ 557.138843] device bond_slave_0 entered promiscuous mode [ 557.151834] device bond_slave_1 entered promiscuous mode 17:36:53 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) clock_gettime(0x4, &(0x7f0000000040)) (async) futex(&(0x7f000000cffc)=0x1, 0xc, 0x3, 0x0, &(0x7f0000048000)=0x4000000, 0x0) (async) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000)=0x1000000, 0x100000) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) clock_gettime(0x6, &(0x7f0000000000)) (async) futex(&(0x7f0000000080)=0x1, 0x7, 0x2, &(0x7f00000000c0), &(0x7f0000000100), 0x7) [ 557.169659] hfs: part requires an argument [ 557.174537] hfs: unable to parse mount options [ 557.177882] device team0 entered promiscuous mode [ 557.200631] device team_slave_0 entered promiscuous mode [ 557.207241] device team_slave_1 entered promiscuous mode [ 557.213013] device dummy0 entered promiscuous mode [ 557.234774] device nlmon0 entered promiscuous mode [ 557.244657] device caif0 entered promiscuous mode [ 557.249859] device batadv0 entered promiscuous mode [ 557.255620] device vxcan0 entered promiscuous mode [ 557.266694] device vxcan1 entered promiscuous mode [ 557.278045] device netdevsim2 entered promiscuous mode [ 557.286440] device veth0 entered promiscuous mode [ 557.312675] device veth1 entered promiscuous mode [ 557.319475] device xfrm0 entered promiscuous mode [ 557.327240] device veth0_to_bridge entered promiscuous mode [ 557.335829] device veth1_to_bridge entered promiscuous mode [ 557.343537] device veth0_to_bond entered promiscuous mode [ 557.351328] device veth1_to_bond entered promiscuous mode [ 557.357211] device veth0_to_team entered promiscuous mode [ 557.362985] device veth1_to_team entered promiscuous mode [ 557.371390] device veth0_to_batadv entered promiscuous mode [ 557.377913] device batadv_slave_0 entered promiscuous mode [ 557.386628] device veth1_to_batadv entered promiscuous mode [ 557.392628] device batadv_slave_1 entered promiscuous mode [ 557.398683] device veth0_to_hsr entered promiscuous mode [ 557.404696] device veth1_to_hsr entered promiscuous mode [ 557.410558] device hsr0 entered promiscuous mode [ 557.415687] device veth1_virt_wifi entered promiscuous mode [ 557.421674] device veth0_virt_wifi entered promiscuous mode [ 557.428045] device vlan0 entered promiscuous mode [ 557.433137] device vlan1 entered promiscuous mode [ 557.438379] device macvlan0 entered promiscuous mode [ 557.443825] device macvlan1 entered promiscuous mode [ 557.449175] device ipvlan0 entered promiscuous mode [ 557.454555] device ipvlan1 entered promiscuous mode [ 557.460038] device macvtap0 entered promiscuous mode [ 557.465459] device macsec0 entered promiscuous mode [ 557.470722] device geneve0 entered promiscuous mode [ 557.476149] device geneve1 entered promiscuous mode [ 557.481398] device wlan0 entered promiscuous mode [ 557.486618] device wlan1 entered promiscuous mode [ 557.491729] device geneve2 entered promiscuous mode [ 557.498017] device veth2 entered promiscuous mode [ 557.503038] device veth3 entered promiscuous mode [ 557.508194] device veth4 entered promiscuous mode 17:36:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75c}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:36:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000029c0), 0xffffffffffffffff) 17:36:54 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1000000, 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000000)=0x1, 0x1, 0x1, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000080), 0x1) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f00000000c0)=0x1, 0x7, 0x1, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)=0x1, 0x1) futex(&(0x7f0000000180), 0x3, 0x2, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000200)=0x2, 0x2) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1000000, 0x0) (async) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) (async) futex(&(0x7f0000000000)=0x1, 0x1, 0x1, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000080), 0x1) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f00000000c0)=0x1, 0x7, 0x1, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)=0x1, 0x1) (async) futex(&(0x7f0000000180), 0x3, 0x2, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000200)=0x2, 0x2) (async) 17:36:54 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}], [], 0x2}) 17:36:54 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_mount_image$ubifs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x5, 0x5, &(0x7f0000001440)=[{&(0x7f0000000240)="75addd6c0f5ca7b14e8f8ddda3a72cacb148b3a8", 0x14, 0x8}, {&(0x7f0000000280)="7b87581b7b61a39a8a16e5ef2015f5f4d141f533eb8f0d88e053f95518f2e5e60de9d40c67eb004d410378856fad27a931f567435d3545a099755389afe0db212b83c0802f2815eaa56a285d3be72a49c24909bc13046ebe8360a4c4134a1369d50aae84486b0466912cf995dc2c14b6312a5bc014d593a3bdcadde5f7d0327049c9c3003494aec2ae29d77239620d91cca70f06f15c4afa5caf1142e77e46c172abe67ceb1b902f895591f2e655d65439e36b6f91041124e17766790b61d336cd1989af62cbacaf1ffeba940efc79e8d65e561aed581ee08c1ac583925a66ee521b608a09da151f200d10507b423ca875c3d3a24c7abd7f88698c73cb20d1fa15859e62407a276638b54c68dd538b60c31f7d2192c699d8f3135ad42beb39b595c0ba66187e5a7b95e48de1fdb53ad578605b65131df8fa655a8124a899294f1c684e0f8a8bf8fb0e44ccd3651bec514e5714b196356f697e06320cd5273ae18cd7db2d0e7d97c9772e3b160be3189a539321055518457089e9ff4400c1694d2dc946df6a47903e80259c10ff30cbfe77f4afd8647a4dfeeb16f5bd00a63c8714e56bca3a1bcaadb31f40fe8f90a17e21145ab5a17b9e7a770b864a1c62302cc0e8e290d55d98e84f4b4e8c5a905edddf1e23f2026f12953e830c561323b4069756de0bf1943769ba2d841eee9e1d7d53a35a3d44383f2a201499a3089ed0cbdcfaf4b2664f50409847381a1bf8e77867ef9e102550ffe6fcdc0f5f7ea03d24fee30c8262671e40f5d22b1d7a0e8bb6215d9e56023798ac53f1f58ec90b93bf9934028a7a89cad56774b628d6f629b62cc0107bbc3cd4aba3a3d1bd5657d367d9a7728f1239cff98064f55321ca1c0c23820ac7bc1c05781c71835309f1ca2583279f89f156668674016f6ff2286b9b43950da314afe829b3d3ae4cf1db51f7823775de007964f369137331a52aeffed01da27fcfa9d94e0d58e35448a3fa7788cf98a221a5e22fa770a06376311961571ba9f666690055b22d31455d8d01a8a6a31f5786b132c1bf15f546b821b580ada65dcf673b8f9318cb6f6b9d355f90293a1f4658d467c87fb2077ff8dff209af476a85b7777432b7fec1437bef2eb492f19e01dcd1ff1fe5b7701d5bf788138354fdf9db8048ab5bba56bd78e1fdded281e8a8301856b9ba634270d105b409826dd74e043708533ff4e88149a8f03f3bcb2250f6e3a20d61f00caf10e1b8978657c90555ac11c30cdb38203e5a80b1cddde8224517979a5caa52810943c64286de8cb3a6ea50cce0f52617091c78880391a4972f0cabf66e80a71467dd2da04f96e90b136fe3e3f99b1f4958df0c7cd6ac4bb0fc6672517d486eef38613d4d0aaad5edbb66166b19a6b5a125e07e462b9dfa133ef6a7807b4e3e3075298b789d557b83d2d4af1dd7b4d3f6ecf4a8c966197197eb32e942b258c9fffc3fb381a483efc1c1f74fded306fc23e2280bb3f292d840e24f5fc37e068b1cd4d9cc0ed3b5e3a071ef663ea2f10e834110fd206a6260ef8d12e902d8dfd9445c965f51812cbf2ce06f4376cd53064b0ea1d09004771f3d9e5578a09b770e047a3021582edadc48a1f5ca9fe970508a4f4d06b67b93da2b6d74ec069537f9b22fca10a10f6c33eb5adec4ea8c51381b8c9d0360778868063c71c0b841961efd0d32d2a448140c61d403b84f99403dfd6c3b450748c125fc45e3696347efee401475eb2fffe07307cc02df8fc2019c77e00287c074aa33c64322ec8a6d8816a7c9907bc2dc38410fc326205b542a9a2f0cc7210db012347cfd37c718314be57821dcf379e708984140c581f69b96ad12a2f6b63c503c261067a426f64f74697254fb8a62ce9b883fa9e2a512f0af4be9a9d58273b1f20d6a51a3b025539837c7a5f691abc7c732c82b1ca601cd484a7679bc27888ba17318014838c229d4d2ff2a01ab80d86efcd6b512882f9f5cba89f3a8e5b44acddcb919a114af57598dab82d8608a0b798cb5acb51f47c1ebf571942da8e223f8146404b0977e4dcec20a2040a786cd4ed76d3e45c5ffac2a1867a5fe710e706b6402457710193fa5ef4edf24d3cc5e12c77ba857a6753e80102c9b9427b80de803b81e639d3c391582a6baa7450d9f015ddab094efcc7f939f1fc341197e5381d0711b6e1c8fdcfb3f020d396870a4991e47ece11ac1b450943e572d58ca2532b995a8b317ff3f0985e574e043c1e7252ae2767d0f409d05158e52d342b600c9afc736516321612ee0c112344d1fc92d76e03e01c188da268e24bc4dbff8c4385f1dfa145f585a974746b62d3dcb0c7b62350f51270cc825f8b52736b49d12b1afde2614d606352b788f63bfb7b8692e6d4da87fdfb7a166ddcfbc7ff8cbec6b6819c795b7f8269a305108f37e290fe225f5d3472765d1541ad1abf1d1abfded8c75c3b6e66176ba2e9297c657a0e94cb306f80f16f9898f303f9be6da4e5f393e34ef945d3bad373340f7ac36372440d35d97e24e2a8e72300e43be07bc960808994c704c30639e90ad5296e6629360e2a474d4bdb6cf19f9ab3d5340b132c995632b554462b0a391a9b4435d58ab983986978742da00dc8065e7fba0b76b1aec6e0563087cc8b4acde1fce951eee42d872ed57adb74bfc5eec893442fe31fda97417051af2d3bf9eb000b0c7a6015d7a9fe27c0bfaee07aaea3d6c698d08338bcad93548778032984db1b19983389bf058c1cc27c6b681152264e53268ab7798bff159a5324fd92d82c54e2bbf921e3393366d9785407111aa0d2f7b09ca83fa273e0c09503aa45344d35772a91af9c441884be686be3144213b7c7aa26dc506cda70dbf6e53173bb218fc71e5c8eceeeae90fdb1f27a3a9c76d9f8f5a2f39a5d70e2e609cf9507c514fea44d50b6d7546df1170f85a7b0536acc4a557cdf763271b85edfc5cbf67d9cf10209fc4f9443dbbd1cb83e3c1d02d3ddbfc6a40ae5158ea35c47bef83823b0d2c0940b9c8f59c02f430881068d47020384de99fbfb3f4e10ae689b38afe6b25f1a4e6975045955532c6cf4368fef6de597aecd8bbf22252fa7b4b0374ec1eca802d51b332150248e976e67c95c0eb21f367994ce86227aa24ed88f596432857b204fb962257d6c1b3e17f59defdead08546f0f8f13c2ea895c6f21d87b8c7d74afb87842db809786618d276325a7a7a87f4845ac9d8ea565e511cb237c0a7e1f235e4d0db13ae4c86c460d430e6f83211c75d513106b680a00702b957f4b2baebc89f3c552f781e359432f013222843209641c298e338fdc572e6b3890d9cfd04648fa481fe5b37327f768c8cff03c0aa5f7fd8022d34d2180d78bb1601c7d9741321ab130ce83b385f52ed2092c6f914e99f48c162410d4f259326a1152607079ae04a826328c89ec0b5a2ad363bbf66a3d6b02db470ea9a947772d412b23a3bb1258512418aaa95d47c2784d9d41a6a38986b9fa01b6650653e9a2974e0b9b61256db255a507e57db39845382cc5c99b036f93f976edcdba5b53ef78efe9a972c484d72911faab38fb5f9c771f53341d803ba10f8913fc1dd98050e800b2c130a2d204b2299b67d24079ec759258d145be15c699b0507f1b9133a02b2ab465ed1597c84c53c2417264873cb0101e136f59322377c6d842886ced74357f57fb5cab03a86da6b84e44b3017f7aa491978a6d155aa4ea568f6a0d28ec73f17ff318f276cc7ed1644ae37341c65dd6e6669ce435b50eb1b179cd458a36971e1b13deaf50dbd0741527d47800f2bd8c2eaad5e68d8ada97fadb59b1d740a86054cdf0567cff56b6f42b51e773843024f8e36a6f2d4d66a2cbf6e10c3ffa9bfe70124aaf161613ca31096d876a66f9a951806a0b2158e1a3c5a64e08ec482bea8be008048873ed4eda0a3aae81e3dee6c57158305033f95e41925fe9329e6e63c7661928c36d013407ab6a7592ec6f9a1ff94ad57158272ccbda306199ee1efb0d89210f103b43f5cb8e87112f137ec82318d4ec94bb8b36dd1eb0a43d02c92d94cdcbe7ac1da41f4d39dfbfc0131bed27d733a2579137130c9d501fd67d89f8c3b4e5d77ad68589b2c2d57750274bf7228c68fe158727d6db74cb0f18b1017985a2f080b988ac90a51abcec56bc592b502477fac8ef0f60506c564fb091cc8d5c64f3c02e9d609e1b12d2c28aa740d47afab5ede6afd2a3e884f2eda8e3a0adbc4a2575206e1bfa5651fc0fde39170b9fbebc4f2b2c3a24af23529fe18bc95a29cb2e7ea3479b7e2db1b19833cfabe7d0e62d731763bafbf87351a1dbd30f028a8093b091744c93f79eda2261703ba00a6aefafe2cd6ec7990e0f44283a3a6b35811eb897d6fd2f02499dd8b6c21ae4b4a88c909309a231b385e9eb00a803587195dd59c3cdcd75d2161a0030a4221c61b25df788ab96c81b6b136010a823cebe688a05a709bac27aeeedd9fc5c1fe2da09630b9e0486e608de5419177b52006d0fa200b661daea285dd9424bc8d12f8ce50c32b4314f84e33d77aa509c3bb116bccf7b933685b7ae952f67cf3b466e14e6c2191ad387c72d75200bbefe98b0d783fd3cba557136eecc0844a3f6ba9714592e5b3a2f1fdd64139786367557321f7e5e0d1b0ba04f5c83ab6382af07e804ffb1bbf98def9649876388e8ec2000b5c14c9a726e2aaf175a6ad5360bf807e5e4efb10e0827089ad89b1a1d0d7eabb2451a05b5f697afc0f69579bb11d38bebaf8c3011797ac2d540428a10d2bc96c4ccad150480588c3bee347bcedf8ec8d9c9d62d8dbd2c0f08320f5c9eaf07e9727aeb116499df9e6375d0b64c704233b8094dfb5dde3686acbb5077c81b471d6c0b087336d1fa52749fef733c9643751931fc36bc3198b808d8f2064504f665fd58cca84068409cceb2fd37cd7c8963884a5f270cca4992550ea505e559241a130abe4cefa06d4a89f2fc7022faf5bb4d407212c3d22c4caba9db10f5b560403a14e9d7d3d6cfc4e8210ffe429f90b766876926ec2a7c00bba2d35c055f2c645cf8cfe0495a2bfab92c59ee2029b0aafb7bbf234a450203341a3803b8d6b9b4420b6a101f19f28d5a86e8795334091e6a6e944521e02b36c3239686f5847bfd571a1e3f87bce7a87486e88649bcca9d8ce23fc488cf7c40ff9d90005ecdd219596d8a77a1da5113ade25460dcda5f1254621acddec36178ac72ca08e076db87b4d6c1d5d25b0d48c03a940749d2f00bb5f89b9b8ce903bdd85e7ae02b3feeb51af69bb00489b77ace22d932aa672158184b505553e7206bf7d2130defe13b47cc02500620c79cc48132e8a151f53c0e1386065c4176966618de0c13fb750b62caef413874aebc54aa74fc26e9d6d4ed2536579e19236ba2f25fdb608a7e50a76425f30c5d71d22aa5eb1a92875bbd414b2f11dab3d111497fd92808ecb8ea983ef8b86978bb8bf0cf3c5eebfa736dce1d7066944f3ee766a0f20d1eeeba76188cc87baf50d23f77ca6e9729260d7c70ed08c607cd6743313fd80fd16279bd806ec98ca222a37e939b6a72c61c46d5c7fe492e887fc8e2ebfc38fc716e5b7611676e67d0c46673227f41ec752ab402c7274106d35f5d1dd28912b4a4ea0669c4c8630da02bd5654fac0cda49bfba08b88ef124296d3088bfaccd7f77d1b250a3d2f35cb4ff338593e1d8886f7e3224f3410a0dbde4674e398fd1baa0bc990298091bf94d2e3bc90af6085138aa3efa24a4b7260d6a0d56c52d9c8b313bd04cc235f1eea7f669c02a55ef9798dd13e1d8f1c35d0fd", 0x1000, 0x2}, {&(0x7f0000001280)="0fffbbb65d05c096bf18b111bab4c6c595b03e27437d8a10b7c4ba508279aaa5d54915ab3a7e2f7584a7b0ef3df87b0f04fbe8f61dcafe5ef67c9dce2fb2aadca9c885261c979bce91f61e951fc6d99c6200b2314b8fc2dfcc6f734a6a2bdd36e2bacc60b17d368593da262564d72d4b24fa56769e08ffba399c0ffad365605c8e20996a159e145808e90470592697198fe61b4a3f6b70827866f982664ed4c1d290791c352260968c603ce4436a", 0xae}, {&(0x7f0000001340)="4a515fdc13b8850ac2206abe16", 0xd, 0x6}, {&(0x7f0000001380)="2efd018f1a01e6413e8f473bca4b88094b7863631f9916970e87c7898f4051b30673a87217824e806cf35a85d38651d9657328f26c5c7fc68fd778a185badeb51d97dd7636b856a11fc32e527c979565255ad6811873479588054d01f454f1729e9801b0809a2ac86c1373b7647d8ee3a95616dd6a1f62f63118ace0f36d602a2f24cd9abf788e6354041f84593bce88b87acf08332c1d585a2b2e8e5bb43b1a49", 0xa1, 0x1}], 0x1002404, &(0x7f0000001800)=ANY=[@ANYBLOB="636f6d70723d3a6c69622c617574685f686173685f6e616d657d735e61312c657507000000838995fb2c8e3e7406a5c07253c0", @ANYRESDEC=0xee01, @ANYBLOB=',fowner=', @ANYRESDEC=0x0, @ANYBLOB=',seclabel,fowner<', @ANYRESDEC, @ANYBLOB="2c736d61636bff726f6f743d7d2c0000"]) r5 = syz_open_dev$radio(&(0x7f0000001580), 0x1, 0x2) ppoll(&(0x7f00000015c0)=[{0xffffffffffffffff, 0x6288}, {r2, 0x2005}, {r3, 0x86}, {0xffffffffffffffff, 0xdc8f}, {0xffffffffffffffff, 0x9}, {0xffffffffffffffff, 0x20b}, {r4, 0x8004}, {r5, 0x2000}], 0x8, &(0x7f0000001600)={0x77359400}, &(0x7f0000001640)={[0x3]}, 0x8) pselect6(0x40, &(0x7f0000000000)={0x6, 0x2, 0x80, 0x7a9a, 0x1, 0x8483695, 0x7, 0x1}, &(0x7f0000000040)={0x8, 0x34, 0x1ff, 0xfffffffffffffffe, 0x7ff, 0x1000, 0x1, 0x7}, &(0x7f0000000080)={0x400, 0x9, 0x7f, 0x2000000000, 0x4, 0x80000000, 0x7b6, 0x9}, &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x7fffffff]}, 0x8}) mknodat$null(r4, &(0x7f0000001780)='./file0\x00', 0x2208, 0x103) futex(&(0x7f0000001680)=0x1, 0x3, 0x1, &(0x7f00000016c0)={0x77359400}, &(0x7f0000001700)=0x1, 0x0) rt_sigsuspend(&(0x7f00000017c0), 0x8) clock_gettime(0x2, &(0x7f0000001740)) 17:36:54 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000080)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f00000000c0)={0x0, {0x7, 0x7f6}}) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x6) [ 557.513222] device veth5 entered promiscuous mode [ 557.518422] device veth6 entered promiscuous mode [ 557.523513] device veth7 entered promiscuous mode [ 557.528668] device veth8 entered promiscuous mode [ 557.533887] device veth9 entered promiscuous mode [ 557.548317] attempt to access beyond end of device 17:36:54 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000140)={0x2}) [ 557.570483] loop1: rw=1, want=128, limit=15 17:36:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x900}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:36:54 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1000000, 0x0) (async) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) (async) futex(&(0x7f0000000000)=0x1, 0x1, 0x1, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000080), 0x1) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f00000000c0)=0x1, 0x7, 0x1, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)=0x1, 0x1) (async) futex(&(0x7f0000000180), 0x3, 0x2, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000200)=0x2, 0x2) 17:36:54 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZE(r0, 0x5437, 0x0) [ 557.633120] hfs: part requires an argument [ 557.639120] hfs: unable to parse mount options 17:36:54 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}], [], 0x3}) 17:36:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa00}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:36:54 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000080)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f00000000c0)={0x0, {0x7, 0x7f6}}) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x6) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000080)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) (async) chdir(&(0x7f0000000040)='./file0\x00') (async) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) (async) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f00000000c0)={0x0, {0x7, 0x7f6}}) (async) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) (async) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) (async) ftruncate(r1, 0x6) (async) 17:36:54 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x1) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000100)=0x1, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x1, 0x2) futex(&(0x7f00000001c0)=0x1, 0x5, 0x3, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f00000002c0)=0x2, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x7, &(0x7f0000000280)) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) futex(&(0x7f0000000240)=0x2, 0x1, 0x0, &(0x7f0000000340)={r2, r3+60000000}, &(0x7f0000000380)=0x2, 0x2) futex(&(0x7f0000000000)=0x2, 0x100, 0x1, &(0x7f0000000080)={r0, r1+10000000}, &(0x7f00000000c0)=0x1, 0x2) 17:36:54 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZE(r0, 0x4b72, 0x0) [ 557.769814] device lo left promiscuous mode [ 557.782762] device tunl0 left promiscuous mode [ 557.790173] device gre0 left promiscuous mode 17:36:54 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x891e, &(0x7f0000000040)={'wg1\x00'}) [ 557.814709] device gretap0 left promiscuous mode [ 557.826029] hfs: part requires an argument [ 557.834189] device erspan0 left promiscuous mode [ 557.839458] hfs: unable to parse mount options [ 557.852759] device ip_vti0 left promiscuous mode [ 557.861756] device ip6_vti0 left promiscuous mode [ 557.873123] device sit0 left promiscuous mode [ 557.878870] device ip6tnl0 left promiscuous mode [ 557.884366] device ip6gre0 left promiscuous mode [ 557.909597] device syz_tun left promiscuous mode [ 557.932663] device ip6gretap0 left promiscuous mode [ 557.960262] device bridge0 left promiscuous mode [ 557.965535] device vcan0 left promiscuous mode [ 557.970226] device bond0 left promiscuous mode [ 557.975331] device team0 left promiscuous mode [ 557.980339] device dummy0 left promiscuous mode [ 557.986119] device nlmon0 left promiscuous mode [ 557.990887] device caif0 left promiscuous mode [ 557.995774] device batadv0 left promiscuous mode [ 558.003044] device vxcan0 left promiscuous mode [ 558.008892] device vxcan1 left promiscuous mode [ 558.013801] device netdevsim2 left promiscuous mode [ 558.018998] device veth0 left promiscuous mode [ 558.023855] device veth1 left promiscuous mode [ 558.028932] device xfrm0 left promiscuous mode [ 558.039392] device veth0_to_bridge left promiscuous mode [ 558.045343] device veth1_to_bridge left promiscuous mode [ 558.052457] device veth0_to_bond left promiscuous mode [ 558.063717] device bond_slave_0 left promiscuous mode [ 558.072239] device veth1_to_bond left promiscuous mode [ 558.082323] device bond_slave_1 left promiscuous mode [ 558.090641] device veth0_to_team left promiscuous mode [ 558.098531] device team_slave_0 left promiscuous mode [ 558.104109] device veth1_to_team left promiscuous mode [ 558.110371] device team_slave_1 left promiscuous mode [ 558.118951] device veth0_to_batadv left promiscuous mode [ 558.126234] device batadv_slave_0 left promiscuous mode [ 558.131791] device veth1_to_batadv left promiscuous mode [ 558.137651] device batadv_slave_1 left promiscuous mode [ 558.143157] device veth0_to_hsr left promiscuous mode [ 558.148673] device veth1_to_hsr left promiscuous mode [ 558.154194] device hsr0 left promiscuous mode [ 558.158855] device veth1_virt_wifi left promiscuous mode [ 558.164539] device veth0_virt_wifi left promiscuous mode [ 558.170400] device vlan0 left promiscuous mode [ 558.175245] device vlan1 left promiscuous mode [ 558.179965] device macvlan0 left promiscuous mode [ 558.185024] device macvlan1 left promiscuous mode [ 558.189995] device ipvlan0 left promiscuous mode [ 558.195037] device ipvlan1 left promiscuous mode [ 558.200223] device macvtap0 left promiscuous mode [ 558.205289] device macsec0 left promiscuous mode [ 558.210818] device geneve0 left promiscuous mode [ 558.215851] device geneve1 left promiscuous mode [ 558.220713] device wlan0 left promiscuous mode [ 558.225524] device wlan1 left promiscuous mode [ 558.230212] device geneve2 left promiscuous mode [ 558.235238] device veth2 left promiscuous mode [ 558.239928] device veth3 left promiscuous mode [ 558.244733] device veth4 left promiscuous mode [ 558.249448] device veth5 left promiscuous mode [ 558.254293] device veth6 left promiscuous mode [ 558.259081] device veth7 left promiscuous mode [ 558.263922] device veth8 left promiscuous mode [ 558.268736] device veth9 left promiscuous mode 17:36:55 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_mount_image$ubifs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x5, 0x5, &(0x7f0000001440)=[{&(0x7f0000000240)="75addd6c0f5ca7b14e8f8ddda3a72cacb148b3a8", 0x14, 0x8}, {&(0x7f0000000280)="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", 0x1000, 0x2}, {&(0x7f0000001280)="0fffbbb65d05c096bf18b111bab4c6c595b03e27437d8a10b7c4ba508279aaa5d54915ab3a7e2f7584a7b0ef3df87b0f04fbe8f61dcafe5ef67c9dce2fb2aadca9c885261c979bce91f61e951fc6d99c6200b2314b8fc2dfcc6f734a6a2bdd36e2bacc60b17d368593da262564d72d4b24fa56769e08ffba399c0ffad365605c8e20996a159e145808e90470592697198fe61b4a3f6b70827866f982664ed4c1d290791c352260968c603ce4436a", 0xae}, {&(0x7f0000001340)="4a515fdc13b8850ac2206abe16", 0xd, 0x6}, {&(0x7f0000001380)="2efd018f1a01e6413e8f473bca4b88094b7863631f9916970e87c7898f4051b30673a87217824e806cf35a85d38651d9657328f26c5c7fc68fd778a185badeb51d97dd7636b856a11fc32e527c979565255ad6811873479588054d01f454f1729e9801b0809a2ac86c1373b7647d8ee3a95616dd6a1f62f63118ace0f36d602a2f24cd9abf788e6354041f84593bce88b87acf08332c1d585a2b2e8e5bb43b1a49", 0xa1, 0x1}], 0x1002404, &(0x7f0000001800)=ANY=[@ANYBLOB="636f6d70723d3a6c69622c617574685f686173685f6e616d657d735e61312c657507000000838995fb2c8e3e7406a5c07253c0", @ANYRESDEC=0xee01, @ANYBLOB=',fowner=', @ANYRESDEC=0x0, @ANYBLOB=',seclabel,fowner<', @ANYRESDEC, @ANYBLOB="2c736d61636bff726f6f743d7d2c0000"]) r5 = syz_open_dev$radio(&(0x7f0000001580), 0x1, 0x2) ppoll(&(0x7f00000015c0)=[{0xffffffffffffffff, 0x6288}, {r2, 0x2005}, {r3, 0x86}, {0xffffffffffffffff, 0xdc8f}, {0xffffffffffffffff, 0x9}, {0xffffffffffffffff, 0x20b}, {r4, 0x8004}, {r5, 0x2000}], 0x8, &(0x7f0000001600)={0x77359400}, &(0x7f0000001640)={[0x3]}, 0x8) pselect6(0x40, &(0x7f0000000000)={0x6, 0x2, 0x80, 0x7a9a, 0x1, 0x8483695, 0x7, 0x1}, &(0x7f0000000040)={0x8, 0x34, 0x1ff, 0xfffffffffffffffe, 0x7ff, 0x1000, 0x1, 0x7}, &(0x7f0000000080)={0x400, 0x9, 0x7f, 0x2000000000, 0x4, 0x80000000, 0x7b6, 0x9}, &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x7fffffff]}, 0x8}) mknodat$null(r4, &(0x7f0000001780)='./file0\x00', 0x2208, 0x103) futex(&(0x7f0000001680)=0x1, 0x3, 0x1, &(0x7f00000016c0)={0x77359400}, &(0x7f0000001700)=0x1, 0x0) rt_sigsuspend(&(0x7f00000017c0), 0x8) clock_gettime(0x2, &(0x7f0000001740)) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) syz_mount_image$ubifs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x5, 0x5, &(0x7f0000001440)=[{&(0x7f0000000240)="75addd6c0f5ca7b14e8f8ddda3a72cacb148b3a8", 0x14, 0x8}, {&(0x7f0000000280)="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", 0x1000, 0x2}, {&(0x7f0000001280)="0fffbbb65d05c096bf18b111bab4c6c595b03e27437d8a10b7c4ba508279aaa5d54915ab3a7e2f7584a7b0ef3df87b0f04fbe8f61dcafe5ef67c9dce2fb2aadca9c885261c979bce91f61e951fc6d99c6200b2314b8fc2dfcc6f734a6a2bdd36e2bacc60b17d368593da262564d72d4b24fa56769e08ffba399c0ffad365605c8e20996a159e145808e90470592697198fe61b4a3f6b70827866f982664ed4c1d290791c352260968c603ce4436a", 0xae}, {&(0x7f0000001340)="4a515fdc13b8850ac2206abe16", 0xd, 0x6}, {&(0x7f0000001380)="2efd018f1a01e6413e8f473bca4b88094b7863631f9916970e87c7898f4051b30673a87217824e806cf35a85d38651d9657328f26c5c7fc68fd778a185badeb51d97dd7636b856a11fc32e527c979565255ad6811873479588054d01f454f1729e9801b0809a2ac86c1373b7647d8ee3a95616dd6a1f62f63118ace0f36d602a2f24cd9abf788e6354041f84593bce88b87acf08332c1d585a2b2e8e5bb43b1a49", 0xa1, 0x1}], 0x1002404, &(0x7f0000001800)=ANY=[@ANYBLOB="636f6d70723d3a6c69622c617574685f686173685f6e616d657d735e61312c657507000000838995fb2c8e3e7406a5c07253c0", @ANYRESDEC=0xee01, @ANYBLOB=',fowner=', @ANYRESDEC=0x0, @ANYBLOB=',seclabel,fowner<', @ANYRESDEC, @ANYBLOB="2c736d61636bff726f6f743d7d2c0000"]) (async) syz_open_dev$radio(&(0x7f0000001580), 0x1, 0x2) (async) ppoll(&(0x7f00000015c0)=[{0xffffffffffffffff, 0x6288}, {r2, 0x2005}, {r3, 0x86}, {0xffffffffffffffff, 0xdc8f}, {0xffffffffffffffff, 0x9}, {0xffffffffffffffff, 0x20b}, {r4, 0x8004}, {r5, 0x2000}], 0x8, &(0x7f0000001600)={0x77359400}, &(0x7f0000001640)={[0x3]}, 0x8) (async) pselect6(0x40, &(0x7f0000000000)={0x6, 0x2, 0x80, 0x7a9a, 0x1, 0x8483695, 0x7, 0x1}, &(0x7f0000000040)={0x8, 0x34, 0x1ff, 0xfffffffffffffffe, 0x7ff, 0x1000, 0x1, 0x7}, &(0x7f0000000080)={0x400, 0x9, 0x7f, 0x2000000000, 0x4, 0x80000000, 0x7b6, 0x9}, &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x7fffffff]}, 0x8}) (async) mknodat$null(r4, &(0x7f0000001780)='./file0\x00', 0x2208, 0x103) (async) futex(&(0x7f0000001680)=0x1, 0x3, 0x1, &(0x7f00000016c0)={0x77359400}, &(0x7f0000001700)=0x1, 0x0) (async) rt_sigsuspend(&(0x7f00000017c0), 0x8) (async) clock_gettime(0x2, &(0x7f0000001740)) (async) 17:36:55 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}], [], 0x4}) 17:36:55 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x1) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f0000000100)=0x1, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x1, 0x2) (async) futex(&(0x7f00000001c0)=0x1, 0x5, 0x3, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f00000002c0)=0x2, 0x0) (async) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x7, &(0x7f0000000280)) (async) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) futex(&(0x7f0000000240)=0x2, 0x1, 0x0, &(0x7f0000000340)={r2, r3+60000000}, &(0x7f0000000380)=0x2, 0x2) (async) futex(&(0x7f0000000000)=0x2, 0x100, 0x1, &(0x7f0000000080)={r0, r1+10000000}, &(0x7f00000000c0)=0x1, 0x2) 17:36:55 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000080)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f00000000c0)={0x0, {0x7, 0x7f6}}) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) (async) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x6) 17:36:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc00}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:36:55 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZE(r0, 0x4bfb, 0x0) 17:36:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe00}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:36:55 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5}}]}}, &(0x7f0000000240)=""/195, 0x32, 0xc3, 0x1}, 0x20) [ 558.492114] hfs: part requires an argument [ 558.499702] hfs: unable to parse mount options 17:36:55 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x1) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000100)=0x1, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x1, 0x2) futex(&(0x7f00000001c0)=0x1, 0x5, 0x3, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f00000002c0)=0x2, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x7, &(0x7f0000000280)) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) futex(&(0x7f0000000240)=0x2, 0x1, 0x0, &(0x7f0000000340)={r2, r3+60000000}, &(0x7f0000000380)=0x2, 0x2) futex(&(0x7f0000000000)=0x2, 0x100, 0x1, &(0x7f0000000080)={r0, r1+10000000}, &(0x7f00000000c0)=0x1, 0x2) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x1) (async) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f0000000100)=0x1, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x1, 0x2) (async) futex(&(0x7f00000001c0)=0x1, 0x5, 0x3, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f00000002c0)=0x2, 0x0) (async) clock_gettime(0x0, &(0x7f0000000040)) (async) clock_gettime(0x7, &(0x7f0000000280)) (async) clock_gettime(0x0, &(0x7f0000000300)) (async) futex(&(0x7f0000000240)=0x2, 0x1, 0x0, &(0x7f0000000340)={r2, r3+60000000}, &(0x7f0000000380)=0x2, 0x2) (async) futex(&(0x7f0000000000)=0x2, 0x100, 0x1, &(0x7f0000000080)={r0, r1+10000000}, &(0x7f00000000c0)=0x1, 0x2) (async) 17:36:55 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}], [], 0x5}) 17:36:55 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x2000000, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) setresgid(0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c64656661756c745f7065726d696a08696f6e732c616c6c6f775f6f746865722c6d61785f726561643d3078303030303030303030303030303030312c6d61785f726561643d3078303030303030303030303030303030392c648f84eb7e205e656661756c745f7465726d697373696f6e730c616c6c6f775f6f746865722c64656661756c745f7065726d697373696f6e732c646566636f6e746578743d73797361646d5f752c6f6265723d3a5d2b2d7d5b252e262c6f626a5f757365723d2f6465762f6c6f6f702d636f6e74726f6c002c00"]) r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x8000, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r4, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@default_permissions}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x1}}, {@max_read={'max_read', 0x3d, 0x9}}, {@default_permissions}, {@allow_other}, {@default_permissions}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@obj_type}, {@obj_user={'obj_user', 0x3d, ':]+-}[%.&'}}, {@obj_user={'obj_user', 0x3d, '/dev/loop-control\x00'}}]}}) r5 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x8000, 0x0) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r7, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000540)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@default_permissions}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x1}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@allow_other}, {@default_permissions}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@obj_type}, {@obj_user={'obj_user', 0x3d, ':]+-}[%.&'}}, {@obj_user={'obj_user', 0x3d, '/dev/loop-control\x00'}}]}}) lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000340)={{}, {}, [{0x2, 0x2}, {0x2, 0x0, r3}, {0x2, 0x4, 0xee01}, {}, {0x2, 0x6, 0xee01}], {0x4, 0x4}, [], {0x10, 0x1}, {0x20, 0x4}}, 0x4c, 0x0) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/231, 0xe7) r8 = open(&(0x7f0000000040)='./file0\x00', 0x610000, 0x0) ftruncate(r8, 0x200002) 17:36:55 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 17:36:55 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) (async) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r4 = syz_mount_image$ubifs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x5, 0x5, &(0x7f0000001440)=[{&(0x7f0000000240)="75addd6c0f5ca7b14e8f8ddda3a72cacb148b3a8", 0x14, 0x8}, {&(0x7f0000000280)="7b87581b7b61a39a8a16e5ef2015f5f4d141f533eb8f0d88e053f95518f2e5e60de9d40c67eb004d410378856fad27a931f567435d3545a099755389afe0db212b83c0802f2815eaa56a285d3be72a49c24909bc13046ebe8360a4c4134a1369d50aae84486b0466912cf995dc2c14b6312a5bc014d593a3bdcadde5f7d0327049c9c3003494aec2ae29d77239620d91cca70f06f15c4afa5caf1142e77e46c172abe67ceb1b902f895591f2e655d65439e36b6f91041124e17766790b61d336cd1989af62cbacaf1ffeba940efc79e8d65e561aed581ee08c1ac583925a66ee521b608a09da151f200d10507b423ca875c3d3a24c7abd7f88698c73cb20d1fa15859e62407a276638b54c68dd538b60c31f7d2192c699d8f3135ad42beb39b595c0ba66187e5a7b95e48de1fdb53ad578605b65131df8fa655a8124a899294f1c684e0f8a8bf8fb0e44ccd3651bec514e5714b196356f697e06320cd5273ae18cd7db2d0e7d97c9772e3b160be3189a539321055518457089e9ff4400c1694d2dc946df6a47903e80259c10ff30cbfe77f4afd8647a4dfeeb16f5bd00a63c8714e56bca3a1bcaadb31f40fe8f90a17e21145ab5a17b9e7a770b864a1c62302cc0e8e290d55d98e84f4b4e8c5a905edddf1e23f2026f12953e830c561323b4069756de0bf1943769ba2d841eee9e1d7d53a35a3d44383f2a201499a3089ed0cbdcfaf4b2664f50409847381a1bf8e77867ef9e102550ffe6fcdc0f5f7ea03d24fee30c8262671e40f5d22b1d7a0e8bb6215d9e56023798ac53f1f58ec90b93bf9934028a7a89cad56774b628d6f629b62cc0107bbc3cd4aba3a3d1bd5657d367d9a7728f1239cff98064f55321ca1c0c23820ac7bc1c05781c71835309f1ca2583279f89f156668674016f6ff2286b9b43950da314afe829b3d3ae4cf1db51f7823775de007964f369137331a52aeffed01da27fcfa9d94e0d58e35448a3fa7788cf98a221a5e22fa770a06376311961571ba9f666690055b22d31455d8d01a8a6a31f5786b132c1bf15f546b821b580ada65dcf673b8f9318cb6f6b9d355f90293a1f4658d467c87fb2077ff8dff209af476a85b7777432b7fec1437bef2eb492f19e01dcd1ff1fe5b7701d5bf788138354fdf9db8048ab5bba56bd78e1fdded281e8a8301856b9ba634270d105b409826dd74e043708533ff4e88149a8f03f3bcb2250f6e3a20d61f00caf10e1b8978657c90555ac11c30cdb38203e5a80b1cddde8224517979a5caa52810943c64286de8cb3a6ea50cce0f52617091c78880391a4972f0cabf66e80a71467dd2da04f96e90b136fe3e3f99b1f4958df0c7cd6ac4bb0fc6672517d486eef38613d4d0aaad5edbb66166b19a6b5a125e07e462b9dfa133ef6a7807b4e3e3075298b789d557b83d2d4af1dd7b4d3f6ecf4a8c966197197eb32e942b258c9fffc3fb381a483efc1c1f74fded306fc23e2280bb3f292d840e24f5fc37e068b1cd4d9cc0ed3b5e3a071ef663ea2f10e834110fd206a6260ef8d12e902d8dfd9445c965f51812cbf2ce06f4376cd53064b0ea1d09004771f3d9e5578a09b770e047a3021582edadc48a1f5ca9fe970508a4f4d06b67b93da2b6d74ec069537f9b22fca10a10f6c33eb5adec4ea8c51381b8c9d0360778868063c71c0b841961efd0d32d2a448140c61d403b84f99403dfd6c3b450748c125fc45e3696347efee401475eb2fffe07307cc02df8fc2019c77e00287c074aa33c64322ec8a6d8816a7c9907bc2dc38410fc326205b542a9a2f0cc7210db012347cfd37c718314be57821dcf379e708984140c581f69b96ad12a2f6b63c503c261067a426f64f74697254fb8a62ce9b883fa9e2a512f0af4be9a9d58273b1f20d6a51a3b025539837c7a5f691abc7c732c82b1ca601cd484a7679bc27888ba17318014838c229d4d2ff2a01ab80d86efcd6b512882f9f5cba89f3a8e5b44acddcb919a114af57598dab82d8608a0b798cb5acb51f47c1ebf571942da8e223f8146404b0977e4dcec20a2040a786cd4ed76d3e45c5ffac2a1867a5fe710e706b6402457710193fa5ef4edf24d3cc5e12c77ba857a6753e80102c9b9427b80de803b81e639d3c391582a6baa7450d9f015ddab094efcc7f939f1fc341197e5381d0711b6e1c8fdcfb3f020d396870a4991e47ece11ac1b450943e572d58ca2532b995a8b317ff3f0985e574e043c1e7252ae2767d0f409d05158e52d342b600c9afc736516321612ee0c112344d1fc92d76e03e01c188da268e24bc4dbff8c4385f1dfa145f585a974746b62d3dcb0c7b62350f51270cc825f8b52736b49d12b1afde2614d606352b788f63bfb7b8692e6d4da87fdfb7a166ddcfbc7ff8cbec6b6819c795b7f8269a305108f37e290fe225f5d3472765d1541ad1abf1d1abfded8c75c3b6e66176ba2e9297c657a0e94cb306f80f16f9898f303f9be6da4e5f393e34ef945d3bad373340f7ac36372440d35d97e24e2a8e72300e43be07bc960808994c704c30639e90ad5296e6629360e2a474d4bdb6cf19f9ab3d5340b132c995632b554462b0a391a9b4435d58ab983986978742da00dc8065e7fba0b76b1aec6e0563087cc8b4acde1fce951eee42d872ed57adb74bfc5eec893442fe31fda97417051af2d3bf9eb000b0c7a6015d7a9fe27c0bfaee07aaea3d6c698d08338bcad93548778032984db1b19983389bf058c1cc27c6b681152264e53268ab7798bff159a5324fd92d82c54e2bbf921e3393366d9785407111aa0d2f7b09ca83fa273e0c09503aa45344d35772a91af9c441884be686be3144213b7c7aa26dc506cda70dbf6e53173bb218fc71e5c8eceeeae90fdb1f27a3a9c76d9f8f5a2f39a5d70e2e609cf9507c514fea44d50b6d7546df1170f85a7b0536acc4a557cdf763271b85edfc5cbf67d9cf10209fc4f9443dbbd1cb83e3c1d02d3ddbfc6a40ae5158ea35c47bef83823b0d2c0940b9c8f59c02f430881068d47020384de99fbfb3f4e10ae689b38afe6b25f1a4e6975045955532c6cf4368fef6de597aecd8bbf22252fa7b4b0374ec1eca802d51b332150248e976e67c95c0eb21f367994ce86227aa24ed88f596432857b204fb962257d6c1b3e17f59defdead08546f0f8f13c2ea895c6f21d87b8c7d74afb87842db809786618d276325a7a7a87f4845ac9d8ea565e511cb237c0a7e1f235e4d0db13ae4c86c460d430e6f83211c75d513106b680a00702b957f4b2baebc89f3c552f781e359432f013222843209641c298e338fdc572e6b3890d9cfd04648fa481fe5b37327f768c8cff03c0aa5f7fd8022d34d2180d78bb1601c7d9741321ab130ce83b385f52ed2092c6f914e99f48c162410d4f259326a1152607079ae04a826328c89ec0b5a2ad363bbf66a3d6b02db470ea9a947772d412b23a3bb1258512418aaa95d47c2784d9d41a6a38986b9fa01b6650653e9a2974e0b9b61256db255a507e57db39845382cc5c99b036f93f976edcdba5b53ef78efe9a972c484d72911faab38fb5f9c771f53341d803ba10f8913fc1dd98050e800b2c130a2d204b2299b67d24079ec759258d145be15c699b0507f1b9133a02b2ab465ed1597c84c53c2417264873cb0101e136f59322377c6d842886ced74357f57fb5cab03a86da6b84e44b3017f7aa491978a6d155aa4ea568f6a0d28ec73f17ff318f276cc7ed1644ae37341c65dd6e6669ce435b50eb1b179cd458a36971e1b13deaf50dbd0741527d47800f2bd8c2eaad5e68d8ada97fadb59b1d740a86054cdf0567cff56b6f42b51e773843024f8e36a6f2d4d66a2cbf6e10c3ffa9bfe70124aaf161613ca31096d876a66f9a951806a0b2158e1a3c5a64e08ec482bea8be008048873ed4eda0a3aae81e3dee6c57158305033f95e41925fe9329e6e63c7661928c36d013407ab6a7592ec6f9a1ff94ad57158272ccbda306199ee1efb0d89210f103b43f5cb8e87112f137ec82318d4ec94bb8b36dd1eb0a43d02c92d94cdcbe7ac1da41f4d39dfbfc0131bed27d733a2579137130c9d501fd67d89f8c3b4e5d77ad68589b2c2d57750274bf7228c68fe158727d6db74cb0f18b1017985a2f080b988ac90a51abcec56bc592b502477fac8ef0f60506c564fb091cc8d5c64f3c02e9d609e1b12d2c28aa740d47afab5ede6afd2a3e884f2eda8e3a0adbc4a2575206e1bfa5651fc0fde39170b9fbebc4f2b2c3a24af23529fe18bc95a29cb2e7ea3479b7e2db1b19833cfabe7d0e62d731763bafbf87351a1dbd30f028a8093b091744c93f79eda2261703ba00a6aefafe2cd6ec7990e0f44283a3a6b35811eb897d6fd2f02499dd8b6c21ae4b4a88c909309a231b385e9eb00a803587195dd59c3cdcd75d2161a0030a4221c61b25df788ab96c81b6b136010a823cebe688a05a709bac27aeeedd9fc5c1fe2da09630b9e0486e608de5419177b52006d0fa200b661daea285dd9424bc8d12f8ce50c32b4314f84e33d77aa509c3bb116bccf7b933685b7ae952f67cf3b466e14e6c2191ad387c72d75200bbefe98b0d783fd3cba557136eecc0844a3f6ba9714592e5b3a2f1fdd64139786367557321f7e5e0d1b0ba04f5c83ab6382af07e804ffb1bbf98def9649876388e8ec2000b5c14c9a726e2aaf175a6ad5360bf807e5e4efb10e0827089ad89b1a1d0d7eabb2451a05b5f697afc0f69579bb11d38bebaf8c3011797ac2d540428a10d2bc96c4ccad150480588c3bee347bcedf8ec8d9c9d62d8dbd2c0f08320f5c9eaf07e9727aeb116499df9e6375d0b64c704233b8094dfb5dde3686acbb5077c81b471d6c0b087336d1fa52749fef733c9643751931fc36bc3198b808d8f2064504f665fd58cca84068409cceb2fd37cd7c8963884a5f270cca4992550ea505e559241a130abe4cefa06d4a89f2fc7022faf5bb4d407212c3d22c4caba9db10f5b560403a14e9d7d3d6cfc4e8210ffe429f90b766876926ec2a7c00bba2d35c055f2c645cf8cfe0495a2bfab92c59ee2029b0aafb7bbf234a450203341a3803b8d6b9b4420b6a101f19f28d5a86e8795334091e6a6e944521e02b36c3239686f5847bfd571a1e3f87bce7a87486e88649bcca9d8ce23fc488cf7c40ff9d90005ecdd219596d8a77a1da5113ade25460dcda5f1254621acddec36178ac72ca08e076db87b4d6c1d5d25b0d48c03a940749d2f00bb5f89b9b8ce903bdd85e7ae02b3feeb51af69bb00489b77ace22d932aa672158184b505553e7206bf7d2130defe13b47cc02500620c79cc48132e8a151f53c0e1386065c4176966618de0c13fb750b62caef413874aebc54aa74fc26e9d6d4ed2536579e19236ba2f25fdb608a7e50a76425f30c5d71d22aa5eb1a92875bbd414b2f11dab3d111497fd92808ecb8ea983ef8b86978bb8bf0cf3c5eebfa736dce1d7066944f3ee766a0f20d1eeeba76188cc87baf50d23f77ca6e9729260d7c70ed08c607cd6743313fd80fd16279bd806ec98ca222a37e939b6a72c61c46d5c7fe492e887fc8e2ebfc38fc716e5b7611676e67d0c46673227f41ec752ab402c7274106d35f5d1dd28912b4a4ea0669c4c8630da02bd5654fac0cda49bfba08b88ef124296d3088bfaccd7f77d1b250a3d2f35cb4ff338593e1d8886f7e3224f3410a0dbde4674e398fd1baa0bc990298091bf94d2e3bc90af6085138aa3efa24a4b7260d6a0d56c52d9c8b313bd04cc235f1eea7f669c02a55ef9798dd13e1d8f1c35d0fd", 0x1000, 0x2}, {&(0x7f0000001280)="0fffbbb65d05c096bf18b111bab4c6c595b03e27437d8a10b7c4ba508279aaa5d54915ab3a7e2f7584a7b0ef3df87b0f04fbe8f61dcafe5ef67c9dce2fb2aadca9c885261c979bce91f61e951fc6d99c6200b2314b8fc2dfcc6f734a6a2bdd36e2bacc60b17d368593da262564d72d4b24fa56769e08ffba399c0ffad365605c8e20996a159e145808e90470592697198fe61b4a3f6b70827866f982664ed4c1d290791c352260968c603ce4436a", 0xae}, {&(0x7f0000001340)="4a515fdc13b8850ac2206abe16", 0xd, 0x6}, {&(0x7f0000001380)="2efd018f1a01e6413e8f473bca4b88094b7863631f9916970e87c7898f4051b30673a87217824e806cf35a85d38651d9657328f26c5c7fc68fd778a185badeb51d97dd7636b856a11fc32e527c979565255ad6811873479588054d01f454f1729e9801b0809a2ac86c1373b7647d8ee3a95616dd6a1f62f63118ace0f36d602a2f24cd9abf788e6354041f84593bce88b87acf08332c1d585a2b2e8e5bb43b1a49", 0xa1, 0x1}], 0x1002404, &(0x7f0000001800)=ANY=[@ANYBLOB="636f6d70723d3a6c69622c617574685f686173685f6e616d657d735e61312c657507000000838995fb2c8e3e7406a5c07253c0", @ANYRESDEC=0xee01, @ANYBLOB=',fowner=', @ANYRESDEC=0x0, @ANYBLOB=',seclabel,fowner<', @ANYRESDEC, @ANYBLOB="2c736d61636bff726f6f743d7d2c0000"]) (async) r5 = syz_open_dev$radio(&(0x7f0000001580), 0x1, 0x2) ppoll(&(0x7f00000015c0)=[{0xffffffffffffffff, 0x6288}, {r2, 0x2005}, {r3, 0x86}, {0xffffffffffffffff, 0xdc8f}, {0xffffffffffffffff, 0x9}, {0xffffffffffffffff, 0x20b}, {r4, 0x8004}, {r5, 0x2000}], 0x8, &(0x7f0000001600)={0x77359400}, &(0x7f0000001640)={[0x3]}, 0x8) pselect6(0x40, &(0x7f0000000000)={0x6, 0x2, 0x80, 0x7a9a, 0x1, 0x8483695, 0x7, 0x1}, &(0x7f0000000040)={0x8, 0x34, 0x1ff, 0xfffffffffffffffe, 0x7ff, 0x1000, 0x1, 0x7}, &(0x7f0000000080)={0x400, 0x9, 0x7f, 0x2000000000, 0x4, 0x80000000, 0x7b6, 0x9}, &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x7fffffff]}, 0x8}) (async) mknodat$null(r4, &(0x7f0000001780)='./file0\x00', 0x2208, 0x103) futex(&(0x7f0000001680)=0x1, 0x3, 0x1, &(0x7f00000016c0)={0x77359400}, &(0x7f0000001700)=0x1, 0x0) rt_sigsuspend(&(0x7f00000017c0), 0x8) (async) clock_gettime(0x2, &(0x7f0000001740)) 17:36:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5865}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:36:55 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x2000000, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') (async) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) (async) setresgid(0x0, 0x0, 0x0) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c64656661756c745f7065726d696a08696f6e732c616c6c6f775f6f746865722c6d61785f726561643d3078303030303030303030303030303030312c6d61785f726561643d3078303030303030303030303030303030392c648f84eb7e205e656661756c745f7465726d697373696f6e730c616c6c6f775f6f746865722c64656661756c745f7065726d697373696f6e732c646566636f6e746578743d73797361646d5f752c6f6265723d3a5d2b2d7d5b252e262c6f626a5f757365723d2f6465762f6c6f6f702d636f6e74726f6c002c00"]) (async) r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x8000, 0x0) (async) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r4, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@default_permissions}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x1}}, {@max_read={'max_read', 0x3d, 0x9}}, {@default_permissions}, {@allow_other}, {@default_permissions}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@obj_type}, {@obj_user={'obj_user', 0x3d, ':]+-}[%.&'}}, {@obj_user={'obj_user', 0x3d, '/dev/loop-control\x00'}}]}}) (async) r5 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x8000, 0x0) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r7, 0x0) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000540)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@default_permissions}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x1}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@allow_other}, {@default_permissions}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@obj_type}, {@obj_user={'obj_user', 0x3d, ':]+-}[%.&'}}, {@obj_user={'obj_user', 0x3d, '/dev/loop-control\x00'}}]}}) lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000340)={{}, {}, [{0x2, 0x2}, {0x2, 0x0, r3}, {0x2, 0x4, 0xee01}, {}, {0x2, 0x6, 0xee01}], {0x4, 0x4}, [], {0x10, 0x1}, {0x20, 0x4}}, 0x4c, 0x0) (async) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/231, 0xe7) (async) r8 = open(&(0x7f0000000040)='./file0\x00', 0x610000, 0x0) ftruncate(r8, 0x200002) 17:36:55 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x5411, &(0x7f0000000040)={'wg1\x00'}) [ 558.719870] hfs: part requires an argument 17:36:55 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000000)=0x1, 0xb, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) futex(&(0x7f0000000040)=0x2, 0x0, 0x2, &(0x7f00000000c0)={r0, r1+10000000}, &(0x7f0000000100)=0x2, 0x1) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 17:36:55 executing program 0: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x0, 0x2e, 0x3e}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0x47, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xfb}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008805) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4090}, 0x10) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) [ 558.745657] hfs: unable to parse mount options 17:36:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) 17:36:55 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}], [], 0x6}) 17:36:55 executing program 0: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x0, 0x2e, 0x3e}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0x47, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xfb}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008805) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4090}, 0x10) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 17:36:55 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x2000000, &(0x7f00000004c0)=ANY=[]) (async) chdir(&(0x7f0000000040)='./file0\x00') (async, rerun: 32) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) (rerun: 32) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) (async, rerun: 64) setresgid(0x0, 0x0, 0x0) (async, rerun: 64) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c64656661756c745f7065726d696a08696f6e732c616c6c6f775f6f746865722c6d61785f726561643d3078303030303030303030303030303030312c6d61785f726561643d3078303030303030303030303030303030392c648f84eb7e205e656661756c745f7465726d697373696f6e730c616c6c6f775f6f746865722c64656661756c745f7065726d697373696f6e732c646566636f6e746578743d73797361646d5f752c6f6265723d3a5d2b2d7d5b252e262c6f626a5f757365723d2f6465762f6c6f6f702d636f6e74726f6c002c00"]) (async, rerun: 32) r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x8000, 0x0) (async, rerun: 32) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r4, 0x0) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@default_permissions}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x1}}, {@max_read={'max_read', 0x3d, 0x9}}, {@default_permissions}, {@allow_other}, {@default_permissions}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@obj_type}, {@obj_user={'obj_user', 0x3d, ':]+-}[%.&'}}, {@obj_user={'obj_user', 0x3d, '/dev/loop-control\x00'}}]}}) (async, rerun: 32) r5 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x8000, 0x0) (rerun: 32) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r7, 0x0) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000540)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@default_permissions}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x1}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@allow_other}, {@default_permissions}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@obj_type}, {@obj_user={'obj_user', 0x3d, ':]+-}[%.&'}}, {@obj_user={'obj_user', 0x3d, '/dev/loop-control\x00'}}]}}) lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000340)={{}, {}, [{0x2, 0x2}, {0x2, 0x0, r3}, {0x2, 0x4, 0xee01}, {}, {0x2, 0x6, 0xee01}], {0x4, 0x4}, [], {0x10, 0x1}, {0x20, 0x4}}, 0x4c, 0x0) (async) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/231, 0xe7) (async, rerun: 64) r8 = open(&(0x7f0000000040)='./file0\x00', 0x610000, 0x0) (rerun: 64) ftruncate(r8, 0x200002) 17:36:55 executing program 3: r0 = getpgid(0x0) capset(&(0x7f00000000c0)={0x20080522, r0}, 0x0) [ 558.891429] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 558.911675] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 558.920042] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 558.928840] 8021q: adding VLAN 0 to HW filter on device bond0 17:36:55 executing program 0: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x0, 0x2e, 0x3e}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0x47, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xfb}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008805) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4090}, 0x10) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 17:36:55 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}], [], 0x7}) [ 558.951147] hfs: part requires an argument [ 558.955526] hfs: unable to parse mount options [ 558.984483] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 559.032655] 8021q: adding VLAN 0 to HW filter on device team0 [ 559.068138] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 17:36:55 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) accept4(r0, 0x0, 0x0, 0x0) 17:36:55 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) clock_gettime(0x3, &(0x7f0000000000)) futex(0x0, 0xd, 0x0, 0x0, &(0x7f0000048000), 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) futex(&(0x7f0000000040)=0x1, 0xc, 0x0, &(0x7f00000000c0)={r0, r1+60000000}, &(0x7f0000000100), 0x2) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 17:36:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5c07}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) [ 559.104775] hfs: part requires an argument [ 559.109585] hfs: unable to parse mount options [ 559.295655] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 559.316540] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 559.360413] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 17:36:56 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000000)=0x1, 0xb, 0x0, 0x0, 0x0, 0x0) (async) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) futex(&(0x7f0000000040)=0x2, 0x0, 0x2, &(0x7f00000000c0)={r0, r1+10000000}, &(0x7f0000000100)=0x2, 0x1) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 17:36:56 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') ftruncate(r1, 0x200002) 17:36:56 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, 0x0, 0x0) 17:36:56 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}], [], 0x8}) 17:36:56 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) clock_gettime(0x3, &(0x7f0000000000)) (async) futex(0x0, 0xd, 0x0, 0x0, &(0x7f0000048000), 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) futex(&(0x7f0000000040)=0x1, 0xc, 0x0, &(0x7f00000000c0)={r0, r1+60000000}, &(0x7f0000000100), 0x2) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 17:36:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6000}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:36:56 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x949d, @fixed, 0x0, 0x2}, 0xe) 17:36:56 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) clock_gettime(0x3, &(0x7f0000000000)) futex(0x0, 0xd, 0x0, 0x0, &(0x7f0000048000), 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) futex(&(0x7f0000000040)=0x1, 0xc, 0x0, &(0x7f00000000c0)={r0, r1+60000000}, &(0x7f0000000100), 0x2) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) clock_gettime(0x3, &(0x7f0000000000)) (async) futex(0x0, 0xd, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) clock_gettime(0x0, &(0x7f0000000080)) (async) futex(&(0x7f0000000040)=0x1, 0xc, 0x0, &(0x7f00000000c0)={r0, r1+60000000}, &(0x7f0000000100), 0x2) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) [ 559.845081] hfs: part requires an argument [ 559.876486] hfs: unable to parse mount options 17:36:56 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') (async, rerun: 64) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) (rerun: 64) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) (async) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) (async) rmdir(&(0x7f0000000080)='./file0\x00') ftruncate(r1, 0x200002) 17:36:56 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x2f, 0x7, 0xfe, 0x4, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, 0x0, 0x700}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x2f, 0xff, 0x2, 0x7, 0x40, @empty, @mcast2, 0x700, 0x700, 0x0, 0x1f}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000240)={'syztnl2\x00', r2, 0x0, 0xe5, 0x62, 0x1a52, 0x6a, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x700, 0x2, 0x80000001}}) 17:36:56 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}], [], 0x9}) [ 559.933039] attempt to access beyond end of device [ 559.939162] loop1: rw=1, want=16, limit=15 17:36:56 executing program 0: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000e40)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x23, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@generic={0x9, 0x8, 0x0, 0x4, 0x6}]}, &(0x7f0000000300)='GPL\x00', 0xffffff01, 0x1, &(0x7f0000000380)=""/1, 0x0, 0x1e, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x84, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x3, 0x4, 0x80, 0x2}, 0x10, r0, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x15, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xe1, &(0x7f0000000340)=""/225, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000000000ffffff9500000000000000844edc1358484d33d4000000"], &(0x7f0000000040)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x0, 0x4, 0x1, 0x1}, 0x10, r0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r1, 0x1, 0xffffffffffffffff, r2, 0xffffffffffffffff]}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r3, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r4, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r5, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x2, &(0x7f0000000040)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x2}], &(0x7f0000000080)='syzkaller\x00', 0x3f, 0x8c, &(0x7f0000000140)=""/140, 0x41000, 0x1f, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xc, 0x0, 0xe6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[r3, 0x1, r4, r5, 0xffffffffffffffff]}, 0x80) ioctl$VIDIOC_S_PRIORITY(r3, 0x40045644, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x40001, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) [ 559.986153] Buffer I/O error on dev loop1, logical block 15, lost async page write [ 560.013124] attempt to access beyond end of device [ 560.030562] loop1: rw=1, want=128, limit=15 [ 560.131163] hfs: part requires an argument [ 560.155563] hfs: unable to parse mount options [ 560.346087] attempt to access beyond end of device [ 560.351056] loop1: rw=1, want=16, limit=15 [ 560.363957] Buffer I/O error on dev loop1, logical block 15, lost async page write [ 560.372274] attempt to access beyond end of device [ 560.382921] loop1: rw=1, want=128, limit=15 17:36:57 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000000)=0x1, 0xb, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) futex(&(0x7f0000000040)=0x2, 0x0, 0x2, &(0x7f00000000c0)={r0, r1+10000000}, &(0x7f0000000100)=0x2, 0x1) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f0000000000)=0x1, 0xb, 0x0, 0x0, 0x0, 0x0) (async) clock_gettime(0x0, &(0x7f0000000080)) (async) futex(&(0x7f0000000040)=0x2, 0x0, 0x2, &(0x7f00000000c0)={r0, r1+10000000}, &(0x7f0000000100)=0x2, 0x1) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) 17:36:57 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}], [], 0x10}) 17:36:57 executing program 0: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000e40)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x23, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@generic={0x9, 0x8, 0x0, 0x4, 0x6}]}, &(0x7f0000000300)='GPL\x00', 0xffffff01, 0x1, &(0x7f0000000380)=""/1, 0x0, 0x1e, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x84, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x3, 0x4, 0x80, 0x2}, 0x10, r0, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x15, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xe1, &(0x7f0000000340)=""/225, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000000000ffffff9500000000000000844edc1358484d33d4000000"], &(0x7f0000000040)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x0, 0x4, 0x1, 0x1}, 0x10, r0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r1, 0x1, 0xffffffffffffffff, r2, 0xffffffffffffffff]}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r3, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r4, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r5, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x2, &(0x7f0000000040)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x2}], &(0x7f0000000080)='syzkaller\x00', 0x3f, 0x8c, &(0x7f0000000140)=""/140, 0x41000, 0x1f, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xc, 0x0, 0xe6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[r3, 0x1, r4, r5, 0xffffffffffffffff]}, 0x80) ioctl$VIDIOC_S_PRIORITY(r3, 0x40045644, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x40001, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000e40), 0x8) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r0, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x23, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@generic={0x9, 0x8, 0x0, 0x4, 0x6}]}, &(0x7f0000000300)='GPL\x00', 0xffffff01, 0x1, &(0x7f0000000380)=""/1, 0x0, 0x1e, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x84, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x3, 0x4, 0x80, 0x2}, 0x10, r0, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x15, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xe1, &(0x7f0000000340)=""/225, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000000000ffffff9500000000000000844edc1358484d33d4000000"], &(0x7f0000000040)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x0, 0x4, 0x1, 0x1}, 0x10, r0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r1, 0x1, 0xffffffffffffffff, r2, 0xffffffffffffffff]}, 0x80) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async) openat$cgroup(r3, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async) openat$cgroup(r4, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async) openat$cgroup(r5, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x2, &(0x7f0000000040)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x2}], &(0x7f0000000080)='syzkaller\x00', 0x3f, 0x8c, &(0x7f0000000140)=""/140, 0x41000, 0x1f, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xc, 0x0, 0xe6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[r3, 0x1, r4, r5, 0xffffffffffffffff]}, 0x80) (async) ioctl$VIDIOC_S_PRIORITY(r3, 0x40045644, 0x0) (async) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x40001, 0x0, &(0x7f0000048000), 0x0) (async) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) 17:36:57 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') ftruncate(r1, 0x200002) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) (async) chdir(&(0x7f0000000040)='./file0\x00') (async) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) (async) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) (async) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) (async) rmdir(&(0x7f0000000080)='./file0\x00') (async) ftruncate(r1, 0x200002) (async) [ 560.754639] hfs: part requires an argument 17:36:57 executing program 0: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000e40)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x23, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@generic={0x9, 0x8, 0x0, 0x4, 0x6}]}, &(0x7f0000000300)='GPL\x00', 0xffffff01, 0x1, &(0x7f0000000380)=""/1, 0x0, 0x1e, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x84, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x3, 0x4, 0x80, 0x2}, 0x10, r0, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x15, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xe1, &(0x7f0000000340)=""/225, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000000000ffffff9500000000000000844edc1358484d33d4000000"], &(0x7f0000000040)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x0, 0x4, 0x1, 0x1}, 0x10, r0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r1, 0x1, 0xffffffffffffffff, r2, 0xffffffffffffffff]}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r3, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r4, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r5, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x2, &(0x7f0000000040)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x2}], &(0x7f0000000080)='syzkaller\x00', 0x3f, 0x8c, &(0x7f0000000140)=""/140, 0x41000, 0x1f, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xc, 0x0, 0xe6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[r3, 0x1, r4, r5, 0xffffffffffffffff]}, 0x80) ioctl$VIDIOC_S_PRIORITY(r3, 0x40045644, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x40001, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000e40), 0x8) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r0, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x23, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@generic={0x9, 0x8, 0x0, 0x4, 0x6}]}, &(0x7f0000000300)='GPL\x00', 0xffffff01, 0x1, &(0x7f0000000380)=""/1, 0x0, 0x1e, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x84, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x3, 0x4, 0x80, 0x2}, 0x10, r0, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x15, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xe1, &(0x7f0000000340)=""/225, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000000000ffffff9500000000000000844edc1358484d33d4000000"], &(0x7f0000000040)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x0, 0x4, 0x1, 0x1}, 0x10, r0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r1, 0x1, 0xffffffffffffffff, r2, 0xffffffffffffffff]}, 0x80) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async) openat$cgroup(r3, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async) openat$cgroup(r4, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async) openat$cgroup(r5, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x2, &(0x7f0000000040)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x2}], &(0x7f0000000080)='syzkaller\x00', 0x3f, 0x8c, &(0x7f0000000140)=""/140, 0x41000, 0x1f, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xc, 0x0, 0xe6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[r3, 0x1, r4, r5, 0xffffffffffffffff]}, 0x80) (async) ioctl$VIDIOC_S_PRIORITY(r3, 0x40045644, 0x0) (async) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x40001, 0x0, &(0x7f0000048000), 0x0) (async) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) [ 560.779628] hfs: unable to parse mount options [ 560.851583] attempt to access beyond end of device [ 560.867462] loop1: rw=1, want=128, limit=15 17:36:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6558}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:36:59 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x30, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x200002) 17:36:59 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}], [], 0x48}) 17:36:59 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000000)=0x2, 0x2, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x2, 0x2) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 17:36:59 executing program 3: nanosleep(&(0x7f0000000000), 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) 17:36:59 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000140), 0x3, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0x2, 0x0) sched_rr_get_interval(0xffffffffffffffff, &(0x7f00000002c0)) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000000000)=0x3, 0x0) clock_getres(0x0, &(0x7f0000000100)) futex(&(0x7f0000000040), 0x80, 0x0, &(0x7f0000000080), &(0x7f00000000c0), 0x1) futex(&(0x7f0000000200), 0x80, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x1, 0x2) [ 563.041851] device lo entered promiscuous mode [ 563.058122] device tunl0 entered promiscuous mode [ 563.073566] device gre0 entered promiscuous mode [ 563.081078] device gretap0 entered promiscuous mode 17:36:59 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xbcc, 0x0, "cdc77dbb4dccca0cfdfdf936418ee69c0fc840"}) 17:36:59 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f0000000000)=0x2, 0x2, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x2, 0x2) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) [ 563.097425] device erspan0 entered promiscuous mode [ 563.107955] device ip_vti0 entered promiscuous mode [ 563.115434] hfs: part requires an argument [ 563.123371] device ip6_vti0 entered promiscuous mode [ 563.138788] hfs: unable to parse mount options 17:36:59 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f0000000140), 0x3, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0x2, 0x0) sched_rr_get_interval(0xffffffffffffffff, &(0x7f00000002c0)) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000000000)=0x3, 0x0) (async) clock_getres(0x0, &(0x7f0000000100)) (async) futex(&(0x7f0000000040), 0x80, 0x0, &(0x7f0000000080), &(0x7f00000000c0), 0x1) futex(&(0x7f0000000200), 0x80, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x1, 0x2) [ 563.152045] device sit0 entered promiscuous mode [ 563.164012] device ip6tnl0 entered promiscuous mode [ 563.174044] device ip6gre0 entered promiscuous mode [ 563.186985] device syz_tun entered promiscuous mode 17:36:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14}, 0x14}, 0x8}, 0x0) 17:36:59 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}], [], 0x4c}) [ 563.201722] device ip6gretap0 entered promiscuous mode [ 563.215295] device bridge0 entered promiscuous mode [ 563.235664] device vcan0 entered promiscuous mode 17:36:59 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x30, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) (async) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x200002) [ 563.260710] device bond0 entered promiscuous mode [ 563.294932] device bond_slave_0 entered promiscuous mode [ 563.314248] device bond_slave_1 entered promiscuous mode [ 563.321426] device team0 entered promiscuous mode [ 563.331939] hfs: part requires an argument [ 563.336414] device team_slave_0 entered promiscuous mode [ 563.342040] hfs: unable to parse mount options [ 563.348893] device team_slave_1 entered promiscuous mode [ 563.360392] device dummy0 entered promiscuous mode [ 563.368368] device nlmon0 entered promiscuous mode [ 563.374248] device caif0 entered promiscuous mode [ 563.379427] device batadv0 entered promiscuous mode [ 563.388981] device vxcan0 entered promiscuous mode [ 563.395525] device vxcan1 entered promiscuous mode [ 563.401310] device netdevsim2 entered promiscuous mode [ 563.408229] device veth0 entered promiscuous mode [ 563.420342] device veth1 entered promiscuous mode [ 563.441465] device xfrm0 entered promiscuous mode [ 563.464625] device veth0_to_bridge entered promiscuous mode [ 563.471172] device veth1_to_bridge entered promiscuous mode [ 563.478390] device veth0_to_bond entered promiscuous mode [ 563.486124] device veth1_to_bond entered promiscuous mode [ 563.492588] device veth0_to_team entered promiscuous mode [ 563.499988] device veth1_to_team entered promiscuous mode [ 563.507050] device veth0_to_batadv entered promiscuous mode [ 563.515603] device batadv_slave_0 entered promiscuous mode [ 563.524271] device veth1_to_batadv entered promiscuous mode [ 563.530124] device batadv_slave_1 entered promiscuous mode [ 563.536953] device veth0_to_hsr entered promiscuous mode [ 563.542587] device veth1_to_hsr entered promiscuous mode [ 563.548379] device hsr0 entered promiscuous mode [ 563.553410] device veth1_virt_wifi entered promiscuous mode [ 563.559245] device veth0_virt_wifi entered promiscuous mode [ 563.565810] device vlan0 entered promiscuous mode [ 563.570759] device vlan1 entered promiscuous mode [ 563.575804] device macvlan0 entered promiscuous mode [ 563.581009] device macvlan1 entered promiscuous mode [ 563.586379] device ipvlan0 entered promiscuous mode [ 563.591509] device ipvlan1 entered promiscuous mode [ 563.596995] device macvtap0 entered promiscuous mode [ 563.602226] device macsec0 entered promiscuous mode [ 563.607528] device geneve0 entered promiscuous mode [ 563.612649] device geneve1 entered promiscuous mode [ 563.617874] device wlan0 entered promiscuous mode [ 563.622823] device wlan1 entered promiscuous mode [ 563.627916] device geneve2 entered promiscuous mode [ 563.633317] device veth2 entered promiscuous mode [ 563.638920] device veth3 entered promiscuous mode 17:37:00 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000000)=0x2, 0x2, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x2, 0x2) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f0000000000)=0x2, 0x2, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x2, 0x2) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) 17:37:00 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f0000000140), 0x3, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0x2, 0x0) (async) sched_rr_get_interval(0xffffffffffffffff, &(0x7f00000002c0)) (async) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000000000)=0x3, 0x0) (async) clock_getres(0x0, &(0x7f0000000100)) (async) futex(&(0x7f0000000040), 0x80, 0x0, &(0x7f0000000080), &(0x7f00000000c0), 0x1) futex(&(0x7f0000000200), 0x80, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x1, 0x2) 17:37:00 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={0x0}}, 0x0) 17:37:00 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}], [], 0x60}) 17:37:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8100}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:37:00 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x30, &(0x7f00000004c0)=ANY=[]) (async) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) (async) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x200002) [ 563.644055] device veth4 entered promiscuous mode [ 563.649011] device veth5 entered promiscuous mode [ 563.654053] device veth6 entered promiscuous mode [ 563.658998] device veth7 entered promiscuous mode [ 563.664172] device veth8 entered promiscuous mode [ 563.669145] device veth9 entered promiscuous mode 17:37:00 executing program 3: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) socketpair(0x15, 0x0, 0x0, &(0x7f00000002c0)) 17:37:00 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0xfffffffd, 0x0, &(0x7f0000048000)=0xfffffffc, 0x0) 17:37:00 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) clock_gettime(0x6, &(0x7f0000000000)) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 17:37:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf000}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) [ 563.819823] hfs: part requires an argument [ 563.846820] hfs: unable to parse mount options 17:37:00 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000340)=""/4096, 0x1000) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x200002) 17:37:00 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}], [], 0x68}) 17:37:00 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZE(r0, 0x4b4c, 0x0) 17:37:00 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) clock_gettime(0x6, &(0x7f0000000000)) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 17:37:00 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0xfffffffd, 0x0, &(0x7f0000048000)=0xfffffffc, 0x0) 17:37:00 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) (async) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000340)=""/4096, 0x1000) (async) chdir(&(0x7f0000000040)='./file0\x00') (async) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) (async) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x200002) [ 563.992053] device lo left promiscuous mode [ 564.011005] device tunl0 left promiscuous mode [ 564.021644] hfs: part requires an argument [ 564.026696] attempt to access beyond end of device [ 564.028441] device gre0 left promiscuous mode 17:37:00 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f0000000180)="cd2fd9c5533fa5dc34e78ca692b73956cca41a1ead9b0e144e26b24e64699d4fe70b583e6fac8556e504c420da4dba033d62e6c58bda79c8a2228449852bc0437f9b387e45aa8f080e44e9b0b8874e41f93e7972b7673c55dd4b2f8988566d49e0d417bd0c", 0x65) [ 564.038538] hfs: unable to parse mount options [ 564.045749] loop1: rw=1, want=16, limit=15 [ 564.067933] device gretap0 left promiscuous mode [ 564.069907] Buffer I/O error on dev loop1, logical block 15, lost async page write 17:37:00 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}], [], 0x6c}) [ 564.091033] device erspan0 left promiscuous mode [ 564.120353] attempt to access beyond end of device [ 564.120454] device ip_vti0 left promiscuous mode [ 564.146827] device ip6_vti0 left promiscuous mode [ 564.149423] loop1: rw=1, want=128, limit=15 17:37:00 executing program 3: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0xc01) [ 564.173308] device sit0 left promiscuous mode [ 564.184801] device ip6tnl0 left promiscuous mode [ 564.190019] device ip6gre0 left promiscuous mode [ 564.198746] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.204520] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.229647] hfs: part requires an argument [ 564.235430] device syz_tun left promiscuous mode [ 564.258474] hfs: unable to parse mount options [ 564.268590] device ip6gretap0 left promiscuous mode 17:37:00 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}], [], 0x74}) 17:37:00 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop8', 0x200002, 0x0) [ 564.284001] device bridge0 left promiscuous mode [ 564.295945] device vcan0 left promiscuous mode [ 564.301114] device bond0 left promiscuous mode [ 564.314462] device team0 left promiscuous mode [ 564.336837] device dummy0 left promiscuous mode [ 564.346408] device nlmon0 left promiscuous mode [ 564.364372] device caif0 left promiscuous mode [ 564.376600] device batadv0 left promiscuous mode [ 564.388100] device vxcan0 left promiscuous mode [ 564.416600] hfs: part requires an argument [ 564.416807] device vxcan1 left promiscuous mode [ 564.421541] hfs: unable to parse mount options [ 564.452268] device netdevsim2 left promiscuous mode [ 564.461765] device veth0 left promiscuous mode [ 564.468730] device veth1 left promiscuous mode [ 564.478325] device xfrm0 left promiscuous mode [ 564.490499] device veth0_to_bridge left promiscuous mode [ 564.499702] device veth1_to_bridge left promiscuous mode [ 564.507602] device veth0_to_bond left promiscuous mode [ 564.515771] device bond_slave_0 left promiscuous mode [ 564.522928] device veth1_to_bond left promiscuous mode [ 564.529651] device bond_slave_1 left promiscuous mode [ 564.536872] device veth0_to_team left promiscuous mode [ 564.543662] device team_slave_0 left promiscuous mode [ 564.550302] device veth1_to_team left promiscuous mode [ 564.557062] device team_slave_1 left promiscuous mode [ 564.563322] device veth0_to_batadv left promiscuous mode [ 564.570319] device batadv_slave_0 left promiscuous mode [ 564.577680] device veth1_to_batadv left promiscuous mode [ 564.584796] device batadv_slave_1 left promiscuous mode [ 564.591609] device veth0_to_hsr left promiscuous mode [ 564.599343] device veth1_to_hsr left promiscuous mode [ 564.606877] device hsr0 left promiscuous mode [ 564.612578] device veth1_virt_wifi left promiscuous mode [ 564.619695] device veth0_virt_wifi left promiscuous mode [ 564.628283] device vlan0 left promiscuous mode [ 564.634127] device vlan1 left promiscuous mode [ 564.638926] device macvlan0 left promiscuous mode [ 564.646124] device macvlan1 left promiscuous mode [ 564.651339] device ipvlan0 left promiscuous mode [ 564.656414] device ipvlan1 left promiscuous mode [ 564.661580] device macvtap0 left promiscuous mode [ 564.667766] device macsec0 left promiscuous mode [ 564.672690] device geneve0 left promiscuous mode [ 564.677680] device geneve1 left promiscuous mode [ 564.682563] device wlan0 left promiscuous mode [ 564.687395] device wlan1 left promiscuous mode [ 564.692075] device geneve2 left promiscuous mode [ 564.697071] device veth2 left promiscuous mode [ 564.701808] device veth3 left promiscuous mode [ 564.706680] device veth4 left promiscuous mode [ 564.711367] device veth5 left promiscuous mode [ 564.716167] device veth6 left promiscuous mode 17:37:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffff}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:37:01 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) (async) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000340)=""/4096, 0x1000) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x200002) 17:37:01 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8916, &(0x7f0000000040)={'wg1\x00'}) 17:37:01 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}], [], 0x7a}) [ 564.720852] device veth7 left promiscuous mode [ 564.725688] device veth8 left promiscuous mode [ 564.730374] device veth9 left promiscuous mode [ 564.814318] device lo entered promiscuous mode [ 564.849839] device tunl0 entered promiscuous mode 17:37:01 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) clock_gettime(0x6, &(0x7f0000000000)) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) clock_gettime(0x6, &(0x7f0000000000)) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) [ 564.878522] device gre0 entered promiscuous mode [ 564.882087] hfs: part requires an argument [ 564.891571] hfs: unable to parse mount options [ 564.900152] device gretap0 entered promiscuous mode 17:37:01 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0xfffffffd, 0x0, &(0x7f0000048000)=0xfffffffc, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0xfffffffd, 0x0, &(0x7f0000048000)=0xfffffffc, 0x0) (async) 17:37:01 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r2, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r3, 0x200002) 17:37:01 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}], [], 0xe0}) [ 564.946092] device erspan0 entered promiscuous mode [ 565.005233] device ip_vti0 entered promiscuous mode [ 565.036532] device ip6_vti0 entered promiscuous mode [ 565.058446] device sit0 entered promiscuous mode [ 565.069591] hfs: part requires an argument [ 565.075229] hfs: unable to parse mount options 17:37:01 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x7, 0x1, 0x0, &(0x7f0000048000), 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) futex(&(0x7f0000000000)=0x1, 0xd, 0x0, &(0x7f0000000080)={r0, r1+10000000}, &(0x7f00000000c0)=0x2, 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x80000) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 17:37:01 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}], [], 0xff}) [ 565.101689] device ip6tnl0 entered promiscuous mode [ 565.142558] device ip6gre0 entered promiscuous mode [ 565.175867] device syz_tun entered promiscuous mode 17:37:01 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0x7, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) futex(&(0x7f0000000000)=0x1, 0xd, 0x0, &(0x7f0000000080)={r0, r1+10000000}, &(0x7f00000000c0)=0x2, 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x80000) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) [ 565.211469] device ip6gretap0 entered promiscuous mode [ 565.222245] device bridge0 entered promiscuous mode [ 565.231650] hfs: part requires an argument [ 565.246075] hfs: unable to parse mount options [ 565.251675] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 17:37:01 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0x7, 0x1, 0x0, &(0x7f0000048000), 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) futex(&(0x7f0000000000)=0x1, 0xd, 0x0, &(0x7f0000000080)={r0, r1+10000000}, &(0x7f00000000c0)=0x2, 0x0) (async) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x80000) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) [ 565.264905] device vcan0 entered promiscuous mode [ 565.295966] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 565.315408] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 565.326833] device bond0 entered promiscuous mode [ 565.331993] device bond_slave_0 entered promiscuous mode [ 565.342703] device bond_slave_1 entered promiscuous mode [ 565.359082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 565.370093] device team0 entered promiscuous mode [ 565.377535] device team_slave_0 entered promiscuous mode [ 565.385598] device team_slave_1 entered promiscuous mode [ 565.391791] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 565.399601] 8021q: adding VLAN 0 to HW filter on device team0 [ 565.408068] device dummy0 entered promiscuous mode [ 565.416395] device nlmon0 entered promiscuous mode [ 565.422397] device caif0 entered promiscuous mode [ 565.429912] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 17:37:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1000000}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:37:02 executing program 5: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000200)={'virt_wifi0\x00', &(0x7f00000001c0)=@ethtool_wolinfo={0x6, 0x7, 0x5, "95b0d5348f63"}}) syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) syz_mount_image$afs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x40, 0x1, &(0x7f0000000180)=[{&(0x7f0000000100)="d6c78e636fe99425158c6f307a126e329a5b4ee245f623b3fd7d47ed5e272adf76c84a54b573737455761b0fcbee420128e16bd72e6978ecf575ea17ef337fedf3957db1723b", 0x46, 0x136e}], 0x800000, &(0x7f00000003c0)=ANY=[@ANYBLOB="666c6f636b3d7374726963742c666c6f636b3d6f70656e6166732c666c6f636b3d77726974652c6175746f63656c6c2c265e22a235bf1868318929cff5af006175746f63656c6c2c64796e975789da860da1a77c449f2c64796e2c666c6f636b3d6f70656e6166732c666c6f636b3d7374726963742c666c6f636b3d6f70656e6166732c6d6561737572652c6f626a5f72b357f09212bc47ee7c5b", @ANYRESDEC=0xee01, @ANYBLOB=',func=CREDS_CHECK,smackfsroot=part,euid=', @ANYRESDEC, @ANYBLOB=',\x00']) 17:37:02 executing program 3: r0 = syz_clone(0xd002f000, &(0x7f0000000000)="bea2161bfea8bffe26f5851d7f194e0aed8f5275", 0x14, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="2130c9cd96a30a65ab444fcc7ddc902e2edc866add11710531fb382d2af06df64c1c5a2dc28c8ecc56351c9874bc552350c54168cd906a52bfec584137bea485bfa84fa08b72c2ecb38511f5fd930680cb9dac25f6bc7ab48d8eb749450ff13652dde09a3e87d4a92e6e9002805e9884cb30aa0e37ac52b3fcada77a609891b34d6870a57d379e3587aa2eaccc7f088850070e867db30a135c414b396f644fb97d42f1772a98ff259080fff9f89eae14d8846b4117e4c73a93e3a7") ptrace$setregs(0xf, r0, 0x80000001, &(0x7f00000001c0)="c5473d37bc00536c36cad570c13ad5f20dee77d95212eb64b504c9629a77325d62604f043630a123354cdfe34ed665e2f5a0dfafcd61ce8878a5c86cf53f8de5adb4dfde8af0f87238d93638bfd3b918d313c90ebcfe422980091b1e64197ffb4be82ff7b8759f2d1e18c69ea2d9e7db52") syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/pid\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getpeername$netlink(r1, 0x0, 0x0) 17:37:02 executing program 0: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000e40)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x23, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@generic={0x9, 0x8, 0x0, 0x4, 0x6}]}, &(0x7f0000000300)='GPL\x00', 0xffffff01, 0x1, &(0x7f0000000380)=""/1, 0x0, 0x1e, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x84, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x3, 0x4, 0x80, 0x2}, 0x10, r0, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x15, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xe1, &(0x7f0000000340)=""/225, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000cf134000ffffffff9500000000000000844edc1358484d33d45b3daefdcb526d"], &(0x7f0000000040)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x0, 0x4, 0x1, 0x1}, 0x10, r0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r1, 0x1, 0xffffffffffffffff, r2, 0xffffffffffffffff]}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r3, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r4, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r5, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x2, &(0x7f0000000040)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x2}], &(0x7f0000000080)='syzkaller\x00', 0x3f, 0x8c, &(0x7f0000000140)=""/140, 0x41000, 0x1f, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xc, 0x0, 0xe6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[r3, 0x1, r4, r5, 0xffffffffffffffff]}, 0x80) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) [ 565.452832] nla_parse: 25 callbacks suppressed [ 565.452841] netlink: 364 bytes leftover after parsing attributes in process `syz-executor.1'. 17:37:02 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') (async) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r2, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) (async, rerun: 64) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) (rerun: 64) ftruncate(r3, 0x200002) [ 565.527644] attempt to access beyond end of device [ 565.533110] loop1: rw=1, want=16, limit=15 [ 565.554002] Buffer I/O error on dev loop1, logical block 15, lost async page write [ 565.570702] IPVS: ftp: loaded support on port[0] = 21 [ 565.585963] attempt to access beyond end of device [ 565.603605] hfs: part requires an argument [ 565.608439] loop1: rw=1, want=128, limit=15 [ 565.613654] hfs: unable to parse mount options [ 565.621356] device lo left promiscuous mode 17:37:02 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f00000000c0)=0x2, 0x89, 0x0, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000140)=0x2, 0x2) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000000)=0x1, 0xa, 0x80000000, &(0x7f0000000040), &(0x7f0000000080)=0x2, 0x2) 17:37:02 executing program 5: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000200)={'virt_wifi0\x00', &(0x7f00000001c0)=@ethtool_wolinfo={0x6, 0x7, 0x5, "95b0d5348f63"}}) syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) syz_mount_image$afs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x40, 0x1, &(0x7f0000000180)=[{&(0x7f0000000100)="d6c78e636fe99425158c6f307a126e329a5b4ee245f623b3fd7d47ed5e272adf76c84a54b573737455761b0fcbee420128e16bd72e6978ecf575ea17ef337fedf3957db1723b", 0x46, 0x136e}], 0x800000, &(0x7f00000003c0)=ANY=[@ANYBLOB="666c6f636b3d7374726963742c666c6f636b3d6f70656e6166732c666c6f636b3d77726974652c6175746f63656c6c2c265e22a235bf1868318929cff5af006175746f63656c6c2c64796e975789da860da1a77c449f2c64796e2c666c6f636b3d6f70656e6166732c666c6f636b3d7374726963742c666c6f636b3d6f70656e6166732c6d6561737572652c6f626a5f72b357f09212bc47ee7c5b", @ANYRESDEC=0xee01, @ANYBLOB=',func=CREDS_CHECK,smackfsroot=part,euid=', @ANYRESDEC, @ANYBLOB=',\x00']) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000200)={'virt_wifi0\x00', &(0x7f00000001c0)=@ethtool_wolinfo={0x6, 0x7, 0x5, "95b0d5348f63"}}) (async) syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) (async) syz_mount_image$afs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x40, 0x1, &(0x7f0000000180)=[{&(0x7f0000000100)="d6c78e636fe99425158c6f307a126e329a5b4ee245f623b3fd7d47ed5e272adf76c84a54b573737455761b0fcbee420128e16bd72e6978ecf575ea17ef337fedf3957db1723b", 0x46, 0x136e}], 0x800000, &(0x7f00000003c0)=ANY=[@ANYBLOB="666c6f636b3d7374726963742c666c6f636b3d6f70656e6166732c666c6f636b3d77726974652c6175746f63656c6c2c265e22a235bf1868318929cff5af006175746f63656c6c2c64796e975789da860da1a77c449f2c64796e2c666c6f636b3d6f70656e6166732c666c6f636b3d7374726963742c666c6f636b3d6f70656e6166732c6d6561737572652c6f626a5f72b357f09212bc47ee7c5b", @ANYRESDEC=0xee01, @ANYBLOB=',func=CREDS_CHECK,smackfsroot=part,euid=', @ANYRESDEC, @ANYBLOB=',\x00']) (async) 17:37:02 executing program 0: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000e40)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r0, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x23, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@generic={0x9, 0x8, 0x0, 0x4, 0x6}]}, &(0x7f0000000300)='GPL\x00', 0xffffff01, 0x1, &(0x7f0000000380)=""/1, 0x0, 0x1e, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x84, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x3, 0x4, 0x80, 0x2}, 0x10, r0, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x15, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xe1, &(0x7f0000000340)=""/225, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000cf134000ffffffff9500000000000000844edc1358484d33d45b3daefdcb526d"], &(0x7f0000000040)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x0, 0x4, 0x1, 0x1}, 0x10, r0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r1, 0x1, 0xffffffffffffffff, r2, 0xffffffffffffffff]}, 0x80) (async, rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (rerun: 64) openat$cgroup(r3, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r4, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r5, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x2, &(0x7f0000000040)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x2}], &(0x7f0000000080)='syzkaller\x00', 0x3f, 0x8c, &(0x7f0000000140)=""/140, 0x41000, 0x1f, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xc, 0x0, 0xe6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[r3, 0x1, r4, r5, 0xffffffffffffffff]}, 0x80) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) (async, rerun: 64) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (rerun: 64) [ 566.023899] hfs: part requires an argument 17:37:02 executing program 0: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000e40)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r0, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x23, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@generic={0x9, 0x8, 0x0, 0x4, 0x6}]}, &(0x7f0000000300)='GPL\x00', 0xffffff01, 0x1, &(0x7f0000000380)=""/1, 0x0, 0x1e, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x84, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x3, 0x4, 0x80, 0x2}, 0x10, r0, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x15, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xe1, &(0x7f0000000340)=""/225, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000cf134000ffffffff9500000000000000844edc1358484d33d45b3daefdcb526d"], &(0x7f0000000040)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x0, 0x4, 0x1, 0x1}, 0x10, r0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r1, 0x1, 0xffffffffffffffff, r2, 0xffffffffffffffff]}, 0x80) (async, rerun: 32) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (rerun: 32) openat$cgroup(r3, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r4, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r5, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x2, &(0x7f0000000040)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x2}], &(0x7f0000000080)='syzkaller\x00', 0x3f, 0x8c, &(0x7f0000000140)=""/140, 0x41000, 0x1f, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xc, 0x0, 0xe6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[r3, 0x1, r4, r5, 0xffffffffffffffff]}, 0x80) (async, rerun: 64) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async, rerun: 64) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (rerun: 64) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) [ 566.044378] hfs: unable to parse mount options 17:37:02 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f00000000c0)=0x2, 0x89, 0x0, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000140)=0x2, 0x2) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000000)=0x1, 0xa, 0x80000000, &(0x7f0000000040), &(0x7f0000000080)=0x2, 0x2) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f00000000c0)=0x2, 0x89, 0x0, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000140)=0x2, 0x2) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f0000000000)=0x1, 0xa, 0x80000000, &(0x7f0000000040), &(0x7f0000000080)=0x2, 0x2) (async) [ 566.194070] hfs: part requires an argument [ 566.208967] hfs: unable to parse mount options 17:37:02 executing program 5: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000200)={'virt_wifi0\x00', &(0x7f00000001c0)=@ethtool_wolinfo={0x6, 0x7, 0x5, "95b0d5348f63"}}) (async, rerun: 64) syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) (rerun: 64) syz_mount_image$afs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x40, 0x1, &(0x7f0000000180)=[{&(0x7f0000000100)="d6c78e636fe99425158c6f307a126e329a5b4ee245f623b3fd7d47ed5e272adf76c84a54b573737455761b0fcbee420128e16bd72e6978ecf575ea17ef337fedf3957db1723b", 0x46, 0x136e}], 0x800000, &(0x7f00000003c0)=ANY=[@ANYBLOB="666c6f636b3d7374726963742c666c6f636b3d6f70656e6166732c666c6f636b3d77726974652c6175746f63656c6c2c265e22a235bf1868318929cff5af006175746f63656c6c2c64796e975789da860da1a77c449f2c64796e2c666c6f636b3d6f70656e6166732c666c6f636b3d7374726963742c666c6f636b3d6f70656e6166732c6d6561737572652c6f626a5f72b357f09212bc47ee7c5b", @ANYRESDEC=0xee01, @ANYBLOB=',func=CREDS_CHECK,smackfsroot=part,euid=', @ANYRESDEC, @ANYBLOB=',\x00']) 17:37:02 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f00000000c0)=0x2, 0x89, 0x0, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000140)=0x2, 0x2) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000000)=0x1, 0xa, 0x80000000, &(0x7f0000000040), &(0x7f0000000080)=0x2, 0x2) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f00000000c0)=0x2, 0x89, 0x0, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000140)=0x2, 0x2) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f0000000000)=0x1, 0xa, 0x80000000, &(0x7f0000000040), &(0x7f0000000080)=0x2, 0x2) (async) [ 566.395978] hfs: part requires an argument [ 566.430197] hfs: unable to parse mount options [ 566.479947] device tunl0 left promiscuous mode [ 566.486949] hfs: part requires an argument [ 566.491208] hfs: unable to parse mount options [ 566.539674] hfs: part requires an argument [ 566.544429] hfs: unable to parse mount options [ 566.587021] hfs: part requires an argument [ 566.596107] hfs: unable to parse mount options [ 566.649544] hfs: part requires an argument [ 566.653926] hfs: unable to parse mount options [ 566.668823] device gre0 left promiscuous mode [ 566.703146] hfs: part requires an argument [ 566.714168] hfs: unable to parse mount options [ 566.772946] hfs: part requires an argument [ 566.777306] hfs: unable to parse mount options [ 566.813077] hfs: part requires an argument [ 566.820851] hfs: unable to parse mount options [ 566.840028] device gretap0 left promiscuous mode [ 566.877230] hfs: part requires an argument [ 566.887222] hfs: unable to parse mount options [ 566.936072] hfs: part requires an argument [ 566.946056] hfs: unable to parse mount options [ 567.029696] hfs: part requires an argument [ 567.041672] hfs: unable to parse mount options [ 567.069202] device erspan0 left promiscuous mode [ 567.090429] hfs: part requires an argument [ 567.094840] hfs: unable to parse mount options [ 567.135257] hfs: part requires an argument [ 567.141960] hfs: unable to parse mount options [ 567.287580] device ip_vti0 left promiscuous mode [ 567.410412] device ip6_vti0 left promiscuous mode [ 567.542967] device sit0 left promiscuous mode [ 567.730352] device ip6tnl0 left promiscuous mode [ 567.971279] device ip6gre0 left promiscuous mode [ 568.273310] device syz_tun left promiscuous mode [ 568.405521] device ip6gretap0 left promiscuous mode [ 568.526982] device bridge0 left promiscuous mode [ 568.624925] device vcan0 left promiscuous mode [ 568.711533] device bond0 left promiscuous mode [ 568.716291] device bond_slave_0 left promiscuous mode [ 568.721701] device bond_slave_1 left promiscuous mode [ 568.849786] device team0 left promiscuous mode [ 568.854512] device team_slave_0 left promiscuous mode [ 568.859800] device team_slave_1 left promiscuous mode [ 568.946303] device dummy0 left promiscuous mode [ 569.068709] device nlmon0 left promiscuous mode 17:37:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000000}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:37:05 executing program 4: futex(&(0x7f0000000000), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0xfffffffe, 0x1) futex(&(0x7f000000cffc)=0x800, 0xc, 0x5, 0x0, &(0x7f0000048000)=0x2, 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) [ 569.155650] device caif0 left promiscuous mode [ 569.173522] netlink: 364 bytes leftover after parsing attributes in process `syz-executor.1'. 17:37:05 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZE(r0, 0x560a, 0x0) 17:37:05 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) clock_settime(0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f00000003c0)) clock_nanosleep(0x2, 0x0, &(0x7f0000000640), &(0x7f0000000680)) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) futex(&(0x7f0000000440)=0x1, 0x1, 0x2, &(0x7f00000004c0)={r0, r1+10000000}, &(0x7f0000000500)=0x2, 0x2) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000080)=0x2, 0x3, 0x0, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100), 0x2) futex(0x0, 0x9, 0x2, 0x0, &(0x7f0000048000)=0x2, 0x5) futex(&(0x7f0000000200)=0x1, 0x0, 0x1, &(0x7f00000005c0), &(0x7f0000000600)=0x1, 0x0) clock_gettime(0x0, &(0x7f0000000700)={0x0, 0x0}) futex(&(0x7f00000006c0)=0x2, 0x2, 0x0, &(0x7f0000000740)={r2, r3+10000000}, &(0x7f0000000780)=0x2, 0x1) futex(&(0x7f000000cffc), 0x6, 0x1, 0x0, &(0x7f0000048000), 0x0) clock_gettime(0x0, &(0x7f0000000540)) futex(&(0x7f0000000180)=0x1, 0x7, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000580)=0x1, 0x0) pselect6(0x40, &(0x7f0000000000)={0x89, 0x0, 0x3ff, 0x0, 0x9, 0x0, 0x100000001}, &(0x7f0000000280)={0x9, 0x8, 0x9, 0x3, 0x3d1, 0x7, 0x4b7}, &(0x7f00000002c0)={0x8, 0x0, 0x2, 0x4, 0x8, 0x81, 0x81, 0x10000}, &(0x7f0000000300), &(0x7f0000000380)={&(0x7f0000000340)={[0x3147]}, 0x8}) clock_nanosleep(0x5, 0x0, &(0x7f0000000140), &(0x7f0000000240)) clock_nanosleep(0x1, 0x1, &(0x7f0000000400), 0x0) 17:37:05 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) getpeername(0xffffffffffffffff, &(0x7f0000000080)=@x25, &(0x7f0000000100)=0x80) 17:37:05 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r2, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r3, 0x200002) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) (async) chdir(&(0x7f0000000040)='./file0\x00') (async) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r2, @ANYBLOB="010f2ca07000ffdbdf2567"], 0x180}}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) (async) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) (async) ftruncate(r3, 0x200002) (async) 17:37:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3000000}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) [ 569.221081] attempt to access beyond end of device [ 569.229656] loop1: rw=1, want=128, limit=15 17:37:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000000}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:37:05 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0xc, 0x0, 0x0) [ 569.375044] hfs: part requires an argument [ 569.380130] hfs: unable to parse mount options 17:37:06 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) (async) getpeername(0xffffffffffffffff, &(0x7f0000000080)=@x25, &(0x7f0000000100)=0x80) [ 569.445058] netlink: 364 bytes leftover after parsing attributes in process `syz-executor.1'. 17:37:06 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) clock_settime(0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f00000003c0)) clock_nanosleep(0x2, 0x0, &(0x7f0000000640), &(0x7f0000000680)) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) futex(&(0x7f0000000440)=0x1, 0x1, 0x2, &(0x7f00000004c0)={r0, r1+10000000}, &(0x7f0000000500)=0x2, 0x2) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000080)=0x2, 0x3, 0x0, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100), 0x2) futex(0x0, 0x9, 0x2, 0x0, &(0x7f0000048000)=0x2, 0x5) futex(&(0x7f0000000200)=0x1, 0x0, 0x1, &(0x7f00000005c0), &(0x7f0000000600)=0x1, 0x0) clock_gettime(0x0, &(0x7f0000000700)={0x0, 0x0}) futex(&(0x7f00000006c0)=0x2, 0x2, 0x0, &(0x7f0000000740)={r2, r3+10000000}, &(0x7f0000000780)=0x2, 0x1) futex(&(0x7f000000cffc), 0x6, 0x1, 0x0, &(0x7f0000048000), 0x0) clock_gettime(0x0, &(0x7f0000000540)) futex(&(0x7f0000000180)=0x1, 0x7, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000580)=0x1, 0x0) pselect6(0x40, &(0x7f0000000000)={0x89, 0x0, 0x3ff, 0x0, 0x9, 0x0, 0x100000001}, &(0x7f0000000280)={0x9, 0x8, 0x9, 0x3, 0x3d1, 0x7, 0x4b7}, &(0x7f00000002c0)={0x8, 0x0, 0x2, 0x4, 0x8, 0x81, 0x81, 0x10000}, &(0x7f0000000300), &(0x7f0000000380)={&(0x7f0000000340)={[0x3147]}, 0x8}) clock_nanosleep(0x5, 0x0, &(0x7f0000000140), &(0x7f0000000240)) clock_nanosleep(0x1, 0x1, &(0x7f0000000400), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) clock_settime(0x0, &(0x7f0000000040)) (async) clock_gettime(0x0, &(0x7f00000003c0)) (async) clock_nanosleep(0x2, 0x0, &(0x7f0000000640), &(0x7f0000000680)) (async) clock_gettime(0x0, &(0x7f0000000480)) (async) futex(&(0x7f0000000440)=0x1, 0x1, 0x2, &(0x7f00000004c0)={r0, r1+10000000}, &(0x7f0000000500)=0x2, 0x2) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f0000000080)=0x2, 0x3, 0x0, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100), 0x2) (async) futex(0x0, 0x9, 0x2, 0x0, &(0x7f0000048000)=0x2, 0x5) (async) futex(&(0x7f0000000200)=0x1, 0x0, 0x1, &(0x7f00000005c0), &(0x7f0000000600)=0x1, 0x0) (async) clock_gettime(0x0, &(0x7f0000000700)) (async) futex(&(0x7f00000006c0)=0x2, 0x2, 0x0, &(0x7f0000000740)={r2, r3+10000000}, &(0x7f0000000780)=0x2, 0x1) (async) futex(&(0x7f000000cffc), 0x6, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) clock_gettime(0x0, &(0x7f0000000540)) (async) futex(&(0x7f0000000180)=0x1, 0x7, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000580)=0x1, 0x0) (async) pselect6(0x40, &(0x7f0000000000)={0x89, 0x0, 0x3ff, 0x0, 0x9, 0x0, 0x100000001}, &(0x7f0000000280)={0x9, 0x8, 0x9, 0x3, 0x3d1, 0x7, 0x4b7}, &(0x7f00000002c0)={0x8, 0x0, 0x2, 0x4, 0x8, 0x81, 0x81, 0x10000}, &(0x7f0000000300), &(0x7f0000000380)={&(0x7f0000000340)={[0x3147]}, 0x8}) (async) clock_nanosleep(0x5, 0x0, &(0x7f0000000140), &(0x7f0000000240)) (async) clock_nanosleep(0x1, 0x1, &(0x7f0000000400), 0x0) (async) 17:37:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5000000}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:37:06 executing program 3: mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002540), 0x0, &(0x7f00000022c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006a40)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000000000)="9eda438838743bd4e9720bee57093515dc189a5ea685e9556c1c2c3cfc4df50d66d31a48aa312663b68d18c5826b5b55fb738208863dac0f10f423aee7a5d8ddc45ebdfeb7424bae859d7c37ecfc4b63914d5a56d91017dd22bc84f759a15969951aef9d5c88c96560896988fa18cd946cfcc3a0f1c993348377904eac32c980bdf7976ebca2b499cab63c4e841514277fc71d4620e29a92523402485de0e82896484c0ae497a4d686df23ca7b68c3fd5e624d3510d7f94838e54af877ca58a00c5a672bba11f5aa1ed1980dfef47b9973d0bf456ded5e72f1702b3dc5197fce39cba53a038d8dc0ec783ce70577107dc5e8b299e64a0b7f1191f0926bd25762370191710bab2f44e9069f55f8a3f87e4cb488a2fb3348c0bf3b3874291f83e4776b160ea73aafa3919c7c069c73c0052173a63158db8b65541d161f9c964926ad7f06bdd6cb6a32135b04e35701c2e13c49c1f75dc7a25d623378860692d172ec3f1e1f2d9dc77c015c13721efcb101c2390abb847e871132f472a37cc0163b39b1d575a5444e246a08a1afb1a696cabab29498a314429a3b9f44c43ba29f71fac1fbe0d01c3c16d22730932704bcfb0c1b7a432bc51dd3f5dd5afc3b342cbe6a6ff899039e28f9a51881b1d46fdcf31767cb6f5c5c69ab3c80615d77c4d1664fc4ec831b8cea2e752bbb7a9ce79df875b29f1e232751daf32a1a0c4ff8bd0688e2b8e2d668b8a77e20a9eb6ec2e2c23b94e507baeacbcfa31fb6e1ca3343668f43e3aa6d85e7c29bf0bb4dbdabddc92be7f4a6f5d21b19e6da17bfb6cc926e3847532fae29c7b62fb909130ec372d3c16cfe6aaf3ce2af0fe7610fde7aad61bc80d2f96b999c8ccf6d22cf903ca8ae8b879ec4a416f334982e9810c0140a18d4dc81b5edaae23e9f4abaf40ed71512aebbba5bb251545e188db789558a845a2877b14bdaeec3c738b7d730c0860531bf5517d4f0e8f95ed3571f8a35816d5116fcb8d7cbf42b7d5d5e65541508c898bb2e0fe96297d2ab7135662de39df099ebaed5871111f5346278cee5728cec512e6c0a0d65b51e3d627873195b84103341c2bc83b6c8fdd8ba17f5957413f61c69d618c9b9d0b1f08dc81921b6c662ee1da3bfa019b095e9a03c2db4d645ccb7364e895098cbf7d932c72d80663c7a1694d122f7348393079223c11d36c64a5856eae0397ab9a9d948204b74e56525a9d552dd0916de81cbb5af3c59b3d7f8f9154423ce2cb45a5bc808e24bef13212019a19545fe54ba84d01534358380192b8c7b0eda907810375bb66a578a58fec392b47991271c8367b91d710e8a176bc1a4e96f0e137d4c25fbb03eddc392f9f170dd744472b864fbbae7c93d86e682308b21b73c5652065d72cf02e1152b44024a90a3b52eb0bb3cb412e518d37a68aa4c7f46789c54ab30d3a73d0a8712fde612294cda2aa1ccf164930b9b1d17801d4fbb06e849d39bf2b5141330caa0d2618b616f1c67e1ca57080e79ed9092ba7a55e8121cfc825cd26a0199a479a7ab1b7b23d2a4dd82fa6d04ee41ca680435efc934f0451e865e8632ac2f1115f4cdd33b0fccb7a2326127faf20cba37c828613dba5a98f4e1ad25eb6b91078cf73d873df9ef91531476f64b83559ff7ccdc4c070d478b18196ea05fe8d4ea0216ee5273dfabbd04582f40f064c9781a050000000000000009cc934f1b2d50883778274177e3dba8af0a1b931d80ce1a6c4085780ea2195b65ecfd2953f78a5290fe560d0cd6a5e73890a5a82dc410b92a3ef2be05ec5607820fd4ca6b9c3aa258d59022fdcb21665f1ce4e8aad8fd918c43bd3c2afe3dc223ff9f48831d401c8b6996190793d1dd7551f8511b69283992398d8f9b4bd2b3398d3b8c6f3c5d8b802ca5282b70242df2b7be4b38e70c3065f8da888631375afcc05ce578089c4f783776b286b7a60d1b5e189e2742a3240c1036a953d886885422eef01413c38099b64505fd5a73488acb4e611820674c58ae74d6c64a885d4beda9bd7903bcdc71e3711e2a057c0eab2100c321050ab14c6e453c53182577ad3178603cd9afde40a701120e9a36074fd582428c74e02781318e6c65450f8f020bd22475696fe13b8c59260e53a06d16eabd135e887a0a6bbc8ad21be7661df76fec5b13844f68b8eed1a7379713738beac9f23c7a26520e19797a910cde9fb285179526889b908b7eb49bb06f70f6271fba8712c1a4269ebcf4b7d043e924e3d2c4c753fd7e547d95841e335179836f76424e728810d7f32b78256ea30c79d9238a6588426e1f2d4c0b03d5605bd826ed24f0f11326b4cf958632b86e017aa80e142db1580c44f76d9c98196f3f6852ab2bfc6a01a3553a130c2d171957f5a45c3550fbbc990ef8742a98a86b280a57b9f198ff436bc01161ada50e6f23026c3254adf2321bff7e20aa54080bbb57d8d52c6a6df6107706a2e5bc6da68f17b474c0edd39401d765086e885cf7992405f856557915603cbe8894676e996bbadbb649a5e7498b91f9bd2f697dd9ebbe4d386050258b9f4c94781e61c660651c3f1e3ae51f8c035eca365bf15d6db48ea9ce183515f4a208d010f7c23dcacbd6e225490d7e9c133525f5c9018d752b21b4897bf18b64b6a9936f538a0a8958fc934440aeeaad2b68ac844d76f0900a6c95bd0b353d85d4fb62eb88360112237fd8c636a80e3130b21d66ae8ec58a4b76cba0602f96da919f7e84fd37e3ec2379f58e389a39c78d2482e03c379e3c4649ad63a76e3707ecff07d2fcb0c9dfc524cab49e69a09c92e4f88714335cb57d3f6184d07bef9657280fb5c9fd2d8f940f7ac6c5407e3077aa2e4ba8e217e0ee19e302d6d90e3be05a86dade35d2e454e511afb5cf5936f1d11f2fa6be6ceaa817dbdc7a6aabf2fad8ff3efa8382a25099f0c5989d2ad56ae0f4968b2cfcfc67b4f1c161c75900b4848f59a3c0376dfcb7997bf28e9e85d6dd942a360516de38e1c1a038a796f9a77ff2b0c7e5e8f4932391a0e58e76dacc6f9764178a211dfde3e75d367d2911ff398126ffdf83cf2fbdf1ad5232bed9155f7a168638a572094a9e934d4969b358cf6e121d7fd2aeae2f499068b42c152f0e3403a230885d6f92f038ddaa23499f804ffb06abdbabb51f6c38c92fb1a6271a4b13d6d11125b8ec12efa5907dc65062797fb9cca15e2f254e76b182d3fcdb4e96ac4de36d6df7e7bba5c32f422286b1be3b79bffb6fd693761952d195a84ad9ceb07287a0fbefab9e0347b513c5f60233ccd4b52d90ec144a2f896d9dc7f279f8aa93038f3efa286e1c3006933a4d7183d952f8d28b141b28b2af355b5bd8198dfde1ffb8d09202aff0d16ca3fec194662892a49f829813970a4520f1228aa03d211a45bed3b2e05bf1f10b1a152761e7b6c6ddea863a3c02224256092c70ca70dc185c4c385dd98b09e2682661e1e66f71d9c4037048eb70e8a1cbe57de87ec43713abf5fdcf63b9c482f318e3bec37e878dadbae15a02d731e6c8574eb14c059d72f73be5174add786d06b585a28a06d349d8e434a491b34897b3c1ad786ec8280d7f57edd4fbc6aea5485d659b59d393e331cf91e6ed76f340fcf7cf460892fa7318fc42b883f61d888ad982a751accb613c66661fba5f3d6de751a6a9ef8a4700316aaad04e991aab7903f4ef012ec2a8c092234e74ef335daf360ae47bbd2bbc6ad8c1a4f81efe8bbd703cb55ef36b32b4e30cb5a3b165c02ba295d0e1c40ce6ff8f479a74f01275f113ebfa8ade37a59ce70e6ca2a6f48f1be085f61bf772e2c2da523a2cfe63e99c57bdb1ff23139d4fca49eff7547e9880eefd3f7511a677efa23b52098ba89037c48dfcda2e8c1cfb9f892161049e53f8cee55256279512aecab8c441600dae0fd957883273047cf5c66ba209f830aa2ce0cbe41ca08c0cef4aed7f4324009200661a7ce680e5a8df2d051c1d8b2f63d25d8d74d05c75c46c8f3f24d625539e63459650960498a54ec3b16225bbbf4d3930009df265839d72611f5332a904cdebada108236e4414a2909ad01ec44b9d7f75de4385ad7ca5152e890a0919b3639fd1bcbca3b737ebb8d9ae541b1271cf2166ba15830e66f3d3afd3b754a7f81ad4f0999704ae99c114907c5be4a4797f13b80564f234723a34dbe137dabfd7fa23562df679f54a6ab54def6d63deae9844f72fd73efd0413551f5c4b9ee826eb3b7faf92a59ea34a16723b4fea14d1c8815a4e2d39fc48d1dbce526a7c53f5a96d0ef6463a0cee73fd3505f5c764a264b83c4a21f80e8b61c82d24442d13da99d18dc1b2538e7a510f6093d9ef2bc5cc777d4f98411e93919eddfd69d6e20d227cb61c50f358ea227f4de941fb080c1cf6b1f6e25533768fe133dbfc3f9d29c603bed38aa3c5af5b81a706b0067b40b88f992610d04c7cc36b8f649697cd6a93fae51138161891ae75a7147780fc59af5a6e18c54f9d2a4fe7fa92314b399afba9a40d0cc24f70a2593acf8d179215e06b7a9a88224bafcb2cbf60caf5fe4ff38208a70793b5dc33cd572956260e1c86312d3ba9b3a4b2b44376f2e78c616a6c0880ac8dcbaa30b9f761d500fd03a8518dd0500101b184a2d95e0caf3ffc8ac2db6c54d80c71a1e5b9ea3bf51071e2118af204123daceeb04e4f6f31f32a4d3fbb76ee49440cabda2c121c1b99acab5b87cecc37c3f9066af34ab29d6598bbfd91047a2ac7ce3a8f3027ff5e6d743506f161087278896a98ed37122ba208b61cf54d3929555ab06b564cd5e4f46f4755a6cfa2ef2b30d29ea66f2749d4060d411fa9160c91b6f55cf071ac8222c6313df18759e2958cddfe3db4cbeb9cd39abcf5f0beaecae8437813995cb7ed0b87d42ca942ff7245ece204798d01361c5f008e0d82bdf76660515bc78f7f8f409ccf68614b2cb50f5af2615661326fd971bc57eeeade60ea906b8df1cb0dfafd318cd2c396309c329d0469ca192aa8f51d7c4227685440f073983255baf054b97b9d7be1d1470d7eabd5c09b2116b4e86b0567b7e97e088717a4fe3dbdd310a1c39136ea4d2c47492001f9885dba03bf97e7da376171d666441cdc2f999db137603d57df32b4260fa0165e82917bb1631ea314e7a7437e66fc68cef22cda8f456d6e583f6e3237e0bc79987a9103f7cf0918e26881f67ea582e1ff3a49177599d385bf6e42572a2547933aeddb826530e9adf30dd84c3a7fae5c4c26f6c6f3a9f0906decd314e2407825abef959c5416d18a92ff34e6c521a16e8a0a29937c77d4ee99b41d530a732acbe0bf5d274df9d496b47a9a624546bdcf9976cde12ec989cb2a70b33a7c8a3a77652023164695f9db30dfcf587f0cd4f73e385730bcbdd688f6dcb08ba0efbb9f579220afefa4acfea522e864fce9b1782ce9f14824d16e9d33a2609c23ba3c5a1af02549357a0dcc12e37819d778021762cf895abeac1125b744c8b8225a091e7be9ded9993cfa3ca9abb83e25c8f559009977a2ed9374a89619fae5ef6d164bb73d242004dc8428e44689b33ee3bbe88bb4962ab0a32a90e7aea044f08410752cb2d7aeaf3196648a3a99092665b478bb394b48f79b36db0efc7f50d6a5179c945f5298cfaac5e5dea715296f92abce7281d48a0c9c6b785a35ef5f1697c047ddb254fe9a8ab9f498b0c1ae09ffd01a3d8d427fee7e36c51e0e5c2fee2245fb8464626ab5c9857ebce91f7d22bf024d10c2d71021cd69268472de419e6cefd970cc3a8e4d1bbe6496799aa7f100411766e712aff08b731460f14f9d7356db12cf8e1c6121968dc68b1d81c086b325ca4ce6fe1f476707e08fa913144b757c6be17cf93150db29544d207f09a896f33b7335d9339215da751e7af2c6bdd19db6f521af2c8a5998dc607f97026d07111488741134c1c86eba123273d1fd5ee4b471e86f9ae9478a04c7482076ab34a1eca5c64f89e5106eed44bceec019c67c12fb4db4fdac153f4ac3b63ffeb6d30de58ec039e2dd3c181e254cd94d0a2b0b44490384cc5915b54ee1db2b6d059879bf8126c9ca976d0f7862da07ecd350930a081810a7afd72b2ad3f65b96ae9c7f91227a2b5513a559f36b90fe01be9ae5ad3ca65e2c26f358fc26b858a3633fda7ae49a5fb705220a5819b3cca41b1ccc21d7c40f5fa9c422288efa5394e4312675899d704a2aab62b8363f58fd4bc12a8bea6ffc45b4414237bf5f019321206dbba439acb5ef26641f30fdac20f964354bce94e4c9d73e137f9806deefaf6f4acaa0e76ad4fef9f6cb7fc01bbabda9612c05adbe46afcf94819e8a4b4b49ff764784fa432d47fb6d4230900043d1b4521cd6839fe8c5df4d1899fdfb13880e207cac73f0a29020bdd563bd9c2f6bcd1ec523b3e03ebf6164fc65af001830c51396f9df2d346f83a59cfc82201cf1150ea57259d579fc2ed199b3fbe42d5188c84e4354610743e5b23a265246313cc63913f17412fa00d98b379b80b96d936969572e11316bc8926cb23115186f3b2387b82c3898fa41bf16a308da62d5a3eb3609af1943fddde08a4036eb2a41b7292caad9eb082614b02a1fa255bc7abd4d0e3b4ec1801e131e68c7aa9da1a0ff10f9de87dec8fad1ad8bfa99caa49e203a7b9c33e044d4544a537471e7a452468b821959bc488c6b8cbf81e90081a26de273ad1203cc06adb6af242ab19f96c1c66b58c37e2c9309704fba63af99a8d9c5efc651afb631fe9f546b938cc3b8e526c4159e5c9f7afb29fd1d55fabf09367ce2a63a35e7a2062d1c772ed981fd77157a847f687a177cf9886ce41df8cc509302b46bc1e2ba896b1c1656a1bbfdf4cd9ac39cf8510d1c823075f16550fd044aacc8d42a56f03718f7b18475cdc3999faeb25ab3dd8a807ee04d8e5d831d08b4e309dff50330685138797e10c6362636f53f22bfc1f3d5090a5d369282d9de36bb4e2505411ccc6ea395afa1567b15a2fb4be2adeea7126b1a8e80034105e0d98bdd78e796ce1cdc06a4ae666fc0baec5c52614340ed997673e26ec47c88846c000bb7c9077337cd44f5c041fdcc64986e5e1c0f488148f0ee6f842c44c0b72e82109270341bba6e9080b70fcf930d0f10be5a36798e70111fed72727b72282ff164fc08319d74f1f57cde71b57cb397a9e753f87b97729bafba017a24cbfdee5dfe7fc296c112e93bb8fce560ca80a3afd8370baaa79ad783b51352b5440b144a47378c9ae22eda5794328e95bcca220fd07bb56915529b155c61858efe89ad36a79288e74c0e251addcfaf797432175a5562b46eff5e3aebeb74623e18beef85389383c604d8884431b07dc4bea0174aadc337ff41f558a63f16690feae47efa2a5d1318b7397e1e4ba398727d286791b71610e1d78d32800e7ebf0c0000f0f60b6ca4401ecd23b7aacd990633b2b017daf6bfef1b2361ece74b7dbcbb1a73d4bc1f9d2e5c9fb0b7980d25cc44d1b10c09ef5a6a05c84669294a5cadf0cd88ab449f9f0bcdd8c48590d416c5c1feaa494a2145949c2a3373df7c6014225f2745bbeb20ff294d22c0d96ca111e6926946207cab56a03162a49e68968e398f70690188ee3ca847ef421742d60b9a6ad029e8a3d607950b2bf8ad8ff297cb39acc94905635770436e134435e28205140331b5100d9f64469792fffac87bca0835cbc617446ff86a7b50418c305f32e658b32130e491e38709fd3697017ac8084cdf1ed81a28375aed092ab4e32ca88a933154dd3a9e99351acbada926b67b310c7070ac1a414a28c5abfe1f45476249a12f18ca2d981528d881ed3c5072e46a6eff3cdf37dcbc89c7f79c88a1f8d15d15beb66a0e4440c7b93e379c4e2bac1d5c8e85f1852887e2cfeb178fba1c67dc2adb0c87df8ca4444ca7f455509f492effb5001328b8cc696e293f207a2d78bbce8562ca34a248193c914406b161c8141479d891b0c6110ec1e25cad38299b489f2ec437017cadba67dcb58abd4933c95b3526f1d4747b8701a7d71e446e4b62e2941d4281faca0cf22914be5aad80f47100000000ceb24e82508fe55a92fb6db70d03d1c1ec09cfee31639341756a4630a0eaaecac7bfbddf9d30c42cbd45eb181d5bd341307ad26f496bb042e2b655c03ac3dcc587acbf50f79b5c239be9938b62d3251b199f8413b020605d5d0552cfd9c39c9132719d6d0a326b000e12fcb51bc274df79d11430060d05978cdd50583f1bca82c57dbee605e2d00fcb5414af13a596d35cb5ba62de6a28cbccc857d23547b1c7fd5ac8fbf6758d5b8451fa46d9acc00344dc2e565674b1dd3547eb8f8aa5fff99042f8d1d59e6ad2f53379211e6832fcb68f5777eb2db85b28f724f4e4ce6342cf55713ff7b0cb4f7f47dd12a6566b86709eaefae024373267ce72a89e7f3e42ab48edcccc96b5d0403fe93a927e5ccf470014f220b8257393226cd7b996f20e6a34f81206733a9fdce03b701943c1b560d3eab68c2c225cf7f7f2b56123be2bb173e9e5b37f4d3348f6b987764ad07c2acd44514ff264d7eda31e5e517a179414841ad4553d51c08f435e05f10aa82d74b97a9ba3a133e6c9175fdcd4f3dc9c16d3be1d5bbaf13240177081ac1d56681bfa988a93af09868afd608520c0bfd71d857a6661fdaf6f2e166987eb007449dd26334ae932c5003fefc0f983b9e49cbfcea325f2de16a9ae935caa46f5b3433957fb370971ed957f138f08a60fed5b84995e428e7ae7d5c22021ff016baef0e713a118344c016a99ad469313ba7f2452da0dd82e019f64aa229cf80a69b3e08ac5847f10d247179855546313232f23e055c2f74ecef14e0fdcc29a9bf0976fbb249bd5c7903183d2a53c70960a183630e7d4928daa7091a85ad987d2a4a5b8f6be6612fa72d9fbb33c67bb38eff19f2e784f94e0354cf6d35a5b2c62233c039de3734b38e97ec72bd673fef09fd56fec329818cc68cdf12cb52f7d37a8350c16e94208880bfcd3e895d7aa4489e3dd15db4a9026f0d2a46f1e89c35845dbd976a1992b87c15a0c7580e6424b8792a7bb7b933d7c5433d4133ba4dbbcf7995d6ed3feaa32f876a287feeb9cc6107778c1f83e0119d980b9e994c2a3ae3de24a103efb3cacb746b49d1ad85746b233ab4aaf0e988ec2a786bc93f32040d3bdc3008031634cdfded5ac95b2279e096243228296591e7ba53c4a127772cc4620e6b238ccad250629194533d0a669ff3366c52d64928693e0b0cbb0b8e2c6029089d4dfe2b4b6c5dcd85f1a02770611e65001e48a32a8b0431a3b9d77fa3a95be38a0436a704c05a8e0183f3214c25531a63796f679bf72885aa766468d42b2543542d7e82544efc5c5e81e6a91a0f5d4e68000cff687d63e45c9a11d4ef515050daa592c9a828ac7c0488e7cdb3d6fdaef5e9176ee68d981ea50d386d74df3b40660351736deb03bfceb721878cf9894b0302df15964242ab6b9f77f98ba1c7993735983d2b022600ab74a19e3636e1400d08ba45d3a5c2774cb06a1c358bbfc11d27efaf7ca53c2e7757c8c76da24707d91a4a5244262898d68083ff91c514d9b9b1ebaa0cb0b10254fda1b1e82b9a1a47f117b5b280ddbec1f6732d11117ef1a7a674699df87fe795d1243cb9c4527e364e2b711b6562a87fafc130ce0baf1701686639b05f0c8dc708f008b1e6ab89e8d623bb83f3d54b7bcdbdacd055ac4eccbd36bbe0af0f65a00e3d6dd985ae8851d176976cfb5816d1fc2a63d3546aecaa4e712ca6961d1f181315d553de6b53485faed0dcfcf819a1ba3badffe797377d3d1ddaed8e7a0acc0c3d277762262a139f94de49faca167b11bf04f2104a5ab9a73367a6461f7124c91a2c4229ef98e6ebde9aac283c7d029400d71293f488ba169b62c1e94689cf5b248ed4aea62b88d65bb764cfe27d5231a58486e7381df518f4ed81cb905108c54a5050a94ca0e94da20d3794bc5fab9127dc95b6404b1e27b4e28136fc27806f7be798444c33aca88ffd45b860eba0d5033839f5a092863954604f1952bd61dad23b11643fe14f3ade08116aa2c13eee701ccd13e506bd65a1060bf69579aea8c8143cd38c0891a3065f251eba0c20ab9c69ddf28e3bd6400cc203bac8de1882239ad4e1b97b0ae2f1abb7bac7c0d8ef82b97ebfb1f5577f06a3a1377b09ada4db87d342f20ab0eca4b9c206042471307511429cb57a578211f92d3647189861cad9145f5eb26ab736abe50a2a6c1b469df97da28aba4e79b586c348a430f5ea61c4be1032fa61d18581f05a07fb8707c8996e0fff1c3eda59b992687fa12483b9327e10224b20d42e8b3fc4670bf070ced602283273d6818acd1f6da567c44d3f5e1377065d43d87d889843ae48e7fa8ba1634815695b8c480ca271e6e833799c70da80fd79acc09b989667a2294de5da73f0363df9a33ad4dab8d27cf7bed0a06838672e3d07d52b6396e9b5576021d5e925abd533bf161c944795065fdd44e8462e3070c479f1c118276653488dd9b2f1a673f8cad3612ca1fab4388ec9c8f834a01a499adb7b3a9a977672f6d75b41bbdd7f91ceb7e7a88568d17bb432be9e4e96e115075bce197ef4754d2914c2c59e2d7f4c08f0dbe34d31f229428f211bf1d7e8f5c319ed4a8273cb6255eb318851ac4557b0278fac63107a54d407c42f300b843a12abd3b893b46c7efac2e388ab42b87aebe2543bd4c15f459bc50aad10ffe1c1196fb52c26e54bdaa7fbd52451f207ffb073ef4b3f71eedd7da40c89505019739e3fa733bcdc84ff4919e8fe2358129ef28291be1d6426b8bafe88463b1d3cd7273745381c7f65221898e6ad361e88b24c54ccc7ac9a830145b6dc096e2d71ef71ec4f03524cb870b724e08d223bdec2f6fdde6200217a13b5136004d455d66547f5a1793e0cad85677d49e5c558852107007c8136812cf021afaf6f7e8f59883371be46cda412dd9c6fcf187c31252ceb5758901d39cd5355ab386d9a7fe6ea46ebf277aaf809c3023211ea9aa189de4d422080ebb9fec50ffab6b95ba4ae5018accc497e79149ed6047ce561ccc10e9194cdccd5c9fb75175c8dbc9d0a916ad59288f010defbbb50d263041ab37aac0f93253bef6f898cd0825d99d27224f26181f9713b8979da64756c95e7505f25a2688960d6155c3613dcc31b6c337a6dbfc6b12cfde1db22b93bbd5e48534fb0bda8b212577a14dcf665c834b0bd24e5f624d2455fe048dbe930328d7cb632db3b0e244bb5d43390b420b15157a339487fc78976f867d3a361aafdd3f50a93c01882da7c220089a544381db22e2c86b228dc2be01820468460437588952a549d37498e529e62aa62bad1580546bcb1e9a6ed1870b7838d05d12f6e3a041e78b1bdb80894626f20889ccb3a468aa4fb24b9c87cbb28623ce59c6b3c6286db366d08004551a25fe4d8d194a2bb7c52e1c85a5fbe4cb15b171489da121bea1c469a6bb185d63213084e3a81ee54dc03a94dc5ecdda7bfaad1df68021aaf4627c9d529f13e5c81b5ee4dd228949ca16b9a61d186211d153294470907557e5e14ae665013f285fe4d3766e7b3d8ce5e2a14692072d4d8f79354bcc8db8a2a36c8bcd", 0x2000, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000066c0)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./file0/file0\x00', 0x800, 0x0) ioctl$FIBMAP(r2, 0x2284, 0x0) [ 569.556589] hfs: part requires an argument [ 569.566676] hfs: unable to parse mount options [ 569.633201] attempt to access beyond end of device [ 569.638181] loop1: rw=1, want=16, limit=15 [ 569.667284] Buffer I/O error on dev loop1, logical block 15, lost async page write [ 569.689474] attempt to access beyond end of device [ 569.700368] loop1: rw=1, want=128, limit=15 17:37:06 executing program 4: futex(&(0x7f0000000000), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0xfffffffe, 0x1) (async) futex(&(0x7f000000cffc)=0x800, 0xc, 0x5, 0x0, &(0x7f0000048000)=0x2, 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) 17:37:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6000000}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:37:06 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) getpeername(0xffffffffffffffff, &(0x7f0000000080)=@x25, &(0x7f0000000100)=0x80) syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) (async) getpeername(0xffffffffffffffff, &(0x7f0000000080)=@x25, &(0x7f0000000100)=0x80) (async) 17:37:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x23, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1809000000000000000000000500000009080400060000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0xffffff01, 0x1, &(0x7f0000000380)=""/1, 0x0, 0x1e, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x84, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x3, 0x4, 0x80, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x15, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000007900007a32a80b7d4fbb6197a3f4be9a000000000018000000007f0f400000006500000000009500"], &(0x7f0000000000)='GPL\x00', 0x4, 0xe6, &(0x7f0000000700)=""/230, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000d40)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x0, 0x4, 0x1, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r0, 0x1, 0xffffffffffffffff, r1, 0xffffffffffffffff]}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r2, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r3, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r4, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x4, &(0x7f0000000500)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x3f, 0x8c, &(0x7f0000000140)=""/140, 0x41000, 0x1d, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xb, 0x0, 0xe2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)=[r2, 0x1, 0xffffffffffffffff, r0, 0xffffffffffffffff]}, 0x80) write$P9_RREADLINK(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1000020000000047002e2f66696c6530"], 0x10) chdir(&(0x7f0000000040)='./file0\x00') r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000400)=ANY=[], 0x44) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r6, 0x200002) 17:37:06 executing program 0: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) clock_settime(0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f00000003c0)) clock_nanosleep(0x2, 0x0, &(0x7f0000000640), &(0x7f0000000680)) (async) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) futex(&(0x7f0000000440)=0x1, 0x1, 0x2, &(0x7f00000004c0)={r0, r1+10000000}, &(0x7f0000000500)=0x2, 0x2) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f0000000080)=0x2, 0x3, 0x0, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100), 0x2) futex(0x0, 0x9, 0x2, 0x0, &(0x7f0000048000)=0x2, 0x5) (async) futex(&(0x7f0000000200)=0x1, 0x0, 0x1, &(0x7f00000005c0), &(0x7f0000000600)=0x1, 0x0) clock_gettime(0x0, &(0x7f0000000700)={0x0, 0x0}) futex(&(0x7f00000006c0)=0x2, 0x2, 0x0, &(0x7f0000000740)={r2, r3+10000000}, &(0x7f0000000780)=0x2, 0x1) futex(&(0x7f000000cffc), 0x6, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) clock_gettime(0x0, &(0x7f0000000540)) futex(&(0x7f0000000180)=0x1, 0x7, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000580)=0x1, 0x0) (async) pselect6(0x40, &(0x7f0000000000)={0x89, 0x0, 0x3ff, 0x0, 0x9, 0x0, 0x100000001}, &(0x7f0000000280)={0x9, 0x8, 0x9, 0x3, 0x3d1, 0x7, 0x4b7}, &(0x7f00000002c0)={0x8, 0x0, 0x2, 0x4, 0x8, 0x81, 0x81, 0x10000}, &(0x7f0000000300), &(0x7f0000000380)={&(0x7f0000000340)={[0x3147]}, 0x8}) clock_nanosleep(0x5, 0x0, &(0x7f0000000140), &(0x7f0000000240)) clock_nanosleep(0x1, 0x1, &(0x7f0000000400), 0x0) 17:37:06 executing program 3: socketpair(0x2, 0x2, 0x10001, &(0x7f0000000000)) 17:37:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7000000}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:37:06 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @loopback}}, 0x1e) 17:37:06 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x10000) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000000)=0x2, 0x3, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x0) 17:37:06 executing program 3: pselect6(0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)={0x0, 0x989680}, 0x0) [ 570.241927] hfs: part requires an argument [ 570.258699] hfs: unable to parse mount options 17:37:06 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='tracefs\x00', 0x400, &(0x7f0000000140)='part') 17:37:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x23, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1809000000000000000000000500000009080400060000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0xffffff01, 0x1, &(0x7f0000000380)=""/1, 0x0, 0x1e, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x84, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x3, 0x4, 0x80, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x15, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000007900007a32a80b7d4fbb6197a3f4be9a000000000018000000007f0f400000006500000000009500"], &(0x7f0000000000)='GPL\x00', 0x4, 0xe6, &(0x7f0000000700)=""/230, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000d40)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x0, 0x4, 0x1, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r0, 0x1, 0xffffffffffffffff, r1, 0xffffffffffffffff]}, 0x80) (rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r2, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r3, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r4, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x4, &(0x7f0000000500)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x3f, 0x8c, &(0x7f0000000140)=""/140, 0x41000, 0x1d, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xb, 0x0, 0xe2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)=[r2, 0x1, 0xffffffffffffffff, r0, 0xffffffffffffffff]}, 0x80) (async, rerun: 64) write$P9_RREADLINK(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1000020000000047002e2f66696c6530"], 0x10) (async, rerun: 64) chdir(&(0x7f0000000040)='./file0\x00') r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000400)=ANY=[], 0x44) (async) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r6, 0x200002) [ 570.405939] attempt to access beyond end of device [ 570.432152] loop1: rw=1, want=16, limit=15 [ 570.448231] Buffer I/O error on dev loop1, logical block 15, lost async page write [ 570.469750] attempt to access beyond end of device [ 570.477361] hfs: part requires an argument [ 570.483935] hfs: unable to parse mount options [ 570.491964] loop1: rw=1, want=128, limit=15 [ 570.641877] attempt to access beyond end of device [ 570.647779] loop1: rw=1, want=16, limit=15 [ 570.652022] Buffer I/O error on dev loop1, logical block 15, lost async page write [ 570.661217] attempt to access beyond end of device [ 570.666870] loop1: rw=1, want=128, limit=15 17:37:07 executing program 4: futex(&(0x7f0000000000), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0xfffffffe, 0x1) futex(&(0x7f000000cffc)=0x800, 0xc, 0x5, 0x0, &(0x7f0000048000)=0x2, 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000000), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0xfffffffe, 0x1) (async) futex(&(0x7f000000cffc)=0x800, 0xc, 0x5, 0x0, &(0x7f0000048000)=0x2, 0x0) (async) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) (async) 17:37:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000000}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:37:07 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x10000) (async, rerun: 64) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (rerun: 64) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) (async, rerun: 32) futex(&(0x7f0000000000)=0x2, 0x3, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x0) (rerun: 32) 17:37:07 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) 17:37:07 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='tracefs\x00', 0x400, &(0x7f0000000140)='part') syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) (async) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) (async) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='tracefs\x00', 0x400, &(0x7f0000000140)='part') (async) 17:37:07 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x23, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1809000000000000000000000500000009080400060000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0xffffff01, 0x1, &(0x7f0000000380)=""/1, 0x0, 0x1e, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x84, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x3, 0x4, 0x80, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x15, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000007900007a32a80b7d4fbb6197a3f4be9a000000000018000000007f0f400000006500000000009500"], &(0x7f0000000000)='GPL\x00', 0x4, 0xe6, &(0x7f0000000700)=""/230, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000d40)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x0, 0x4, 0x1, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r0, 0x1, 0xffffffffffffffff, r1, 0xffffffffffffffff]}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r2, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r3, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup(r4, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x4, &(0x7f0000000500)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x3f, 0x8c, &(0x7f0000000140)=""/140, 0x41000, 0x1d, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xb, 0x0, 0xe2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)=[r2, 0x1, 0xffffffffffffffff, r0, 0xffffffffffffffff]}, 0x80) write$P9_RREADLINK(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1000020000000047002e2f66696c6530"], 0x10) chdir(&(0x7f0000000040)='./file0\x00') r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000400)=ANY=[], 0x44) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r6, 0x200002) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x23, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1809000000000000000000000500000009080400060000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0xffffff01, 0x1, &(0x7f0000000380)=""/1, 0x0, 0x1e, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x84, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x3, 0x4, 0x80, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x15, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000007900007a32a80b7d4fbb6197a3f4be9a000000000018000000007f0f400000006500000000009500"], &(0x7f0000000000)='GPL\x00', 0x4, 0xe6, &(0x7f0000000700)=""/230, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000d40)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x0, 0x4, 0x1, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r0, 0x1, 0xffffffffffffffff, r1, 0xffffffffffffffff]}, 0x80) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async) openat$cgroup(r2, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async) openat$cgroup(r3, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async) openat$cgroup(r4, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x4, &(0x7f0000000500)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x3f, 0x8c, &(0x7f0000000140)=""/140, 0x41000, 0x1d, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xb, 0x0, 0xe2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)=[r2, 0x1, 0xffffffffffffffff, r0, 0xffffffffffffffff]}, 0x80) (async) write$P9_RREADLINK(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1000020000000047002e2f66696c6530"], 0x10) (async) chdir(&(0x7f0000000040)='./file0\x00') (async) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) (async) write$P9_RREADLINK(r5, &(0x7f0000000400)=ANY=[], 0x44) (async) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) (async) ftruncate(r6, 0x200002) (async) 17:37:07 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) [ 571.176916] hfs: part requires an argument 17:37:07 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) creat(&(0x7f0000000080)='./file1\x00', 0x58) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x200002) 17:37:07 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x5452, &(0x7f0000000180)={'veth0_vlan\x00'}) close(r0) 17:37:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9000000}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) [ 571.213982] hfs: unable to parse mount options [ 571.228563] attempt to access beyond end of device [ 571.234698] loop1: rw=1, want=16, limit=15 [ 571.250865] Buffer I/O error on dev loop1, logical block 15, lost async page write 17:37:07 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000000)={0xe, {"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", 0x1000}}, 0x1006) 17:37:07 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x8000000000000001}}]}) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='tracefs\x00', 0x400, &(0x7f0000000140)='part') [ 571.270301] attempt to access beyond end of device [ 571.275747] loop1: rw=1, want=128, limit=15 [ 571.412605] attempt to access beyond end of device [ 571.412619] loop1: rw=1, want=16, limit=15 [ 571.412633] Buffer I/O error on dev loop1, logical block 15, lost async page write [ 571.412804] attempt to access beyond end of device [ 571.412813] loop1: rw=1, want=128, limit=15 [ 571.423034] hfs: part requires an argument [ 571.423041] hfs: unable to parse mount options 17:37:08 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000000)=0x2, 0x0, 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 17:37:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa000000}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:37:08 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) (async, rerun: 64) chdir(&(0x7f0000000040)='./file0\x00') (rerun: 64) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) creat(&(0x7f0000000080)='./file1\x00', 0x58) (async) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x200002) 17:37:08 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="706501743d30783830303030303030303030ffffff7f312c00"]) 17:37:08 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000000)={0xe, {"a2e3ad08ed6b52f99cfbf4c0879b45b4d04fe7ff7fc6e5539b3c68163b546a9b376e94370890e0878fdb1ac6e7049b71b4956c0a9a472a5b47f3988f7ef31952a981ffe8d178708c523c921b1b9b6e0a169b71d336cd3b78130daa61d8e809ea882f6e02b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd15de233df4a62179c6f309f56ff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635e00001200dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4da0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71bfc31870262f5e801119242ca5b6bfc821e7e20002451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713cf39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987b67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351602bf705f7ba2ddbd63621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0eee26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6000200000000000065d5e880576286522449df466c632b356f243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0004000000008000bea37de0d0d4aa202fef5952a5391fd5615d429a04a689b83c7068ae949ed06e288e810bac9c76600025907f8ea2e2f05dd3318271a1f5f8528f227e79c13800000000492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2360fe763c43470833ac96d3f3357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5307000000d92dad99dac44c3f0008047096a44060bebc2420aed92fa9b6c6224779415d97b9a6d6d5495c1180459043f41c2fc4f4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847854b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e67d1d7232f17696294378ce716d5cfc5e3e03cfffffffffffff001034ef655b253ca509383815b1b6fc6522d4e2d48604665fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb5168228ae4d24ad0465f7927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b5f668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d767d9a7a508ae54abcd73643de50e8c77d94a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11dbe200000000000000bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebd2ba3a504767b6b45a45957f24d758ed0d94b953611d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bc09ff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f71c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2154704b0e51bc664a137b26be7fc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5d3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cdcffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a39973132f02768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebfeffffff82bf75dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39060810938044ae185d2ba3e00a4e73676864d0270d81eaee5ee6cf1d0ab3785e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f362815687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f20da180a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10e02993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bf0129165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc0488506dbd17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57234ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b937fe43c06e91e35810d8fe98b0000ea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a6045951f9a93ab5d99c066f7aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d068edc746b0827cbf652f406c6b95f2722e58c050400ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36de00bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546894b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f16c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a20008758897fb411a94b3c2fc5d5f0db42c0463ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071ffdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad7084c29743bc613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654575576e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274018c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90195c7b2c7439a2d78ccfa79b5fc2bff6bbf1dfb0c70c418b6e06491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb8d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c34c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce85dbd02ee46c5cd5892587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec660080934b33ad61b4f65d77e86abd6859cddf4bbae1f0930462df090000008562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68c96ea2c4d4ca0398c2235980a9307b3d5bd3b010a3ad0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000020000000000000000000000000200", 0x1000}}, 0x1006) 17:37:08 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x10000) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000000)=0x2, 0x3, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x0) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x10000) (async) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f0000000000)=0x2, 0x3, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x0) (async) 17:37:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc000000}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) [ 572.088010] hfs: unable to parse mount options 17:37:08 executing program 0: futex(&(0x7f000000cffc), 0xd, 0x1, 0x0, &(0x7f0000048000), 0x0) clock_gettime(0x7, &(0x7f0000000000)) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000040)=0x1, 0x8, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x1, 0x2) 17:37:08 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="706501743d30783830303030303030303030ffffff7f312c00"]) 17:37:08 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async, rerun: 32) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) futex(&(0x7f0000000000)=0x2, 0x0, 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 17:37:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe000000}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:37:08 executing program 0: futex(&(0x7f000000cffc), 0xd, 0x1, 0x0, &(0x7f0000048000), 0x0) clock_gettime(0x7, &(0x7f0000000000)) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f0000000040)=0x1, 0x8, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x1, 0x2) 17:37:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10000000}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) [ 572.306048] hfs: unable to parse mount options 17:37:08 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000000)={0xe, {"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", 0x1000}}, 0x1006) 17:37:09 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) creat(&(0x7f0000000080)='./file1\x00', 0x58) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x200002) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) (async) chdir(&(0x7f0000000040)='./file0\x00') (async) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) (async) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) (async) creat(&(0x7f0000000080)='./file1\x00', 0x58) (async) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) (async) ftruncate(r1, 0x200002) (async) 17:37:09 executing program 0: futex(&(0x7f000000cffc), 0xd, 0x1, 0x0, &(0x7f0000048000), 0x0) clock_gettime(0x7, &(0x7f0000000000)) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f0000000040)=0x1, 0x8, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x1, 0x2) 17:37:09 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) (async) futex(&(0x7f0000000000)=0x2, 0x0, 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 17:37:09 executing program 5: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="706501743d30783830303030303030303030ffffff7f312c00"]) 17:37:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@dellink={0x40, 0x10, 0x3a0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5c070000}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 17:37:09 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000000)={0xe, {"a2e3ad08ed6b52f99cfbf4c0879b45b4d04fe7ff7fc6e5539b3c68163b546a9b376e94370890e0878fdb1ac6e7049b71b4956c0a9a472a5b47f3988f7ef31952a981ffe8d178708c523c921b1b9b6e0a169b71d336cd3b78130daa61d8e809ea882f6e02b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd15de233df4a62179c6f309f56ff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635e00001200dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4da0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71bfc31870262f5e801119242ca5b6bfc821e7e20002451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713cf39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987b67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351602bf705f7ba2ddbd63621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0eee26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6000200000000000065d5e880576286522449df466c632b356f243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0004000000008000bea37de0d0d4aa202fef5952a5391fd5615d429a04a689b83c7068ae949ed06e288e810bac9c76600025907f8ea2e2f05dd3318271a1f5f8528f227e79c13800000000492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2360fe763c43470833ac96d3f3357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5307000000d92dad99dac44c3f0008047096a44060bebc2420aed92fa9b6c6224779415d97b9a6d6d5495c1180459043f41c2fc4f4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847854b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e67d1d7232f17696294378ce716d5cfc5e3e03cfffffffffffff001034ef655b253ca509383815b1b6fc6522d4e2d48604665fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb5168228ae4d24ad0465f7927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b5f668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d767d9a7a508ae54abcd73643de50e8c77d94a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11dbe200000000000000bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebd2ba3a504767b6b45a45957f24d758ed0d94b953611d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bc09ff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f71c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2154704b0e51bc664a137b26be7fc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5d3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cdcffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a39973132f02768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebfeffffff82bf75dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39060810938044ae185d2ba3e00a4e73676864d0270d81eaee5ee6cf1d0ab3785e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f362815687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f20da180a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10e02993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bf0129165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc0488506dbd17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57234ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b937fe43c06e91e35810d8fe98b0000ea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a6045951f9a93ab5d99c066f7aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d068edc746b0827cbf652f406c6b95f2722e58c050400ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36de00bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546894b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f16c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a20008758897fb411a94b3c2fc5d5f0db42c0463ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071ffdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad7084c29743bc613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654575576e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274018c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90195c7b2c7439a2d78ccfa79b5fc2bff6bbf1dfb0c70c418b6e06491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb8d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c34c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce85dbd02ee46c5cd5892587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec660080934b33ad61b4f65d77e86abd6859cddf4bbae1f0930462df090000008562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68c96ea2c4d4ca0398c2235980a9307b3d5bd3b010a3ad0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000020000000000000000000000000200", 0x1000}}, 0x1006) 17:37:09 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x141042, 0x0) syz_mount_image$omfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x100000000, 0x0, &(0x7f0000000140), 0x1200401, &(0x7f0000000340)={[{'(('}, {}, {'vfAt\x00=\x9d\xf0\x80\xc7\xb4\xaf7s\xd8\xca\x04\xff~M<\x99.\xa5\x8b\xbc([GO?\'\xd6\x9e\x192sb\xe9\xc2\xe9\x92\xeb\xc4\x82}^\xae\xd9\x15h\tc\xff\xde\xbf\x14\xa8_\x86U\n\x1c~\x90\x9e\xd7;\x83\xe0\x7f@xK\x8e\b%\xba7\x91\x05~\xc0#\x9c\xcd\f\xa8\xf5\x02\x7f\xb5\x88\x92\x9a\"'}, {'[#(@]&\xcaR\xfe\xb4?iY\xcf%\x87\xd5%y\xb49k'}], [{@subj_user}]}) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x290) ftruncate(r1, 0x200002) 17:37:09 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000000)=0x2, 0x2, 0x1, &(0x7f0000000040), &(0x7f0000000080), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x7, 0x1, 0x0, &(0x7f0000048000)=0x2000, 0x2) [ 573.051663] attempt to access beyond end of device [ 573.063697] loop1: rw=1, want=128, limit=15 [ 573.065404] hfs: unable to parse mount options [ 573.088949] BUG: unable to handle kernel paging request at ffff888001000108 [ 573.088958] PGD de01067 P4D de01067 PUD de02067 PMD 80000000010001e1 [ 573.088982] Oops: 0003 [#1] PREEMPT SMP KASAN [ 573.088996] CPU: 1 PID: 11086 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 [ 573.089003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 573.089024] RIP: 0010:cfb_imageblit+0x99b/0x1040 [ 573.089036] Code: e0 09 44 24 04 e8 55 a2 c7 fd 45 39 e7 0f 87 44 ff ff ff e8 57 a1 c7 fd 48 8b 44 24 08 8b 4c 24 04 48 8d 78 04 48 89 7c 24 08 <89> 08 44 89 e6 44 89 ff e8 28 a2 c7 fd 45 39 e7 0f 85 04 ff ff ff [ 573.089042] RSP: 0018:ffff88809ddf75b8 EFLAGS: 00010246 [ 573.089051] RAX: ffff888001000108 RBX: 0000000000000000 RCX: 0000000000000000 [ 573.089059] RDX: 0000000000040000 RSI: ffffffff839ae419 RDI: ffff88800100010c [ 573.089066] RBP: 0000000000000018 R08: 00000000000005c9 R09: 000000000000001c [ 573.089073] R10: 0000000000000004 R11: 0000000000000000 R12: 000000000000001c [ 573.089081] R13: 0000000000000000 R14: ffff888238d0e054 R15: 000000000000001c [ 573.089091] FS: 00007fc88bb8b700(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000 [ 573.089098] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 573.089106] CR2: ffff888001000108 CR3: 000000009016b000 CR4: 00000000003406e0 [ 573.089117] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 573.089124] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 573.089127] Call Trace: [ 573.089149] vga16fb_imageblit+0x6b4/0x2260 [ 573.089167] ? __lock_acquire+0x6de/0x3ff0 [ 573.089182] ? fb_get_buffer_offset+0x17e/0x330 [ 573.089194] bit_putcs+0x6e2/0xd10 [ 573.089215] ? bit_cursor+0x1740/0x1740 [ 573.089228] ? raw_notifier_call_chain+0x30/0x30 [ 573.089239] ? notifier_call_chain+0x1d5/0x230 [ 573.089252] ? fb_get_color_depth+0x11a/0x240 [ 573.089267] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 573.089281] ? bit_cursor+0x1740/0x1740 [ 573.089291] fbcon_putcs+0x336/0x4f0 [ 573.089305] ? fb_flashcursor+0x430/0x430 [ 573.089320] do_con_write+0xbcd/0x1d90 [ 573.089342] ? do_con_trol+0x5970/0x5970 [ 573.089356] ? n_tty_write+0x1ea/0xff0 [ 573.089373] ? mark_held_locks+0xa6/0xf0 [ 573.089385] con_write+0x22/0xb0 [ 573.089399] n_tty_write+0xa03/0xff0 [ 573.089413] ? __ldsem_down_read_nested+0xd2/0x780 [ 573.089430] ? n_tty_open+0x160/0x160 [ 573.089443] ? do_wait_intr_irq+0x270/0x270 [ 573.089458] ? __might_fault+0x192/0x1d0 [ 573.089473] tty_write+0x496/0x810 [ 573.089487] ? n_tty_open+0x160/0x160 [ 573.089505] __vfs_write+0xf7/0x770 [ 573.089519] ? tty_compat_ioctl+0x270/0x270 [ 573.089534] ? common_file_perm+0x4e5/0x850 [ 573.089547] ? kernel_read+0x110/0x110 [ 573.089561] ? apparmor_getprocattr+0x11e0/0x11e0 [ 573.089580] ? security_file_permission+0x1c0/0x220 [ 573.089595] vfs_write+0x1f3/0x540 [ 573.089610] ksys_write+0x12b/0x2a0 [ 573.089624] ? __ia32_sys_read+0xb0/0xb0 [ 573.089641] ? trace_hardirqs_off_caller+0x6e/0x210 [ 573.089655] ? do_syscall_64+0x21/0x620 [ 573.089669] do_syscall_64+0xf9/0x620 [ 573.089686] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 573.089696] RIP: 0033:0x7fc88d216279 [ 573.089716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 573.089723] RSP: 002b:00007fc88bb8b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 573.089735] RAX: ffffffffffffffda RBX: 00007fc88d328f80 RCX: 00007fc88d216279 [ 573.089742] RDX: 0000000000001006 RSI: 0000000020000000 RDI: 0000000000000004 [ 573.089749] RBP: 00007fc88d270189 R08: 0000000000000000 R09: 0000000000000000 [ 573.089757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 573.089764] R13: 00007fff53c20caf R14: 00007fc88bb8b300 R15: 0000000000022000 [ 573.089775] Modules linked in: [ 573.089785] CR2: ffff888001000108 [ 573.089797] ---[ end trace cb466de538637cf3 ]--- [ 573.089812] RIP: 0010:cfb_imageblit+0x99b/0x1040 [ 573.089823] Code: e0 09 44 24 04 e8 55 a2 c7 fd 45 39 e7 0f 87 44 ff ff ff e8 57 a1 c7 fd 48 8b 44 24 08 8b 4c 24 04 48 8d 78 04 48 89 7c 24 08 <89> 08 44 89 e6 44 89 ff e8 28 a2 c7 fd 45 39 e7 0f 85 04 ff ff ff [ 573.089829] RSP: 0018:ffff88809ddf75b8 EFLAGS: 00010246 [ 573.089839] RAX: ffff888001000108 RBX: 0000000000000000 RCX: 0000000000000000 [ 573.089847] RDX: 0000000000040000 RSI: ffffffff839ae419 RDI: ffff88800100010c [ 573.089855] RBP: 0000000000000018 R08: 00000000000005c9 R09: 000000000000001c [ 573.089862] R10: 0000000000000004 R11: 0000000000000000 R12: 000000000000001c [ 573.089870] R13: 0000000000000000 R14: ffff888238d0e054 R15: 000000000000001c [ 573.089880] FS: 00007fc88bb8b700(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000 [ 573.089888] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 573.089896] CR2: ffff888001000108 CR3: 000000009016b000 CR4: 00000000003406e0 [ 573.089906] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 573.089914] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 573.089920] Kernel panic - not syncing: Fatal exception [ 573.090088] Kernel Offset: disabled [ 573.571290] Rebooting in 86400 seconds..