, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xffe4) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4800000010000d07cdd87d345d28000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="aaf20000d046b85cb01e92550250a490cff4300ad49be094008010bcf7bdbbd065501305f5a4d0dacee21d438be196e80742259eb3a1ac7e004b94f9b7ab4baa81cf128f5f61a199ab7c2badfb67c00ca013e15c05fb9a13f9557e4a9191f6c477a723c6fc1f10aca3e062d95598fbf27d12a60451f0e13ceed34dda1a105b18979383f0ef5237116d32d45ead01d0cb6ad41f7185ad664506ae44b9c79abba5de97372bd4a87357cd6c895780dcebe38410add118"], 0x48}}, 0x0) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000002c0)=0xc) ptrace$setopts(0x4200, r5, 0x4855, 0x8) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400fbc7000000000000000200000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="840000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="00080080000000000300000008000100753332005800020014000500000000000000000000000000400006003c0001000000000000000020898dde66057433b6ef3a41d22be225e0001b00000000000000000000000000000000100000000084e1a912c5998bcbf050000000000000000000000000000000798a3c067277da1a290b9613a33c575c36fad473382c8f5532ef3f0e1d2c450a7decbf3431a69f9b2ecb3291bed174245a962fe0484676958265e2988326a89db3139d91fe4aee6ae7e745abdfc21a9f61f2035979c1e3e9fea5b3958bc14fce6e66a36d1ab3194534ba4e973684b27793bff837d300000000"], 0x84}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 16:24:06 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 595.739589] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 595.758496] RSP: 002b:00007f2c476dfa68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 595.766212] RAX: ffffffffffffffda RBX: 00007f2c476e06d4 RCX: 000000000045c2e7 [ 595.773486] RDX: 0000000000000007 RSI: 0000000000004c00 RDI: 0000000000000008 [ 595.780755] RBP: 000000000076bf20 R08: 0000000000000000 R09: 000000000000000a [ 595.788033] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 595.795308] R13: 0000000000000bdc R14: 00000000004cdbbf R15: 000000000000000d 16:24:06 executing program 2: getpid() openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000040)) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100001c9, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000380)="9d0d96482cc8ddeb342bd1b27ae5c0d15b17f1a0648b25c25d20f549fee1450fae1829ed510a82dd452363d3d0b52eabf2633e64f15584b7e7a354fcc6ed0efa10716d9ddfb8278f6642dac2d40ffcffbf0be992a24957ed96f5f002602ba01368cf71d209512c23f058175cff9c718fcea71ed0294c1d84115f5735a60c11b49a8b09b6c44d3472061efc66e03117aec22cecc1ee629d8646e0972791c3", 0x9e, 0x10, &(0x7f0000000540)=@llc={0x1a, 0x10f, 0x1, 0x3f, 0x3f, 0xd8, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x80) open(&(0x7f0000000340)='./bus\x00', 0x412040, 0x204) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)) getpid() sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="48000000100039c10723d2971882040000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002800128008000100736974001c00028008000100", @ANYRES32=r3, @ANYBLOB="08000300e000000106000e0000000000"], 0x48}}, 0x0) [ 595.857189] hfs: creator requires a 4 character value [ 595.870140] hfs: unable to parse mount options 16:24:06 executing program 1 (fault-call:3 fault-nth:14): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:24:06 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="380100000001195200000000000000000a000000440001002c0001001400030016f8bcd3830100000000000000d6b8bf14000400fe8000000000000000000000000000bb0c000200050001000000000006000300000200003c0002000c00020005000100000000002c00010014000300fe88000000000000000000000000000114000400ff020000000000000000000000000001080007000000000010000d000c000300040002004e2300008c000e002c00010014000300fe80000000000000000000000000001414000400fe8000000000000000000000000000bb46000300000300002c0001001400030000000000000000000000ffffac14140b140004004a925aa0ddf34330053d13c7087769421400010008000100ac1414aa08000200ac1414340c00020005000100110000000600030000040000"], 0x138}}, 0x0) [ 595.915185] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:24:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_hsr\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) r1 = socket$kcm(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'veth0_to_hsr\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='Q\x00\x00!\x00\x00\x00\x00']}) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x1, 0x200, 0xb77, 0x7, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000040)={r3}) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x53a, 0x3ff, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000, 0x3, 0x3, 0x0, 0xfffffffffffffffc, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x6) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x2000, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000140), 0xfffffffffffffe88) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f00000000c0)=@req={0x30a, 0x0, 0x0, 0x7}, 0x10) read(r4, &(0x7f0000000400)=""/168, 0x41c) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x9, 0x3, 0x81) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="2b000004030000007e062719f24018f3ee60db1c3f91a34a0000000000000000020267908e59e863b3d0dab4000000006d6435738f6d73656c660052769f263a447d0600fd81acc7c73912fb678d3874d361e396f1835b50ae465651449a030dc2e13d0feb6e8d6800b85ec2d210822e80fe1a48fe0180000000000000cb9b09313cad6e47fb6829a4c11980f2ddd63aca8887dae2375c41d46051565e60cb43e40a52535cc2c27d07943a8552845b38d5e3ba145d34945b3bb4c68c2b66b2ff9505f19005a6ca538036bcd5e2e6a999b35a52c584ebb98985550ba106676b8cf6178c8049225e0e10f878932ebf7d299f731da5026887bc335af38968c1e2ffc62dad00373cbadec582b44198a18313b93403ba13b720f00d70782b891ce6454924720df5e257c46a2c1a87d4d49ba628b2d8b5214c11528960fb14f8f0a784057535701987640238"], 0x2b) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="3400000010000100fafffffffff17a97fa2aa20a", @ANYRES32=r8, @ANYBLOB="000000000000001400120000000c10d98d9ce76dedde9afc7783f7ed9c680c39495ad2e688310bf20ff8e0699888de37b097d6e6fd45b083a215fb14e98247dd4bdf5aafe3131caeaea910ceee9345a10b713b9eeb57035ebeeaeed154be7732263daea7da01ef719b7c2850354dad75d307999e6873a158f31a6bf6"], 0x34}}, 0x0) connect$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10) r9 = mq_open(&(0x7f00000004c0)='ip6tnl\x00', 0x0, 0x0, 0x0) mq_notify(r9, &(0x7f00000001c0)) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r10 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r11 = getpid() tkill(r11, 0x800000015) perf_event_open(0x0, r11, 0x80000000000000, r10, 0x8) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000240)) 16:24:06 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000700)="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", 0x199, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r2}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={'sha1-generic\x00'}}) socket(0x18, 0x4, 0xff) 16:24:06 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 596.131733] FAULT_INJECTION: forcing a failure. [ 596.131733] name failslab, interval 1, probability 0, space 0, times 0 [ 596.143288] CPU: 1 PID: 21003 Comm: syz-executor.1 Not tainted 4.19.107-syzkaller #0 [ 596.151182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 596.160538] Call Trace: [ 596.163144] dump_stack+0x188/0x20d [ 596.166793] should_fail.cold+0xa/0x1b [ 596.170702] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 596.175818] ? __lock_is_held+0xad/0x140 [ 596.179905] __should_failslab+0x115/0x180 [ 596.182003] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 596.184163] should_failslab+0x5/0xf [ 596.184177] kmem_cache_alloc+0x29f/0x710 [ 596.184192] ? kernfs_add_one+0x377/0x4d0 [ 596.184213] __kernfs_new_node+0xd2/0x680 [ 596.184231] ? kernfs_dop_revalidate+0x3b0/0x3b0 [ 596.184247] ? __mutex_unlock_slowpath+0xea/0x670 [ 596.184263] ? wait_for_completion+0x3c0/0x3c0 [ 596.184279] ? kernfs_next_descendant_post+0x27f/0x2c0 [ 596.184300] kernfs_new_node+0x92/0x120 [ 596.184318] __kernfs_create_file+0x51/0x33f [ 596.184338] sysfs_add_file_mode_ns+0x224/0x520 [ 596.184362] internal_create_group+0x359/0xb90 [ 596.184383] ? lock_acquire+0x170/0x400 [ 596.184405] ? remove_files.isra.0+0x190/0x190 [ 596.254629] ? lock_downgrade+0x740/0x740 [ 596.258796] lo_ioctl+0xf89/0x20e0 [ 596.262337] ? lo_rw_aio+0x12f0/0x12f0 [ 596.266216] blkdev_ioctl+0xbf7/0x1a1c [ 596.270107] ? blkpg_ioctl+0x9e0/0x9e0 [ 596.274009] ? mark_held_locks+0xf0/0xf0 [ 596.278076] ? find_held_lock+0x2d/0x110 [ 596.282137] ? debug_check_no_obj_freed+0x20a/0x42e [ 596.287159] block_ioctl+0xe9/0x130 [ 596.290775] ? blkdev_fallocate+0x3f0/0x3f0 [ 596.295095] do_vfs_ioctl+0xcda/0x12e0 [ 596.298993] ? selinux_file_ioctl+0x46c/0x5d0 [ 596.303483] ? selinux_file_ioctl+0x125/0x5d0 [ 596.307964] ? check_preemption_disabled+0x41/0x280 [ 596.312964] ? ioctl_preallocate+0x200/0x200 [ 596.317372] ? selinux_file_mprotect+0x600/0x600 [ 596.322135] ? __fget+0x340/0x510 [ 596.325603] ? iterate_fd+0x350/0x350 [ 596.329406] ? putname+0xe1/0x120 [ 596.332858] ? security_file_ioctl+0x6c/0xb0 [ 596.337275] ksys_ioctl+0x9b/0xc0 [ 596.340726] __x64_sys_ioctl+0x6f/0xb0 [ 596.344610] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 596.349180] do_syscall_64+0xf9/0x620 [ 596.352978] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 596.358158] RIP: 0033:0x45c2e7 [ 596.361348] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 596.380250] RSP: 002b:00007f2c476dfa68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 596.388002] RAX: ffffffffffffffda RBX: 00007f2c476e06d4 RCX: 000000000045c2e7 [ 596.395266] RDX: 0000000000000007 RSI: 0000000000004c00 RDI: 0000000000000008 [ 596.402531] RBP: 000000000076bf20 R08: 0000000000000000 R09: 000000000000000a [ 596.409791] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 596.417064] R13: 0000000000000bdc R14: 00000000004cdbbf R15: 000000000000000e [ 596.435553] hfs: creator requires a 4 character value [ 596.473321] hfs: unable to parse mount options 16:24:08 executing program 2: ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x1b, &(0x7f00000001c0)=ANY=[@ANYBLOB="85000000190000005d000000000000009500000000000000cff1194404d1aaa752aa6ddae1aef56c3b3314deed656bc35c9e9e02b6038a97b9a6c0324c23b7c0253686c870d439f0ff985def2d02e5867765f502697ab39bbb46942a7fd0359191d6f1fdcc160f603d73506189fa04c5d4014b68d7f8a8fe1b6ecdc4b79b16322d666394e79b32c6e8309a1ec155c5e24e01df436e3580a39d3feccbb5a17750e7485f7f464f684d3e7bab1371a53c53a4af2743c2b1ecf57e5b763427a5bf77cd6f74a53944d25a2b109a43fbed00"/217], &(0x7f0000000000)='GPL\x00', 0x2, 0xcc, &(0x7f00000002c0)=""/204, 0x41000, 0x0, [], r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x10, 0xffffffffffffffff}, 0x78) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_LINK(r2, 0x40044160, &(0x7f0000000040)=0x2) 16:24:08 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:24:08 executing program 1 (fault-call:3 fault-nth:15): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:24:08 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x201}], {0x14, 0x11, 0x2}}, 0x5c}}, 0x0) 16:24:08 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000004800)=[{{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000a80)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000080)=0x7, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) sendmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000001180), 0x0, &(0x7f00000000c0)=[{0x108, 0x105, 0x1, "2556d5a070257bd3584934f483f841a5b512cc2a0f0f49b50f8598cb7bb11e325d197ca0f0ff7d394807664db2dede63f9ba77f45af0ca9bf34c8fa97568b7031be14bd07250fee19d3cbf454902819bbfaf629fc1ecbf3a3549b4b88167ca425568f8fa4810fe123fd5bdf04f3a06c594d556ed49298397dfd7c023fe1c8efd32e02ff2fa2f0d27907e15314ef1ccfce0f3f889bc62f41e2ddff8fbf559d31c659490659dafb7c27103754bfb4abe7756fe50a767b5cc75e4911f2122ac89ecac15ebae12399a9946cad82a8e7b3e3b1c0054931bd434d789689878bb2c97304a42f4f04b99e5aa5619e68915b3357eb8cdc629"}, {0xf8, 0x84, 0x400, "93ec26c27222649e8e5ff1c149d0be135b8c8b074c9d03e4effa7192bd8d53ab902686769b31ab7d5ab9b3977bcb0bcd9ba0ab1e91b07efb3c2e305fef1e9459df256a7fd92dd7ca23a728389408170adfa15eccc180af6469d1f2cc5907dce0e3c5ff34cdd89309eb559363a283148c2ade9c71741456485927fb331f5e5db87c5eec37407f059af01d0e311050885388b8f6ca6e58a1c4b4c0a92a0d8133cfe01ba530ddd8f3ef93d7cc87a87e5a9dfbb0968d7fa85e2b6e1cfe2c8d53596dd297236249192ecdca5c73660e40a54d2ad42d2372b140c7320316f4d696cfc34d"}, {0x108, 0x10c, 0x1000, "d674bb38b0f3317b93bad209f7afcad3f580f3e87d996b11ff8b678bfed8bfcbd0655e64b9290dd9a1261d15b1e6aa8e6cb2bc67522ddef0155ee2cab8bf37ae44be1dc24fef2b77ec05417b331af6d8f047163b59016d7d793629472c9529dd3208734df48de6b9719b81720cafdaab88fc3d61b441cef23d5307ad9dc575c49bad91f3aff00f43178ea28f83210f15c1b671a5a67e8c70f14d9e4fc074ad11fdc25772f45346280b1af9e67fc68399c754a435d488681b6c3a3f007306f22d8f1df27f43bb661d9d13283947904dee72c0af06f4abde9d7dbb9d002b0d4d669318ed4328846c8cccb10ea48a7f72829d3e"}, {0x78, 0x103, 0xd18, "e6a292b0b646b51939ef3d5906ee401154c5f3d950c81691e133552bd57f42ab15916dd6f239250120de7570f9ab1ffa6b55bc11734f673c47743a6ce8eddc7426cca8cebdbbe648b224ede74b62317a644575085fb6403bc45d965b5b62bc2fa90d6e00e3"}], 0x380}}], 0x1, 0x0) [ 598.626659] FAULT_INJECTION: forcing a failure. [ 598.626659] name failslab, interval 1, probability 0, space 0, times 0 [ 598.658225] CPU: 1 PID: 21025 Comm: syz-executor.1 Not tainted 4.19.107-syzkaller #0 [ 598.666164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 16:24:09 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='vegas\x00', 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000080)={'mangle\x00'}, &(0x7f0000000100)=0x54) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040)={@rand_addr=0x60000, @local, 0x1, 0x2, [@remote, @rand_addr=0x4]}, 0x18) close(r0) getsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) 16:24:09 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 598.675526] Call Trace: [ 598.678132] dump_stack+0x188/0x20d [ 598.681785] should_fail.cold+0xa/0x1b [ 598.685689] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 598.690796] ? __lock_is_held+0xad/0x140 [ 598.694860] __should_failslab+0x115/0x180 [ 598.699121] should_failslab+0x5/0xf [ 598.702820] kmem_cache_alloc+0x29f/0x710 [ 598.706957] ? kernfs_add_one+0x377/0x4d0 [ 598.711095] __kernfs_new_node+0xd2/0x680 [ 598.715234] ? kernfs_dop_revalidate+0x3b0/0x3b0 [ 598.719978] ? __mutex_unlock_slowpath+0xea/0x670 [ 598.724814] ? wait_for_completion+0x3c0/0x3c0 [ 598.729428] ? kernfs_next_descendant_post+0x27f/0x2c0 [ 598.734710] kernfs_new_node+0x92/0x120 [ 598.738718] __kernfs_create_file+0x51/0x33f [ 598.743115] sysfs_add_file_mode_ns+0x224/0x520 [ 598.747774] internal_create_group+0x359/0xb90 [ 598.752347] ? lock_acquire+0x170/0x400 [ 598.756309] ? remove_files.isra.0+0x190/0x190 [ 598.760879] ? lock_downgrade+0x740/0x740 [ 598.765056] lo_ioctl+0xf89/0x20e0 [ 598.768644] ? lo_rw_aio+0x12f0/0x12f0 [ 598.772529] blkdev_ioctl+0xbf7/0x1a1c [ 598.776419] ? blkpg_ioctl+0x9e0/0x9e0 [ 598.780334] ? mark_held_locks+0xf0/0xf0 [ 598.784440] ? find_held_lock+0x2d/0x110 [ 598.788493] ? debug_check_no_obj_freed+0x20a/0x42e [ 598.793512] block_ioctl+0xe9/0x130 [ 598.797124] ? blkdev_fallocate+0x3f0/0x3f0 [ 598.801475] do_vfs_ioctl+0xcda/0x12e0 [ 598.805364] ? selinux_file_ioctl+0x46c/0x5d0 [ 598.809844] ? selinux_file_ioctl+0x125/0x5d0 [ 598.814357] ? check_preemption_disabled+0x41/0x280 [ 598.819360] ? ioctl_preallocate+0x200/0x200 [ 598.823754] ? selinux_file_mprotect+0x600/0x600 [ 598.828494] ? __fget+0x340/0x510 [ 598.831953] ? iterate_fd+0x350/0x350 [ 598.835754] ? putname+0xe1/0x120 [ 598.839225] ? security_file_ioctl+0x6c/0xb0 [ 598.843650] ksys_ioctl+0x9b/0xc0 [ 598.847104] __x64_sys_ioctl+0x6f/0xb0 [ 598.851014] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 598.855593] do_syscall_64+0xf9/0x620 [ 598.859419] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 598.864607] RIP: 0033:0x45c2e7 [ 598.867783] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 598.886669] RSP: 002b:00007f2c476dfa68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 598.894364] RAX: ffffffffffffffda RBX: 00007f2c476e06d4 RCX: 000000000045c2e7 [ 598.901630] RDX: 0000000000000007 RSI: 0000000000004c00 RDI: 0000000000000008 [ 598.908883] RBP: 000000000076bf20 R08: 0000000000000000 R09: 000000000000000a [ 598.916134] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 16:24:09 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10000000000f, 0x0, 0x0) capget(&(0x7f0000000000), 0x0) getpgid(0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$kcm(0x11, 0xa, 0x300) syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000380)) waitid(0x2, 0x0, &(0x7f0000000900), 0x4, &(0x7f0000000280)) memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x9a0efa2b65aacb27) syz_init_net_socket$llc(0x1a, 0x0, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$USBDEVFS_RESETEP(r2, 0x80045503, &(0x7f0000000240)={0x8, 0x1}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCGIFBRDADDR(r4, 0x8919, &(0x7f0000000040)={'dummy0\x00', {0x2, 0x4e20, @loopback}}) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x2, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r3, r5, 0x0, 0x102000004) [ 598.923389] R13: 0000000000000bdc R14: 00000000004cdbbf R15: 000000000000000f 16:24:09 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x1f9003, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) dup(0xffffffffffffffff) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0xffffff0f00000000, 0x40, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x378) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000014c0)={'batadv_slave_0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BLKIOOPT(r6, 0x1279, &(0x7f0000000080)) r7 = syz_open_dev$vcsa(&(0x7f0000000440)='/dev/vcsa#\x00', 0x42, 0x100) ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000480)={0x2, 0x8}) setsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f0000000380)={0x2, "3d53ca"}, 0x6) creat(&(0x7f0000000000)='./bus\x00', 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000003c0), &(0x7f0000000400)=0x4) [ 598.972810] hfs: creator requires a 4 character value [ 598.983555] hfs: unable to parse mount options [ 599.068478] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:24:09 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x3, 0x0, 0x0, 0x3b2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800e00000000300000000000000000903000000008e1504aef0279d6efc4c76785c5a0090a732b637b75b2a0093d0810c77eaf7e61623518d9968a7b9c84b5f1263b954eecf683312daf4b231f7b846a095804970175504723d88e40b897d40fd587c4fb415feb67089fb0e5363b167a5b1028d85096710ad473536bdd5099d14514e6a92281d41d2bb395371c2b502dc884cbc3c4ffdd0d4f15b6e3f1ee32b53fc37e9c6c889f47e01eac8a61f724bedd18ea26523617c494e436baef6c413805557513cb29a88aa5817fc8fb7e57dbd426fd2a092902cc1d9bfd335c01a627241271938a564305696e5546633259dda3cbe91eac2aa45be44c2bfff6c97ec8f1db5fe71e040953d5c848bc7cc6b205ab9d0aa8d2f14"], 0x0, 0x80}, 0x20) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETMODE(r4, 0x5601, &(0x7f0000000100)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 16:24:09 executing program 1 (fault-call:3 fault-nth:16): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:24:09 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@assoc_value, &(0x7f0000000180)=0x8) 16:24:09 executing program 2: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000000308010100000000000000000000000005000300060000000c00048008000a4000000000060002400002"], 0x1}, 0x1, 0x0, 0x0, 0x4000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 16:24:09 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="380100000001190503000000000000000a000000440001002c0001001400030016f8bcd3830100000000000000d6b8bf14000400fe8000000000000000000000000000bb0c000200050001000000000006000300000200003c0002000c00020005000100000000002c00010014000300fe88000000000000000000000000000114000400ff020000000000000000000000000001080007000000000010000d000c000300040002004e2300008c000e002c00010014000300fe80000000000000000000000000001414000400fe8000000000000000000000000000bb46000300000300002c0001001400030000000000000000000000ffffac14140b140004004a925aa0ddf34330053d13c7087769421400010008000100ac1414aa08000200ac1414340c00020005000100110000000600030000040000"], 0x138}}, 0x0) 16:24:09 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 599.303362] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 599.333594] FAULT_INJECTION: forcing a failure. [ 599.333594] name failslab, interval 1, probability 0, space 0, times 0 [ 599.363040] CPU: 1 PID: 21055 Comm: syz-executor.1 Not tainted 4.19.107-syzkaller #0 [ 599.370985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 599.380356] Call Trace: [ 599.382973] dump_stack+0x188/0x20d [ 599.386630] should_fail.cold+0xa/0x1b [ 599.388292] sctp: [Deprecated]: syz-executor.0 (pid 21063) Use of struct sctp_assoc_value in delayed_ack socket option. [ 599.388292] Use struct sctp_sack_info instead [ 599.390530] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 599.390546] ? __lock_is_held+0xad/0x140 [ 599.390572] __should_failslab+0x115/0x180 [ 599.390587] should_failslab+0x5/0xf [ 599.390599] kmem_cache_alloc+0x29f/0x710 [ 599.390615] ? kernfs_add_one+0x377/0x4d0 [ 599.390637] __kernfs_new_node+0xd2/0x680 [ 599.435383] ? kernfs_dop_revalidate+0x3b0/0x3b0 [ 599.440161] ? __mutex_unlock_slowpath+0xea/0x670 [ 599.445019] ? wait_for_completion+0x3c0/0x3c0 [ 599.449614] ? kernfs_next_descendant_post+0x27f/0x2c0 [ 599.454913] kernfs_new_node+0x92/0x120 [ 599.458905] __kernfs_create_file+0x51/0x33f [ 599.463332] sysfs_add_file_mode_ns+0x224/0x520 [ 599.468018] internal_create_group+0x359/0xb90 [ 599.472612] ? lock_acquire+0x170/0x400 [ 599.476594] ? remove_files.isra.0+0x190/0x190 [ 599.481179] ? lock_downgrade+0x740/0x740 [ 599.485344] lo_ioctl+0xf89/0x20e0 [ 599.488894] ? lo_rw_aio+0x12f0/0x12f0 [ 599.492788] blkdev_ioctl+0xbf7/0x1a1c [ 599.496684] ? blkpg_ioctl+0x9e0/0x9e0 [ 599.500579] ? mark_held_locks+0xf0/0xf0 [ 599.504657] ? find_held_lock+0x2d/0x110 [ 599.508734] ? debug_check_no_obj_freed+0x20a/0x42e [ 599.513768] block_ioctl+0xe9/0x130 [ 599.517437] ? blkdev_fallocate+0x3f0/0x3f0 [ 599.521765] do_vfs_ioctl+0xcda/0x12e0 [ 599.525660] ? selinux_file_ioctl+0x46c/0x5d0 [ 599.530179] ? selinux_file_ioctl+0x125/0x5d0 [ 599.534681] ? check_preemption_disabled+0x41/0x280 [ 599.539707] ? ioctl_preallocate+0x200/0x200 [ 599.544127] ? selinux_file_mprotect+0x600/0x600 [ 599.548898] ? __fget+0x340/0x510 [ 599.552361] ? iterate_fd+0x350/0x350 [ 599.556168] ? putname+0xe1/0x120 [ 599.559638] ? security_file_ioctl+0x6c/0xb0 [ 599.564068] ksys_ioctl+0x9b/0xc0 [ 599.567534] __x64_sys_ioctl+0x6f/0xb0 [ 599.571426] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 599.576014] do_syscall_64+0xf9/0x620 [ 599.579825] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 599.585015] RIP: 0033:0x45c2e7 [ 599.588209] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 16:24:10 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r0, 0x4004ae8b, &(0x7f0000001000)={0x19, "ab3443586b34f1767f1b92a5ac080f2676071f2b991a6706ec"}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000008406633603c3e508059f30e7b973ce37480000000000000500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(0xffffffffffffffff) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x4c81, 0xfffffffffffffffe) ioctl$KVM_GET_DEBUGREGS(r3, 0x8080aea1, &(0x7f0000001140)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r2}) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000001040)="42f660baf08e877e87467d96e8492f3268694de501cd7e9cd1c707c3d28838317d90b4b0c81e266f33c808d5a38a6ee057df2d7fb000354b2eeb2459696d97a0ef5e4d7f44caa9bd16e68b6c39163cde325a34e1c7406431c2ed4236e70c530de7a9af89ea71f656035757034928b2f365652fb55cc385ec2504725ac78a5b59c53d3430a28e604e7f2df613ec1708504f2c8b86b179335bf2b3f8db1047abf0fe6cf944f379163d671aa6e43548484455ff1086a2340db826ab882e1aef6435719b9521b10dda8101de865b943b1f387b867581c02343bfabbdc6b7e0947d188a0944148254f23073", 0xe9, 0x0) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000180)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000001c0)={0x0, 0x0, 0xc00, &(0x7f0000000400)="fa13031b36b06be279451425c8d5ea6b4946a73613bddaf45e4c530717f0bfe064e06f62017f4d592066ecf61ff460cda032b5ae2283c2b79c33c77ecd3dd4780412bf31c49bf647123a7f5dfe2a6e17d91e2ea44a2257f407b57d06c89ddd9e649cfa3c3929bd59dbb7c723a5889bdac4efbc0de090345c213eea8c7b23b8df7223b237c319c2444810c2be03e64d58d909223e674dd7856ba0642775eaf0d2df91a09b9abc98deaeb5c33c3fddda13c44c67cc70f356538103ccaccc06f36a25b7a08c150e8036a0353ba69437a9e609ef3128262fef7a6121ce3a09e9403d7bda3651019fab24646cd69ac1a47783d8b95db03fd5a4e3c3afff2c54f19296a84d1c377b4f9d2044b3f63fb902d7fb1c7f24003b3371950d7f5732017cef2faa6066bd891b77aa6f15e06618ebfe628092192927b5fa7c2b5c7df7d2983ea25b008781f1a64fad3285b803bc9c71ffed139a1bb72807152c8352f57a091fdb0da92c2be69fd4ab7ceae024539acdf07a4769e32e9fcce4d5d4f854cc50447f72e3a17453e0d419c5060705a8cbdd2999eed94d92afaa2b504198b2100ec7536e6c8cb9697a114ffa75fb444f53ceaf5d9dff34da14655fb681d006f2b1838c4fce61cf93650f2ebf674d6cf9ad6e26ae6bd1135b21b7c74f6be9be3420c087705bc9df04401c8ed7f4e457a64df442b9810c85aa52877b010051b67def9930c426fc575128976d30b519f3b8fec1990fb4eb29d7ddd688c2e67740f9796736137ce173efa1ed7cc13b92f1ebd7241f1821266cadc585af55b07e9edfa694552ff8c4d9063a995fff0d828b5ff1a8e787d4a68e519a13b6d809cc6a588a8f6b12f12fd1cc230b815b40a81aca65756821b5df40e8c09432f7cff2f815137b32d1e9a96b637bf8ec4ac2ca18482c1de4b22791c3f81597714c8d85d4437c43e13c581f9de889f6bd66d09e97dd7f26a0729c11d6dbc16e1905787cc3e22df1324c57da395e986d40167ea5758f8d8b487b0bdc4260c8c1316da9f4c990b18ce14961a2942d1d6600d81129eda581799a91929a312ddbc6872f3b1b5941961fd4d4591ca64242303531c53c909358035e7d2bf36d4ba87c1871fc62e5f9ac68e751b0410137581477bdfe8c0b78a25f712544a408a2df1c4f9d8f769bda2b15a0fa4e73270c58eaea1c2c4b4042562a6d0f8ca904aeaa1e5d0fff3ad67df1885135a30b22ddeeba586acf48856d3085aceb37f16b053db81801b273aa97ba9520c88872695b606b0348d8360be31375fbc4eb13d1205df82448c7b99db086cf79e539a9836a47c3c9f605904170b47c31f5d773d7c5f09f2341b8c519a1fc5b344a9ec7f776af6ceb04e69ccf5eaf1d6c7ab63b08d82a7c43140fd271c5d30dfd2b1d802f2235e1873774af9c946ddb26d022ae3444d749b64171c43afc6cd5e7061d4b03ab3f2bc0fd2a7f6bad0f467d71d48df7baa7a1e7b701cb2f4216e5532cdffb87d25ad73b80bf695b9368d2175223c49d23ef2064e2a7bdc02c382ad0ccef24a948bf6ef34381e61de9cf6ece2106d41d7a93d4ebea6de2c930dc87ee940be4fa2c45184e1328f2f2d43f8b980621cce3ffb4777d3ee10f41fed4679929ccabe10cf2b9795393a35f82bcd9ad42eef5202fe110c1b4c67615b17869a5f489c4190bb9bdf832ca53188f596e564d8bc8fb1e7efe9cd2c36fe9cb00208f2225a840fad171fa63ead3907e17647cea2adeb0b80ae264baf6deb1e2d9e2ef5524219e84d116c605df271b9de2b8bf25bce17845b9a62e14bc49f219d84f187ef0c096bd3a94af86e009a1b9230c478318f427c51a59313979ee61989f4293d54c0dec8f28e8b8665d765abccd5e615f08215b4f948b44e47488f90d20491b78f4b8f1ba8af0f8760b956242a5d2bb62672052840e479d2f5fdb28b409a442273dad165fabc905b127fe7521333a041987792fa2a85e894a750eeb9f3d26dd484823043b142b357ccaed87e35e458ddecdd44ec129415609ca2e7e8b975cd4fcb515017819cb2ced0007b86cdbe578319d8d73c42a17ccf76ca0d10a18aba4fa59ada6ead9d6686b1a48dc1951ad0bc61490ad7db3e973acd7946b4a14372c055c933a11240e2a3cf102c2c558d5a6da69f542fc7df55f8ebf7dd7a26d5c9df9cf404bc009839d33a4febaa7950944eff2c786865c5ed5674cf9aa9d145756e64b0f6ad731055d17d6494c11b60bbc491154e5160b6bfcc739ce3c2dc9cb897edf384391311bc3b994111d67e946193e2729fcc90340326a3b4691cf178cd9d9ae6bcc91afcf44c8aeca8837fa861517b53468bd019381077c56408c078666e3150f4b8979e3de49b3d1a154715478000ce547f45b780edd3a8b19c00e2e127c02771d0d2f1c84d8f0e7174df9667ddad0d290954d05b699d0c93794f4ca79841597b9b8dc782af5e95f751095b0b2c5c73cad5b615715497b5b47b181ead6d872f59da0372d3d065036162724c1791bfa7dc21c21e5c3f1b306b33a2efdc9309f8301fbba75272ae2d80d3111c4a928c2cb5ec9bea65561a38ecabac7242b6a9732c257f857c1bf3add78c202914280c5fcc875b996c054f6882c26f3a561e06aafd9b72dd271dcee546c1fe689f14660587efc385f2f8002862af5b601c509febde6375eb3c71273dcffb4db5f10f1cdd530e7eae009beb61063277a8d5c6124a1c390a5b9f9de7ed7130eea68e56f04715ee015bec853d2addfc29d8dcd6db8fe9fd1e454ee1a729dcdbf92c990799d55fb2c55cc4be3b3189b20f23c8ebb87e6313b5f53b6de9846eb6acff9e301fd443a621666c39f03d5feb23772f8fae8cb77c18697d3e036023fa5f60ec8a4adc0b6c6e18e370734cec1ae84f8be2e31fcf5dce74dd3c3f96b738f1fa72f66bd12472b13876c94cbb4e225dcb5be02d668b537a0271170a980a81b68d3eb3ffa45b076406b039854a6278cf92f969f14ff0dec83e4d3b156b84d85fb9a80cad6acac56ac8c61305ac6f7d97b8383c187ab19877fd593d47ebd2dbffffbf0b8d185444395341a130b1e7a140c32455c0137ac62ec48f8df0803221a3336d76db609b8cffba28032acba05ddda74e7c5a748028ffbd9785c64ef14c809b6cbf496b4c7a31116be2960036ce54c6ba23fe56ae6abfc9a95faae3c5095a7085344eff0a332cee15a3335d9d2f2f135dcf91049ceb446f5b07771a5296f07b07305df2fc0d33a95740d6c50c24dd3088acb1bcbcee6e3666727ee4c1cbb1401d38e00c19143e29ee7a38c30006759992b44fe77ca24a43d7c56f341c478d58e7b853e84c3168eb6708cccf13129063fab5d3598e5e8a47e7254cf6bcd4c4e734a911cd61b2ed146d686b80af27c83c5ca1f4dd7a866ccd4b7440867f7089d24ac458ce575d72dd53736634977f5e42a6588ea93dc3d9a57f455f183e07da64eb20a59c9ad66f9ad9cee67352916c09417411d90c1e5a26c7f6f8719d9eb66cbbb471d25443aef2b597ae38fe5cac9cec0cab27ceb2557d928320660b847445d5d70141551d18c05584b0b1263ca23046978e5b38049ebc7c0d90a48e7bd5ad6a5e16a6f29e4720f4982245067c7fdd41d2b037f01a42829afe6ab3a0f55176481282017f723b22f4a1a3f896d0ef8a2bc5b7532fcf196997c80e9779acf603d9a288938dae18b67dc7f2cf2f3fcebce886451b6464aae6296a78f0c962738cfe3591dec5fc776db85a722901952440ca17b8d12b3037ca40acff22c9a1223b22b88329402bbee396883f8eb8cd3be5b2783ae411d16ff3f46e0b70b65e0c8cf6a60cd9b0a1da99eef48fb1810d9ac3dedc60a66b5304acd5ff3a7b4ba24b0405eeeeecae66d72049dd9357ef2556eea8d42f336adc4108200d838114ee4c6ba869150f6c0805971ed34508174c57a8ab95ea7c1783e1984e4614e2d2c9701fa7220819e827cec6cfa6d930f25c131419c4d296cff25bdea6cae713918707ec9c8b3e0cb2313bae6530fea171f5bc1baa4679207c2f4bd472af9568f1f14164ce7ac4b1964cbd3f1ccb259bb698c053d36ab7257ec20d73bdf4e245561fbac5ed36793118a80df227002f8525a6a30c39bff24ecd2432ddd0273f33f4c2d53189ba23d1f5596a2644896fff294f4ab4ef72afffdb9a7f86a8f5cc4bd63616139e166077158accd70cc12d1e9356b1f742c9ff9b383ae9b1bf2beb3c9645e4df6ce0a9d25958677215317fe9a313ee97b60acc59731b3422a48a6402c8790791b2f1928690edb9a47b86321af06330e2b4271252d345bd74dc7deb830fe1a142d951327552772ebb6734c967844ec2b193c"}) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000100)={0x0, 0x0}) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) process_vm_readv(r5, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x7ffff002}], 0x2, 0x0) [ 599.607110] RSP: 002b:00007f2c476dfa68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 599.614818] RAX: ffffffffffffffda RBX: 00007f2c476e06d4 RCX: 000000000045c2e7 [ 599.622088] RDX: 0000000000000007 RSI: 0000000000004c00 RDI: 0000000000000008 [ 599.629378] RBP: 000000000076bf20 R08: 0000000000000000 R09: 000000000000000a [ 599.636655] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 599.643924] R13: 0000000000000bdc R14: 00000000004cdbbf R15: 0000000000000010 [ 599.716206] hfs: creator requires a 4 character value [ 599.751979] hfs: unable to parse mount options 16:24:10 executing program 1 (fault-call:3 fault-nth:17): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) [ 599.809648] ptrace attach of "/root/syz-executor.0"[8432] was attempted by "/root/syz-executor.0"[21076] [ 599.847636] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:24:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[@ANYRESHEX], 0xfc85) readv(r1, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/4096, 0x20010485}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r2) r3 = socket$inet6(0xa, 0x6, 0x0) listen(r3, 0x0) io_setup(0x6, &(0x7f0000000080)=0x0) io_submit(r4, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x12f}]) readv(0xffffffffffffffff, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) recvmmsg(0xffffffffffffffff, &(0x7f0000007ec0)=[{{&(0x7f0000000200)=@caif=@util, 0x80, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/49, 0x31}, {&(0x7f0000000280)=""/200, 0xc8}, {&(0x7f0000000140)=""/18, 0x12}, {&(0x7f0000000380)=""/28, 0x1c}, {&(0x7f00000003c0)=""/115, 0x73}], 0x5, &(0x7f00000004c0)=""/3, 0x3}, 0xef}, {{&(0x7f0000000500)=@rc={0x1f, @none}, 0x80, &(0x7f0000003900)=[{&(0x7f0000000580)=""/71, 0x47}, {&(0x7f0000000600)=""/234, 0xea}, {&(0x7f0000000700)=""/62, 0x3e}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000002800)=""/68, 0x44}, {&(0x7f0000002880)=""/4096, 0x1000}, {&(0x7f0000003880)=""/21, 0x15}, {&(0x7f00000038c0)=""/13, 0xd}], 0x8, &(0x7f0000003980)=""/243, 0xf3}, 0x200}, {{0x0, 0x0, &(0x7f0000003dc0)=[{&(0x7f0000003a80)=""/55, 0x37}, {&(0x7f0000003ac0)=""/225, 0xe1}, {&(0x7f0000003bc0)=""/222, 0xde}, {&(0x7f0000003cc0)=""/239, 0xef}], 0x4}, 0x7f}, {{&(0x7f0000003e00)=@ll, 0x80, &(0x7f00000040c0)=[{&(0x7f0000003e80)=""/20, 0x14}, {&(0x7f0000003ec0)}, {&(0x7f0000003f00)=""/242, 0xf2}, {&(0x7f0000004000)=""/190, 0xbe}], 0x4}, 0xfa54}, {{&(0x7f0000004100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000005340)=[{&(0x7f0000004180)=""/4096, 0x1000}, {&(0x7f0000005180)=""/27, 0x1b}, {&(0x7f00000051c0)=""/200, 0xc8}, {&(0x7f00000052c0)=""/75, 0x4b}], 0x4}, 0x7}, {{&(0x7f0000005380)=@nfc, 0x80, &(0x7f0000006840)=[{&(0x7f0000005400)=""/25, 0x19}, {&(0x7f0000005440)=""/66, 0x42}, {&(0x7f00000054c0)=""/104, 0x68}, {&(0x7f0000005540)=""/59, 0x3b}, {&(0x7f0000005580)=""/241, 0xf1}, {&(0x7f0000005680)=""/4096, 0x1000}, {&(0x7f0000006680)=""/96, 0x60}, {&(0x7f0000006700)=""/39, 0x27}, {&(0x7f0000006740)=""/232, 0xe8}], 0x9}, 0x5}, {{&(0x7f0000006900)=@rc={0x1f, @none}, 0x80, &(0x7f0000006ac0)=[{&(0x7f0000006980)=""/5, 0x5}, {&(0x7f00000069c0)=""/181, 0xb5}, {&(0x7f0000006a80)=""/2, 0x2}], 0x3}, 0x4}, {{&(0x7f0000006b00)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev}}, 0x80, &(0x7f0000006d00)=[{&(0x7f0000006b80)=""/108, 0x6c}, {&(0x7f0000006c00)=""/213, 0xd5}], 0x2}, 0x1f}, {{0x0, 0x0, &(0x7f0000007e80)=[{&(0x7f0000006d40)=""/83, 0x53}, {&(0x7f0000006dc0)=""/47, 0x2f}, {&(0x7f0000006e00)=""/4096, 0x1000}, {&(0x7f0000007e00)=""/128, 0x80}], 0x4}, 0x5}], 0x9, 0x2000, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000008100)="ab6b7c14ca18e9434dd6ebd2834a368c", 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000008140)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r5, &(0x7f0000008200)={&(0x7f0000003ec0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000081c0)={&(0x7f0000008180)={0x2c, r7, 0x1, 0x70bd26, 0x25dfdbff, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, ["", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000810}, 0x8085) setsockopt$inet_tcp_int(r6, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) bind$inet(r6, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000008240)='/dev/dlm-monitor\x00', 0x648580, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x4, 0x7ffffffc, 0xbc10}, 0x14) shutdown(r6, 0x2) 16:24:10 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000000206050400000000000000000000000005000400000000000900dc0073797a31000000000500010006000000050005000200000014000780080006401c00000000000b400000010111000300686173683a69702c6d61526b00000000"], 0x60}}, 0x0) 16:24:10 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 599.996283] FAULT_INJECTION: forcing a failure. [ 599.996283] name failslab, interval 1, probability 0, space 0, times 0 [ 600.024121] CPU: 1 PID: 21088 Comm: syz-executor.1 Not tainted 4.19.107-syzkaller #0 [ 600.032032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 600.041418] Call Trace: [ 600.044019] dump_stack+0x188/0x20d [ 600.047658] should_fail.cold+0xa/0x1b [ 600.051557] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 600.056666] ? __lock_is_held+0xad/0x140 [ 600.060753] __should_failslab+0x115/0x180 [ 600.064999] should_failslab+0x5/0xf [ 600.068733] kmem_cache_alloc+0x29f/0x710 [ 600.072898] ? kernfs_add_one+0x377/0x4d0 [ 600.077065] __kernfs_new_node+0xd2/0x680 [ 600.081344] ? kernfs_dop_revalidate+0x3b0/0x3b0 [ 600.086116] ? __mutex_unlock_slowpath+0xea/0x670 [ 600.090970] ? wait_for_completion+0x3c0/0x3c0 [ 600.095565] ? kernfs_next_descendant_post+0x27f/0x2c0 [ 600.100882] kernfs_new_node+0x92/0x120 [ 600.104884] __kernfs_create_file+0x51/0x33f [ 600.109309] sysfs_add_file_mode_ns+0x224/0x520 [ 600.113994] internal_create_group+0x359/0xb90 [ 600.118603] ? lock_acquire+0x170/0x400 [ 600.122592] ? remove_files.isra.0+0x190/0x190 [ 600.127182] ? lock_downgrade+0x740/0x740 [ 600.131353] lo_ioctl+0xf89/0x20e0 [ 600.134911] ? lo_rw_aio+0x12f0/0x12f0 [ 600.138905] blkdev_ioctl+0xbf7/0x1a1c [ 600.142809] ? blkpg_ioctl+0x9e0/0x9e0 [ 600.146708] ? mark_held_locks+0xf0/0xf0 [ 600.150788] ? find_held_lock+0x2d/0x110 [ 600.154861] ? debug_check_no_obj_freed+0x20a/0x42e [ 600.159912] block_ioctl+0xe9/0x130 [ 600.163546] ? blkdev_fallocate+0x3f0/0x3f0 [ 600.167879] do_vfs_ioctl+0xcda/0x12e0 [ 600.171781] ? selinux_file_ioctl+0x46c/0x5d0 [ 600.176285] ? selinux_file_ioctl+0x125/0x5d0 [ 600.180787] ? check_preemption_disabled+0x41/0x280 [ 600.185809] ? ioctl_preallocate+0x200/0x200 [ 600.190228] ? selinux_file_mprotect+0x600/0x600 [ 600.194993] ? __fget+0x340/0x510 [ 600.198463] ? iterate_fd+0x350/0x350 [ 600.202267] ? putname+0xe1/0x120 [ 600.205758] ? security_file_ioctl+0x6c/0xb0 [ 600.210179] ksys_ioctl+0x9b/0xc0 [ 600.213643] __x64_sys_ioctl+0x6f/0xb0 [ 600.217543] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 600.222139] do_syscall_64+0xf9/0x620 [ 600.225969] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 600.231164] RIP: 0033:0x45c2e7 16:24:10 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000014007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000002e000102000000000000000700000000", @ANYRES32=r5, @ANYBLOB="00000000000000000800f1ff"], 0x24}}, 0x4) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r6, &(0x7f00000067c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c, &(0x7f0000002200)=[{&(0x7f0000000080)='G', 0x20000}], 0x1}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0x71, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000140)=0x98) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = openat$cgroup_ro(r9, &(0x7f0000000200)='cpuacct.usage_percpu\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r7, &(0x7f0000000300)={r10, 0xffffffffffffffff, 0x40}) [ 600.234370] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 600.253378] RSP: 002b:00007f2c476dfa68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 600.261117] RAX: ffffffffffffffda RBX: 00007f2c476e06d4 RCX: 000000000045c2e7 [ 600.268394] RDX: 0000000000000007 RSI: 0000000000004c00 RDI: 0000000000000008 [ 600.275665] RBP: 000000000076bf20 R08: 0000000000000000 R09: 000000000000000a [ 600.282942] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 600.290213] R13: 0000000000000bdc R14: 00000000004cdbbf R15: 0000000000000011 16:24:10 executing program 3: r0 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002516e1fc9df1c9080001000400000008000300042dd20b2b377a55441c25020000000800"/52], 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x810) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}]}, 0x40}}, 0x0) 16:24:10 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)='(', 0x1}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x113, 0x9}}, 0x20) [ 600.414383] hfs: creator requires a 4 character value [ 600.466310] hfs: unable to parse mount options 16:24:10 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:24:10 executing program 1 (fault-call:3 fault-nth:18): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) [ 600.645679] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:24:11 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="380100000001190507000000000000000a000000440001002c0001001400030016f8bcd3830100000000000000d6b8bf14000400fe8000000000000000000000000000bb0c000200050001000000000006000300000200003c0002000c00020005000100000000002c00010014000300fe88000000000000000000000000000114000400ff020000000000000000000000000001080007000000000010000d000c000300040002004e2300008c000e002c00010014000300fe80000000000000000000000000001414000400fe8000000000000000000000000000bb46000300000300002c0001001400030000000000000000000000ffffac14140b140004004a925aa0ddf34330053d13c7087769421400010008000100ac1414aa08000200ac1414340c00020005000100110000000600030000040000"], 0x138}}, 0x0) [ 600.816303] FAULT_INJECTION: forcing a failure. [ 600.816303] name failslab, interval 1, probability 0, space 0, times 0 [ 600.822922] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 600.865209] CPU: 0 PID: 21119 Comm: syz-executor.1 Not tainted 4.19.107-syzkaller #0 [ 600.873128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 600.882487] Call Trace: [ 600.884309] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 600.885108] dump_stack+0x188/0x20d [ 600.885140] should_fail.cold+0xa/0x1b [ 600.885163] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 600.905130] ? __lock_is_held+0xad/0x140 [ 600.908729] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 600.909214] __should_failslab+0x115/0x180 [ 600.920889] should_failslab+0x5/0xf [ 600.924615] kmem_cache_alloc_trace+0x2c6/0x7a0 [ 600.929381] ? dev_uevent_filter+0xd0/0xd0 [ 600.933631] kobject_uevent_env+0x225/0x1160 [ 600.938066] lo_ioctl+0x1006/0x20e0 [ 600.941716] ? lo_rw_aio+0x12f0/0x12f0 [ 600.945629] blkdev_ioctl+0xbf7/0x1a1c [ 600.949533] ? blkpg_ioctl+0x9e0/0x9e0 [ 600.953470] ? mark_held_locks+0xf0/0xf0 [ 600.957548] ? find_held_lock+0x2d/0x110 [ 600.961654] ? debug_check_no_obj_freed+0x20a/0x42e [ 600.966695] block_ioctl+0xe9/0x130 [ 600.970327] ? blkdev_fallocate+0x3f0/0x3f0 [ 600.974660] do_vfs_ioctl+0xcda/0x12e0 [ 600.978652] ? selinux_file_ioctl+0x46c/0x5d0 [ 600.983145] ? selinux_file_ioctl+0x125/0x5d0 [ 600.987640] ? check_preemption_disabled+0x41/0x280 [ 600.992654] ? ioctl_preallocate+0x200/0x200 [ 600.997062] ? selinux_file_mprotect+0x600/0x600 [ 601.001818] ? __fget+0x340/0x510 [ 601.005273] ? iterate_fd+0x350/0x350 [ 601.009069] ? putname+0xe1/0x120 [ 601.012530] ? security_file_ioctl+0x6c/0xb0 [ 601.016942] ksys_ioctl+0x9b/0xc0 [ 601.020401] __x64_sys_ioctl+0x6f/0xb0 [ 601.024290] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 601.028876] do_syscall_64+0xf9/0x620 [ 601.032680] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 601.037865] RIP: 0033:0x45c2e7 [ 601.041054] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 601.059956] RSP: 002b:00007f2c476bea68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 601.067662] RAX: ffffffffffffffda RBX: 00007f2c476bf6d4 RCX: 000000000045c2e7 [ 601.074929] RDX: 0000000000000007 RSI: 0000000000004c00 RDI: 0000000000000008 [ 601.082197] RBP: 000000000076bfc0 R08: 0000000000000000 R09: 000000000000000a [ 601.089463] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 601.096727] R13: 0000000000000bdc R14: 00000000004cdbbf R15: 0000000000000012 16:24:11 executing program 3: getpid() socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10000000000f, 0x0, 0x0) capget(&(0x7f0000000000), 0x0) getpgid(0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0xa, 0x300) syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) waitid(0x2, 0x0, &(0x7f0000000900), 0x20000000, &(0x7f0000000480)) memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x9a0efa2b65aacb27) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x2, 0x105084) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xf1a}, 0x2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) recvfrom$rxrpc(r5, &(0x7f0000000280)=""/174, 0xae, 0x107, &(0x7f0000000040)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1d}}}, 0x24) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r3, 0x28, &(0x7f0000000240)}, 0x10) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000004) 16:24:11 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 601.214827] hfs: creator requires a 4 character value [ 601.234976] hfs: unable to parse mount options [ 601.266413] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:24:11 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x396c01, 0x15) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010045) 16:24:11 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:24:11 executing program 1 (fault-call:3 fault-nth:19): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:24:11 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0xc0000, 0x0) ioctl$IMHOLD_L1(r0, 0x80044948, &(0x7f0000000080)=0x101) r1 = socket$nl_crypto(0x10, 0x3, 0x15) dup2(r1, r0) mount$9p_rdma(&(0x7f0000000140)='127.0.0.1\x00', &(0x7f0000000280)='.\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=rdma,port=0x000000008cffffbf,\x00']) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x20a301, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) accept(r2, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @empty}, &(0x7f0000000180)=0x80) [ 601.530798] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 601.549828] FAULT_INJECTION: forcing a failure. [ 601.549828] name failslab, interval 1, probability 0, space 0, times 0 [ 601.563090] CPU: 0 PID: 21142 Comm: syz-executor.1 Not tainted 4.19.107-syzkaller #0 [ 601.570994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 601.580384] Call Trace: [ 601.582995] dump_stack+0x188/0x20d [ 601.586646] should_fail.cold+0xa/0x1b [ 601.590552] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 601.595663] ? __lock_is_held+0xad/0x140 [ 601.599744] __should_failslab+0x115/0x180 [ 601.603990] should_failslab+0x5/0xf [ 601.607713] __kmalloc+0x2d3/0x770 [ 601.611267] ? kobject_get_path+0xb9/0x190 [ 601.615535] ? rcu_read_lock_sched_held+0x10a/0x130 [ 601.620561] ? kmem_cache_alloc_trace+0x342/0x7a0 [ 601.625425] kobject_get_path+0xb9/0x190 [ 601.629508] kobject_uevent_env+0x24b/0x1160 [ 601.633947] lo_ioctl+0x1006/0x20e0 [ 601.637587] ? lo_rw_aio+0x12f0/0x12f0 [ 601.641487] blkdev_ioctl+0xbf7/0x1a1c [ 601.645384] ? blkpg_ioctl+0x9e0/0x9e0 [ 601.649284] ? mark_held_locks+0xf0/0xf0 [ 601.653362] ? find_held_lock+0x2d/0x110 [ 601.657430] ? debug_check_no_obj_freed+0x20a/0x42e [ 601.662469] block_ioctl+0xe9/0x130 [ 601.666107] ? blkdev_fallocate+0x3f0/0x3f0 [ 601.670437] do_vfs_ioctl+0xcda/0x12e0 [ 601.674341] ? selinux_file_ioctl+0x46c/0x5d0 [ 601.678846] ? selinux_file_ioctl+0x125/0x5d0 [ 601.683357] ? check_preemption_disabled+0x41/0x280 [ 601.688386] ? ioctl_preallocate+0x200/0x200 [ 601.692810] ? selinux_file_mprotect+0x600/0x600 [ 601.697605] ? __fget+0x340/0x510 [ 601.701072] ? iterate_fd+0x350/0x350 [ 601.704916] ? putname+0xe1/0x120 [ 601.708391] ? security_file_ioctl+0x6c/0xb0 [ 601.712813] ksys_ioctl+0x9b/0xc0 [ 601.716283] __x64_sys_ioctl+0x6f/0xb0 [ 601.720180] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 601.724771] do_syscall_64+0xf9/0x620 [ 601.728584] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 601.733778] RIP: 0033:0x45c2e7 [ 601.736977] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 601.755883] RSP: 002b:00007f2c476dfa68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 601.763606] RAX: ffffffffffffffda RBX: 00007f2c476e06d4 RCX: 000000000045c2e7 [ 601.770879] RDX: 0000000000000007 RSI: 0000000000004c00 RDI: 0000000000000008 [ 601.778156] RBP: 000000000076bf20 R08: 0000000000000000 R09: 000000000000000a [ 601.785429] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 601.792700] R13: 0000000000000bdc R14: 00000000004cdbbf R15: 0000000000000013 16:24:12 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000), &(0x7f0000000080)=0x8) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x2) socket$kcm(0x10, 0x2, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000240)={0x0, 'batadv0\x00', {}, 0x8}) shutdown(r2, 0x1) fcntl$setpipe(r2, 0x407, 0xfffffffffffffffc) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000002480)=@assoc_value, 0x8) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000300)={0x0, 0x3e, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYRESOCT=0x0], 0x1}, 0x1, 0x0, 0x0, 0xfde7b3a644c24edf}, 0x44801) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0), 0x1, 0x0, 0x0, 0x8000}, 0x40000) mmap(&(0x7f000015d000/0x1000)=nil, 0x1000, 0x200000e, 0x80110, r1, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x59) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cpuset.effective_cpus\x00', 0x26e1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x420000, 0x0) stat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) setuid(r5) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) r6 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0xc0045009, &(0x7f0000000100)=0x3) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200800, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r7, 0xc0045009, &(0x7f0000000100)) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r7, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=r6, @ANYBLOB, @ANYRESDEC, @ANYBLOB='5N']) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000340)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r9 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x288034, &(0x7f0000000640)=ANY=[@ANYBLOB='f{f=', @ANYRESHEX=r9, @ANYBLOB="2c726f6f746d6f64653d303030303030303032beb8d23030303030303468df86", @ANYRESDEC=0x0, @ANYBLOB="9522e1024e4826c9cd6c24533ca6b52e3f8d7a2341d59934981c9c08ccec88576624e9fc2e"]) chown(&(0x7f0000000140)='./file0\x00', r5, 0x0) 16:24:12 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 601.857084] hfs: creator requires a 4 character value [ 601.869451] hfs: unable to parse mount options 16:24:12 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='cpuset\x00') preadv(r0, &(0x7f0000000940), 0x0, 0x0) syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000140), 0x8) geteuid() gettid() 16:24:12 executing program 1 (fault-call:3 fault-nth:20): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) [ 601.975748] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:24:12 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:24:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x6, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x41) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) read(r0, &(0x7f0000000200)=""/231, 0x1000006ce) r1 = dup2(0xffffffffffffffff, r0) ioctl$TCXONC(r1, 0x541b, 0x719000) [ 602.148160] FAULT_INJECTION: forcing a failure. [ 602.148160] name failslab, interval 1, probability 0, space 0, times 0 [ 602.240752] CPU: 1 PID: 21161 Comm: syz-executor.1 Not tainted 4.19.107-syzkaller #0 [ 602.248670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 602.258026] Call Trace: [ 602.260633] dump_stack+0x188/0x20d [ 602.264283] should_fail.cold+0xa/0x1b [ 602.268189] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 602.273302] ? __lock_is_held+0xad/0x140 [ 602.277391] __should_failslab+0x115/0x180 [ 602.281645] should_failslab+0x5/0xf [ 602.285414] __kmalloc+0x2d3/0x770 [ 602.288969] ? kobject_get_path+0xb9/0x190 [ 602.293220] ? rcu_read_lock_sched_held+0x10a/0x130 [ 602.298251] ? kmem_cache_alloc_trace+0x342/0x7a0 [ 602.303112] kobject_get_path+0xb9/0x190 [ 602.307182] kobject_uevent_env+0x24b/0x1160 [ 602.311608] lo_ioctl+0x1006/0x20e0 [ 602.315245] ? lo_rw_aio+0x12f0/0x12f0 [ 602.319142] blkdev_ioctl+0xbf7/0x1a1c [ 602.323041] ? blkpg_ioctl+0x9e0/0x9e0 [ 602.326944] ? mark_held_locks+0xf0/0xf0 [ 602.331018] ? find_held_lock+0x2d/0x110 [ 602.335098] ? debug_check_no_obj_freed+0x20a/0x42e [ 602.340139] block_ioctl+0xe9/0x130 [ 602.343777] ? blkdev_fallocate+0x3f0/0x3f0 [ 602.348110] do_vfs_ioctl+0xcda/0x12e0 [ 602.352015] ? selinux_file_ioctl+0x46c/0x5d0 [ 602.356525] ? selinux_file_ioctl+0x125/0x5d0 [ 602.361026] ? check_preemption_disabled+0x41/0x280 [ 602.366052] ? ioctl_preallocate+0x200/0x200 [ 602.370465] ? selinux_file_mprotect+0x600/0x600 [ 602.375234] ? __fget+0x340/0x510 [ 602.378700] ? iterate_fd+0x350/0x350 [ 602.382502] ? putname+0xe1/0x120 [ 602.385967] ? security_file_ioctl+0x6c/0xb0 [ 602.390391] ksys_ioctl+0x9b/0xc0 [ 602.393867] __x64_sys_ioctl+0x6f/0xb0 [ 602.397761] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 602.402353] do_syscall_64+0xf9/0x620 [ 602.406167] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 602.411359] RIP: 0033:0x45c2e7 [ 602.414560] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 602.433465] RSP: 002b:00007f2c476dfa68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 16:24:12 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x2, 0x0) writev(r0, &(0x7f0000002480)=[{&(0x7f0000001180)="e10451545d5bd081d96a8d393493144a2e61971782199785a4bb6fec5dc7f6cabd5c993406000a939a75295ca8dc9c270339f85b16fb314747a3e4fc3dd95f0503f1e3f28ffe31c5f05e9e2bc81b4e68b3f311040537bb42fc765ec2ba80ce7300000000000000058ca68e319ad7ed22a2fae4bc97e8b1630605aa979888f7cf6bee8b1819f3", 0x86}, {&(0x7f0000000200)="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", 0xf7a}, {&(0x7f0000000180)="c6551ed281473b1d065ab92fa3267d58a0b0e0689889e93762a5003d5d178e398dd47a3131a96422120e923770a1eeb45c0f2393eed6a673f6e6fbdac74a43d354c5c7dea9c8fe3d49b5689117cbd6ad5393132f55e37570b36db64aba24435aa4a880cd11a410aa7839393bbb05515821ae08932f41c429815a", 0x7a}, {&(0x7f0000000080)="31a4247de7bdf7e5963f4794", 0xc}, {&(0x7f00000012c0)="758c716c81d9eb3e78ebefa905ad87029ab3464cd2fe281faf9e3d47a3075ee0d62f8e8fe06e506d9ca85fe5b8473c10aeb938ff4d6bcec1fc13243f0effda533d801ace1e4e0f8f1543a6bf53e2feb558fb24c89456", 0x56}, {&(0x7f0000001240)='V', 0x1}, {&(0x7f0000001340)="e4ca42c50f95538c2ad85db9cb5702a35fcf8f6ddb800aba72c5c5b9c499c19d6c8f45555f61ee088ab122e03ff0a5a9", 0x30}, {&(0x7f0000001380)="515716c225118828c3e396160a16dc23c81bd41a9d310d2a8128431e4fa4e60bce2568206951d36ecb28795363a83e6aec7747ad4e3c53fbd90fe3c1d13d743eabd1bf4d45667818c506d511d6032483c70501c74920cd387d4e5735ee7d368fcdd9686c7538f3845e29ba27445b6ba205a73fbe4e84e01e73cb2afb0e7f0000000000000000", 0x86}, {&(0x7f0000001440)="74bf4e59fbc715b63f67c727f0939a822c9d50ffb96824a5ec7c811ea5532dcf204755bee8ef447a5d7c02cbde7121049ac594eacb3fdaf1d632bfd7d356b97c6336a2eb03367687f14f769ba7b2d084b0dbf4620d323ac4ab586e04e491681e21e0e15d2633468eb88bb1258ace19ff19324d6d47ede2eea67d090173e5c09a1382bee9979dd2e502fde53c2b228c74c3f9644b1f76104977cffe146c9cfbb69a4137fd2be8665ecf85e845ea6181702b344e0d6c801c7b72f20d026c0ed542152cea1c8b6d1864292a60fd26cf11a2af3e38b7d741819b553f8e9cc451ffe2e171694381b4a730bb8dc47c99cbe15b058a3bd0f991ada51bfd0f47e539156b04e58973b615f8e94a797e8f21af98b8b7e473bc1046823afa9a0b6fa8bda53f92d6168a39f4242af7449d2f2639826e9449c9b048e1fb761e81f9ea89d556b844e159346222b5666342b398c312cfa56c0d3b507305d029cd3e2174c3c6626ec1f87ffcc0ed096a533a39dc54512e117e0798289a36e100c7b8d91cf34cca2d2359414c479b2a6208749b581002fb0341d3d5a1e74cf6cd0aca913b17c424e399222a4815613c1fdecb5c28edca56c70e9de597cdba5642deda3f5b0ab01b4509ecd1ba9db1d67bdc60fa97b38fef1533bad66c4211be6f7bec5071864e92f438c6484e93fb099c6f70dcbfa9efd3272600c00e298c82cc98dcf7154f07970ad458eee40f647e24ecc94b4b9ae013244ec6b6c7e8f4c1caa997bee50839749e8ec8ba77e0930d873cc1e32c3de13bf497c8c593c0c8c2fd9264bad623ab979ab37e488096a3b925309fa054562bdafdf80230dd15819580915e5133db98534365ba67371788bb1091946511085e498e0c12f83864e593f5e6d459de2f81214e58d4c58118deb03f7cc983b78d155064f2b8430d8c228d0195c74c6fafca7f5e39e3bfd8d75ed3e71c806539ede748d5bf8d84377b5026e7784ccf40ba56e977a8effa0bca14490ece8fffc92924af3578575a19a7809f7cf9e6626e7d732a0397f2a46d0914f7c16d60287b9412c355ed9c1167c5a444816b6d85495ca5a66d685dfeecf690eb52518121e277d077c23e23655a642bdff016facbb85a7023295138e241350059eaf50995e5b419db24dcc68092b8612f63c6ca5da87d3cc31d65000b464867f87e8b57e053a205069c25ee4f41124348d5223fe6858e6b96dee28275e6f30d6bdff910ee72e273500b27d876777d99c3b5aa9d040eceae9ddb64229d312d89108a3a84048017b2f0b69822840e631454cec175b40d8ce3cd94464ceca62f4189f044485f10817f6feb6b753432dea787a1253df529ff4f560acd3e89452584ba7921b1292491e968677f41189541ac1410c6a7abf315f451d28ebaa3a2b5d2e3a7f1943e737178776bd76d938cbaffe1018bff9b4040b8f55c7818e526c901c4224dc8967313b26db40a4df4cba74cd2c92c90dd2c92921681af10dd030b3aa7bb5111927f48498556e428a52553f46fd4d7457a1b34470e14ea2514138dc2fe9ed3a28a07975163ea1d260e35d3cb33915a826d2f5a390fdbf413d25ea69067359e6e8b8165a290e5a499495ddbb4d81477b8f5f6ac5712dfd3e24f560b8a21ff778dc941ef0aa235a429b55dfaef86a2eff45a282baf4da334e0a21ab11c39856e61ca0a3866e1c597772a0127c5c11b4f957b3ba8d5c2d4a5d2ac4cbb99b719368b4efe8749dd621dc577ee2bb87aa14e7b8f58a6b337c13b44c23073f1eb90da4a5e39086659438ad1c730c442d4786f3d03ee3df0d6b14f96466aea8de7fe82f1388927888eb5e9fc506077efe83c6e1c0851c9fc2a15a40558bfdff05ba0592c5a075042c78fd80a2a8584abb7a0a1b37f0ff3724c1d488895ae3a4bb5dd35ffc10f2df79dfcb1fb8cdab7d143690c59ebe6ad3dbecb471b1205c5be1d85137c65e400d1fc4efe5a6e378985817e2f6926e5f289cbe21d87db7f5d359fcd1e0c9eaa0f887befa5537407b83aeee7cad436477db3270835af70fec5f36d11facf47fd2d324c72928322b45df9f25bc555e65976cf45c4470c5e1d0f93a5bb2b3d085eaef9e0eaad1b4a2ae67f4f61b63a991dac25244284baf7a4773b43b42553fba70b9669d0e3bf532644c8c0ac068e57ea1cd6fba0907777f7714d3318c0ce4d856daddb422783c92412712f0d3b781a38d87d935cf3734275e531680aed97419a3a3164a956bc9a9a6cf3002247051f70fba11456497cacdf576752a835e026f0876add238adc144fae1c4c41dcd14001c823541514962156db7bf39131a2ccff991af2c9193ce6b95297884a15f0a8f7771753ab5edb5e7a723141d38fc1e96e2f78dfaf0ac2ac2f74cd0a76139927d2f11e9d6514ba6702c9b6d9c18955dccd98e19d442e44e443c9f985c79467ffa1363c0d418664e2c845c52f90c951d64bfc07b4e95d916a39d2e8a71c742033b4b6c1d8b4ccfc7255b5077ec6ef7f7b89274f5ac96c3a18f193fede32a9807b2757583a9eb085d904427e4e2f0dd1999051fe9c9217ba799fbc326982ae3c09f65b30828115d4cf85bec98b65988a76a281b6e0b0216a616d2e5fd3b7857df0e74d72f39fee19ed0e8b5784db6ca53e28d654e59f2711ac70222cdfc1e639cf64e05e1c2cbad146fedd951acf32155a678a56d83e1264f79945c4b862ad3af395fcc32f96cf71fbc6a9ad38e17770f8f8393fa72bb58861e22529d2e2860ed1dce07c952838a071e77a2aab3f76d4a855ca8f1a4e61a0941fd30d20e51b753c890b57ade560404aaa02e67e9844f94b0073338b0c9cf59c6c4dc7435efaf036c9d5c7e9d1713911c86f71b6c62812ca433d32b07d0841032a8fa3ee499b26c7f93c4f579078dc38dde50010d801f07ea859a3cacc22d33a37fe35d91384f42a0f5f96c2e49f75d8893261ee94bfb69ab8ef3b1a2f9c5ffeb5040e2b419f32a823c8a6f9646a190ed8a97114f90a8125fc7eb742d65f413f32d64c048b69c3905bffd1f575179f081dbe5545a09034be3c12bca143b084f558700ca256474c4d33e51db2ccb154daddcbaecfa5faeed42ec7606d86536a0c67baaad07fe796e0f3994e95f0a86168b84a78d107c3adfe5846bea020044cef1f04c76b8710b6d570781ea42ee583f7709bc79e5287e775d5a3fe20c62147fa9c428a319489ecf1c317c6dee9e8fa6f0e9d8e9ad320e35e6641b477f3941e68859679e7c95f50e4bc61da97c4386f44cce06865789e77f35fdbd99386d55d2001d76ac8a4400192b5e566e55131049b80fd2dc6a3645b402616138020750aafaa72da7e63b4f36b5079c7f0e72b0fb5b3bc82d41bc11bbbcf73236f669f830ba1d788a4bd7a85a87c54b855f35c394582b0247b125c0253e2599b630c2f903ec45027d8f3dd9a2a1a6c943db7177f09b422fc713be0beefcfeac6cdd43612c2083d9e655423ebd622a0baff5ba0417897bf3f853c2525bfb6487eeebd0255d28be5293ab8419211dfb762ea5bf14b4bcdb51e969d9c6b1e5fc7515cb793dd1c3c35532a4b8c7b7d7199d395f0381c0da34a7a6ca80481e42b02bff2947249dd95386f7121e1f1c03fe2d6ddb0930605e3af41b95e9e07a5ae4b7b28f965cd8f18da004e80eeda00ffb688bef3c7200822e856020c9e8c0105e870738146cd70e948408bc1939b2415ee00e5f25987d21e1c28a0a7757e36a8822945f8292f3a4557abcb70418814f81ecbb3e842d760f0a2e761a6adf82e01201f8477c6977044b78a38ff068612b3791b7f0382081a71263fbb97aa7753195587c4da1716350dc24e3d116e88e2b775e32a38ed45eb6c7951976fd648e754d9e2915f9ddf734fe4c4caef00b680be883df3055c0a7291e02acacaec00cf239b59a69bdfe7a4bcda5874deeaea9e047d7a1d0d0c6dbae7ea04f9253a61a945d1065ae85b4484c84d1afa533fe4757e7997b09bf6db02270d097735cee04a06fd82f7e1fc832609aa1bc9ca1474781ecdf0aa0e7c5c3e2bdf7852d66763b0a4fdd74ee03bc1bc4aad1aeb8cf8904f19ccc75a5b7cb5db0e78e213aca5f20165c966f37910c20c699704f2fff75a3b98821aee7d686dfc1aaebc236ae835e7efd2b251894563d9385a6a8ca1a740ad13680570b67c62176d717e2d9d5b46ad28c6fa3bf50d31b28c4ba5a2708b15c8cce1456ef0e9cccaf190976aff2c2a5855dae449c9bbf8e7c2f41e0e12f57ec53b0d2fd5ed98e362237460d626f15498da5aec4a23969bcfc3b8b91ea765161a3cb8d910be1ae89cc6b84b94559dd9b988ca4b4e5420cf75f78550591d10108349ffd162fa29d4dc4407d3572079ff9bbefd6855b2f0c966e75147c1b8c8e0c00169e8dde92d4851db2841b9663533d43f7029a73deb9898737e0ac4df51e5d44a7793c887fd486407c419c2ef0eddbb51d8bf5bcda4594a147eea03f59d6532e43ca716878015a5bcaa516290069d098614ab13534bf785d61bfc3c1145e8359e7891a618a94d85c18e5d762b2ea8469584db87b683ed4b60aefd3fc1387f5b9c29abec957ce04fceb4eb4c18eec1be4bf6263d971f2312219d5c07ac88412277218ecd8ca11ce889aa56c4bc0a2380e65b91a69c8409271aadad60ddad040712f6d9efcc2bb10cf6027450c81fb8306fc37cb327d450f65e15f65d02dd80902f6cf5833c990c3bef491dc02f65f8655c2c9030ffd99d23c008d2c257d6fabd24fbf16eb1bc635a47111c12aeb897045b5b0f83bdd1d1052b349d20a450d43751b98d36b3aaa57f8377782fff40fb2aa650d27b23cb8111b222be6d01d4845b35e9885b52a8a681581df51fd1d6e76b30673489130ba61f4fd8741b77047fbcd676beb98faf8922654f6ed2a474f58d3376c771e1da669833db79e96fbb7dc1135cde36036c5ffbc442c2a9e4b43ae525021d25fc578849e7d2a7ea4472295a4166e4a4a6051b3ec0ddc0c7efe16f31f42a721712ef7a5542f337f76bfdb836e8ebcb4823fe9c769898db4abb235b2dcd0c32cefcfdde3d589ba5e4dbdde88411b5326c9cf49e4287f67ff5892c36d66b14b6be3f3480cf300d582fb5ad2b34728b027ec9e23cc09821def8b4ac6fd417104614044d8b2613002fc477c4d2d4bc346bcd9ea66d97bd77c8f2be7e0a5d029c08e25782209d05d4d0954010c3442a77b3cca5f7a8c6198579dee6007042599d3e3b4b1c0f8dd39fdfaee7b296e9d518451db65b5c82479191da50aad9be2cff1dfca52848fca16f134d2489493f05c63e4e6e2a3e6e5c4c9e69f84c76cf9ad2b8abdb5db77379ae45b74649e61f22cc18a4a512fc45f4383537f1e27bb06eec7a38ef9d8af25abd19d20cd8170ea985d08bc160753ce4a069622614434ebac47381cb104afc2596d79c833a7ff75679f8c74add4dacf243e8bdd39d9b337b37f3ca8cc006bfdfe4fe2b7dca4eadf7f9e1425f5c1d097986d1143ad82d118f04329e03d209566d4681bba6b8b381cbf1ff1340b65a81298751f8e32ff4429739e893a2ee9dccadb4d4cbd03e0f39c9f720447c63be0fe62294fffb38752071bba8b2a6421b69ceeb48d1b5e0be943e4a0bf0f7ae76569fefb28e677fb6f244e59c02ee876188b6e5b1352b25e22a78ba36d1a74aa7cc741a9f128e1fb4ef90d742611af03cf1901bbaa03e7ca8abb8232e0b5481de0f916fce178e2eb5168656562bb04c324c1d6853ac3c709e52262da60ae878c0f041c88fbe4701654a8470f7b26528f9a8185d8ad81da3d656ab99fb76ed", 0x1000}, {&(0x7f0000002440)="3fe740bc51be20a5f9739ef41fd3", 0xe}], 0xa) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000040)=0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) clock_gettime(0x0, &(0x7f0000002580)={0x0, 0x0}) ioctl$sock_SIOCADDDLCI(r3, 0x8980, &(0x7f0000002680)={'dummy0\x00', 0x6}) ppoll(&(0x7f0000002540)=[{r5, 0x1}, {r1, 0x4}, {r4, 0x8404}], 0x3, &(0x7f00000025c0)={r6, r7+30000000}, &(0x7f0000002600), 0x8) syz_open_dev$usbmon(&(0x7f0000001280)='/dev/usbmon#\x00', 0x7f, 0x2c3c0) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000140)={0x9, &(0x7f00000000c0)=[{0x0, 0x8, 0x4, 0x97}, {0x6, 0x1d, 0x3f, 0x8}, {0x20, 0x7, 0x6}, {0xe0, 0x8, 0x5, 0xfffffffa}, {0xbc, 0x4a, 0x6, 0x8}, {0x6, 0xa0, 0x40}, {0x7, 0x0, 0x0, 0x800}, {0xfff, 0xd, 0x7f, 0x3}, {0x9, 0x7f, 0x8, 0x8}]}) write$FUSE_DIRENT(r4, &(0x7f0000002640)={0x38, 0x0, 0x8, [{0x4, 0x923, 0xd, 0x0, '/dev/usbmon#\x00'}]}, 0x38) [ 602.441181] RAX: ffffffffffffffda RBX: 00007f2c476e06d4 RCX: 000000000045c2e7 [ 602.448452] RDX: 0000000000000007 RSI: 0000000000004c00 RDI: 0000000000000008 [ 602.455727] RBP: 000000000076bf20 R08: 0000000000000000 R09: 000000000000000a [ 602.463003] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 602.470277] R13: 0000000000000bdc R14: 00000000004cdbbf R15: 0000000000000014 [ 602.731529] hfs: creator requires a 4 character value [ 602.829458] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:24:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xf) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000330007041dfffd940c61051209000000fd00000000000800050016000400ff7e28000077fc00ffffba16d5e94529bae65159a15f5d0a88581916a0aa1c0900000000000012000000", 0xfffffffffffffdf2}, {&(0x7f0000000440)="03e8ec4bcc6bae0b5443a8eae63e3b108b4a931336ddf1f9df80a8c73dba43f200ee60e8c2d157c2503957dd207735b6896bb801d232bc1692dbaefdab1ccd51c1e582c781c6a9b51ef070434099773815e9138d3a1ac30e6ec3cca015219ea4cd38a3a7f98a9204131377ecf77b3150ed4b8fdb71eef0254a7e10c302ba9a3eeaa35686364ad3f236231ca662b52364000000000000000000005b9a9e7a1ee1a2733448966058a977d4ed5c03921d66ce95715b859830dede418921f81d98"}], 0x1}, 0x0) 16:24:13 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 603.022346] hfs: unable to parse mount options [ 603.054326] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:24:13 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:24:13 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:24:13 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x490000, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'port0\x00', 0xc3, 0x80003, 0x0, 0x0, 0x0, 0x0, 0x2000000}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) syz_mount_image$cifs(&(0x7f0000000140)='cifs\x00', 0xfffffffffffffffd, 0xffffffffffffffc0, 0x2, &(0x7f0000000180)=[{&(0x7f00000003c0)="2c9b27f0dea031b5d1e41b71e1c065609fe6f4206e015078277c8d5e463b5f577660bd6b732b50a0d19209279ed3575d6a5a05d75666e99de3a132054627d89f1b70c02a5ed419c3eecdf62db0", 0x4d, 0x5e}, {&(0x7f0000000440)="6e62d1f0caac8f05ba475e6e543705f58a0a79b18174599d4c6166a46995327a0fd364b1a6cd514a8fc8a33a655c5f474e57bbc90ed4279cbaf03b17a4ac4539f672b83d67246e72ccd631ea7160968cb2b4389650969e97ce29623c9187efbc25", 0x61, 0x5}], 0x2000000, &(0x7f0000000280)='\x00') r3 = dup2(r1, r2) write$P9_RCREATE(r0, &(0x7f0000000340)={0x18, 0x73, 0x2, {{0x0, 0x4, 0x7}, 0x2}}, 0x18) syz_open_procfs(0x0, 0x0) read(r3, &(0x7f00000001c0)=""/108, 0xfff4) r4 = syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x7, 0x301000) ioctl$BLKIOOPT(r4, 0x1279, &(0x7f0000000100)) sendto$inet(r2, &(0x7f00000004c0)="858facb953af9cea50e1dd764da59e2001fff1f385d15409228ed94f20d8b081ed4efc46502ebcffda1f6ce8c1a3d1e7ae03469577e464a6bf215af40384f9cfa3d5b25dea723e455a2f18dd4bdd377c2907e44443f994b2a9e07dcf75bc87be237a85d290f7390cfb785628c1f047b0f018df1b2da0e52533226514bec00c7183dd691bfe3ff793808f43c64514e1d4b7be19ce248af12d45431a4688", 0x9d, 0x49000, &(0x7f0000000040)={0x2, 0x4e23, @rand_addr=0x52ed}, 0x10) r5 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[], 0x0) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = getpid() tkill(r10, 0x800000015) r11 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r12) ioctl$DRM_IOCTL_GET_CLIENT(r9, 0xc0286405, &(0x7f0000000380)={0x7, 0x0, {r10}, {r12}, 0x200, 0x100}) mount$9p_virtio(&(0x7f0000000240)='syz\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x202018, &(0x7f0000000640)={'trans=virtio,', {[{@msize={'msize', 0x3d, 0x1}}], [{@uid_lt={'uid<', r7}}, {@pcr={'pcr', 0x3d, 0xb}}, {@euid_lt={'euid<', r13}}, {@subj_user={'subj_user', 0x3d, 'cifs\x00'}}]}}) close(r5) [ 603.211949] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 603.382057] hfs: creator requires a 4 character value [ 603.384236] hfs: unable to parse mount options 16:24:14 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0xe, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10090}, 0x20000802) setxattr$security_capability(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000100)=@v2, 0x14, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0xa8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000300)="ee", 0x1}], 0x1) 16:24:14 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:24:14 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x2, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:24:14 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000000080)={0x7fffffff, 'syz0\x00'}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000480)={0x3, 0x9, "ca3827", 0x20, 0xb6}) sendto$inet6(r0, 0x0, 0x0, 0x24004809, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x4900, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0xc, 0x0, 0x2}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4004891) sendto$inet6(r0, &(0x7f0000000140)="02", 0x1, 0x4008044, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000180)="1b", 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_DQBUF(r6, 0xc0585611, &(0x7f00000001c0)={0x1, 0x0, 0x4, 0x70000, 0xb09, {0x77359400}, {0x1, 0x4, 0x97, 0x4, 0x9, 0x2, "61118ccc"}, 0x100, 0x4, @planes=&(0x7f00000000c0)={0x800, 0x0, @userptr=0x5, 0x7fff}, 0x1000, 0x0, r1}) getsockopt$sock_buf(r7, 0x1, 0x1c, &(0x7f0000000240)=""/65, &(0x7f00000002c0)=0x41) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, &(0x7f0000000340)={'tunl0\x00', 0x80000000}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$KDSKBENT(r9, 0x4b47, &(0x7f0000000300)={0x0, 0x3, 0x82}) [ 603.723555] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 603.759868] hfs: creator requires a 4 character value [ 603.774812] hfs: unable to parse mount options 16:24:14 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="380100000001190548000000000000000a000000440001002c0001001400030016f8bcd3830100000000000000d6b8bf14000400fe8000000000000000000000000000bb0c000200050001000000000006000300000200003c0002000c00020005000100000000002c00010014000300fe88000000000000000000000000000114000400ff020000000000000000000000000001080007000000000010000d000c000300040002004e2300008c000e002c00010014000300fe80000000000000000000000000001414000400fe8000000000000000000000000000bb46000300000300002c0001001400030000000000000000000000ffffac14140b140004004a925aa0ddf34330053d13c7087769421400010008000100ac1414aa08000200ac1414340c00020005000100110000000600030000040000"], 0x138}}, 0x0) 16:24:14 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x3, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:24:14 executing program 2: epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x19000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffffffffffffffff08004500000d0000584818420090780000d687000000001f9129b4f377995157000000000000000000000000006c9b7e6d0f6656336e7da81bb9421d11b4e2c20f15960bea381ca2d3c815f26b1f651c0f1c736440dd294b01f1b41aa0624e42e846cb9f69b376587067358a0c17"], 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000000c0), 0x1}, 0x800000020000061a, 0x800007f, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) syz_mount_image$ext4(0x0, 0x0, 0x9, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000000)={0x7fffffff, {{0xa, 0x4e22, 0x0, @remote, 0x7fff}}}, 0x88) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f00000001c0)={'veth0_vlan\x00', 0xe00000000, 0x40}) [ 603.969787] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 603.996930] hfs: creator requires a 4 character value [ 604.010524] hfs: unable to parse mount options 16:24:14 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000020201020000000007000000000000000400f103e39d293e851f75e3"], 0x20}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x4001) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000000180)={'icmp\x00'}, &(0x7f00000001c0)=0x1e) dup3(r2, r1, 0x0) r5 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$FUSE_NOTIFY_INVAL_INODE(r5, &(0x7f0000000000)={0x79, 0x2, 0x0, {0x4, 0xffffffffffff8001, 0xffff}}, 0x28) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x18082, 0x0) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000140)={0x2, {0x2, 0x3, 0x2, 0x3f, 0x200, 0x10}}) 16:24:14 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="38010000000119054c000000000000000a000000440001002c0001001400030016f8bcd3830100000000000000d6b8bf14000400fe8000000000000000000000000000bb0c000200050001000000000006000300000200003c0002000c00020005000100000000002c00010014000300fe88000000000000000000000000000114000400ff020000000000000000000000000001080007000000000010000d000c000300040002004e2300008c000e002c00010014000300fe80000000000000000000000000001414000400fe8000000000000000000000000000bb46000300000300002c0001001400030000000000000000000000ffffac14140b140004004a925aa0ddf34330053d13c7087769421400010008000100ac1414aa08000200ac1414340c00020005000100110000000600030000040000"], 0x138}}, 0x0) 16:24:14 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x4, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) [ 604.163117] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 604.243501] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 604.254116] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 16:24:14 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 604.328965] hfs: creator requires a 4 character value [ 604.340901] hfs: unable to parse mount options [ 604.392196] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:24:16 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0x43}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x21) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r2}, 0xc) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) fsync(r4) bpf$PROG_LOAD(0x5, 0x0, 0x0) 16:24:16 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setns(r1, 0x10000000) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x770000, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$EVIOCSABS3F(r5, 0x401845ff, &(0x7f0000000040)={0x8, 0x331, 0x10000, 0x8, 0x9, 0x5}) 16:24:16 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x5, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:24:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:24:16 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x401, 0x400000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}, {@cache_fscache='cache=fscache'}]}}) clone(0x80e8000, &(0x7f0000001280)="eee7c637a59a2e397eaec7411055c891509dbbadcbe5b97f3f96af4442bf574a9fd35f9a313fa88592d0eb6f58ab7c213569bcc8b2228e9e28807a96cbc64e226429d758b9ee4c467318b4e214bb76498bd67020f54b4c0d6bec360e1cad501095b2558472bbf92ba8b8acef1fa3ed8e4de5e32d9e6b2e97596ab31e6fef0fc1ce8de3e942b0acb4419a5d6516edeb20feb30f76bc529f054abff435c0220616689a560d63de17ce5662a9f9bd93915020eaf841075e1bf29a7eb71cceb4b2e63752f6df6c3831279962c8b2bbbe499513ec59b4751434934c6ee2be7a2971bfbd7fc9532ff130f9640b9a26", &(0x7f0000000140), &(0x7f0000001380), &(0x7f00000013c0)="158a49de0706f1e692f7200976c2f2870db1af1ee824d47ef78fe8b851083f9d49c26a19a0bfa2553d6b332ba8b35e2a207074e9be7b684489f19fc425d72c97f0e0da3d4745f4d0df18a7ceddcfbe7fc1af937e24d4de824ca0f0369845ca64231af192f2bceb4b77bead46d14bc34358c706127aaa6a428ef547378e9ae554bca06ad6b9c27ec636857de5f0fb498287671260d72991a148b82391e040bdf65a6deb398870958591db46612e982d19217506d8d09a5330958fa2562974add8056b523df800cdb108") ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000040)) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000000)=0x1, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getpeername$netlink(r3, &(0x7f0000000240), 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') syz_emit_ethernet(0x32, &(0x7f0000000100)={@local, @random="a4a34f9a4a11", @void, {@generic={0x5, "3e1ed2e210d9625886d6faa82e561315af14b98709eaeebd69a3816c9b0ae64bf5e1b2b1"}}}, &(0x7f0000000200)={0x0, 0x2, [0x1bb, 0xf68, 0x39e, 0xccd]}) read$FUSE(0xffffffffffffffff, &(0x7f0000000280), 0xfffffed3) 16:24:16 executing program 4: r0 = getpid() sched_setscheduler(0x0, 0x6, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x7, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000140)={0x0, 0xbc6b, 0x0, 0x200, 0x2}, &(0x7f0000000180)=0x18) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r2, 0x3, 0x10000}, 0xc) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) ioctl$DRM_IOCTL_GEM_CLOSE(r4, 0x40086409, &(0x7f0000000100)={r7}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r9 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x348) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) r10 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r10, 0x8982, &(0x7f0000000200)) close(0xffffffffffffffff) write(r8, &(0x7f0000000600)="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", 0xe00) fallocate(r8, 0x11, 0x0, 0x0) sendfile(r8, r9, 0x0, 0x12000) [ 606.422008] audit: type=1800 audit(1583079856.763:137): pid=21261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=17928 res=0 [ 606.453756] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 606.474702] l2tp_ppp: tunl 2: set debug=b9e [ 606.488002] hfs: creator requires a 4 character value [ 606.518492] audit: type=1804 audit(1583079856.763:138): pid=21261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir917230067/syzkaller.7IUljM/501/file0" dev="sda1" ino=17928 res=1 [ 606.535122] hfs: unable to parse mount options 16:24:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:24:16 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, r5, 0x709, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x102, 0x0) write$P9_RREMOVE(r6, &(0x7f0000000180)={0x7, 0x7b, 0x2}, 0x7) [ 606.605156] l2tp_core: tunl 2: closing all sessions... [ 606.612385] l2tp_ppp: tunl 2: set debug=b9e [ 606.643539] l2tp_core: tunl 2: closing... 16:24:17 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x6, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) [ 606.685125] l2tp_core: tunl 2: closing all sessions... [ 606.704004] l2tp_core: tunl 2: closing... 16:24:17 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = getpid() prlimit64(r0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) setuid(0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, &(0x7f0000001fd8)=ANY=[], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, [], r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x2, 0x10}, 0x10}, 0x78) fadvise64(r7, 0x0, 0x0, 0x2) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400, 0x0) ioctl$EVIOCGPROP(r8, 0x40047438, &(0x7f0000000180)=""/246) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r7, &(0x7f0000000740)={0x4}) kcmp(0x0, 0x0, 0x2, r7, 0xffffffffffffffff) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r9 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x800, &(0x7f0000000ac0)=ANY=[@ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="fbc033198f69cd88f37201ebc253faac3b4ff545d3fdd56745f36ca99efb123a20633adc8e0b51", @ANYRESOCT=r9, @ANYBLOB="ab1ed3bee9e591ef2566bccb28e1b3b4cb1f5d5f829c4b712d5238cf617d853f16baa13602ee639c5dda0e4569824769ae458deb0c862e062675348a18498cdf8e1b911e487eddcb0037419b4373667d3a30b9151387c7ce7dd594c790048524b4bcdd907fc740633d36d4d6504fbe6d"], @ANYRESDEC=0x0], @ANYRESHEX, @ANYRESDEC, @ANYBLOB]) setgid(0x0) fchownat(r2, &(0x7f00000000c0)='./bus\x00', r6, 0x0, 0x0) dup2(r2, 0xffffffffffffffff) 16:24:17 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) perf_event_open(&(0x7f0000000180)={0x4, 0x70, 0x3a, 0x8, 0x3, 0x40, 0x0, 0x3, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x7fff, 0x4, 0x2, 0xfb9, 0xaa0b, 0x7}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = getpgrp(0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000300)=0x81) accept4$netrom(r3, 0x0, &(0x7f0000000000), 0x0) getsockname$unix(r2, &(0x7f0000000280)=@abs, &(0x7f0000000200)=0x6e) prctl$PR_GET_TSC(0x19, &(0x7f0000000100)) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="001400028008000709ff7f000088000300030000000000000000000000008b2d9336d819750f50891ce4fb9837352e70ad8a5ce19da270195dbbf0fa6fa0"], 0x44}}, 0x0) [ 606.742626] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:24:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 606.871680] hfs: creator requires a 4 character value [ 606.887034] hfs: unable to parse mount options 16:24:17 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000100)=0x2, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r5 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x2000c005) recvmmsg(r5, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001380)=""/4096, 0x117b}], 0x1}}], 0x1, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'vlan0\x00', 0x2}) [ 606.915355] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 606.959097] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. 16:24:17 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x7, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) [ 607.031940] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:24:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:24:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000030028005000a00010000000800020041cbac3560a7584875f110a5ac1414aa06001d0004000000060012004e03110008000a00", @ANYRES32=0x0, @ANYBLOB], 0x58}}, 0x0) 16:24:17 executing program 4: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="050000fba0802a"], 0x1}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x6, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x2, 0x2, 0x6, 0x1}}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0xffffffffbffffffd) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 607.265715] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 607.280028] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 607.299025] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 607.302685] hfs: creator requires a 4 character value 16:24:17 executing program 2: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x10) r1 = getpid() tkill(r1, 0x800000015) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a1}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x25d) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) ioctl$KDDISABIO(r3, 0x4b37) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r8 = socket(0xa, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x1c, 0x2, 0x0, 0x1, {{0x8}, {0x8}, [@IFLA_GTP_FD0={0x8, 0x1, r8}]}}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x50}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], r7, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) getpid() r9 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065ffff01c0400008003950323030302e4cc7450200d74ed8a60ab563e98b592a3d27a7082dbb78ab0200ba3da8b7f56445ab100621d6234555c08dc5404738f10004fd1b3786cd89e9b08e3f5972fe9ca1e86323e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679071b000000000000d7db000000000083e37f932a7b78b9591bef452c7e1dd5abdba8afe51cf610691e711b8e34b1cd3e381a3acaecbbbe3aef8276ad68f0ba06d89dbb3b8ed6f87d1a0e28473d5398120b473c5e2551d7cf451c200ce5d3552c75d5d409e520898944cd82986ec5c6e6f111e4a87a46d53729c2681e27a61882c79fe53ea09892421e4b844f270944ecefd922cf3fedf617b6b3b10f570cf0dc4dbe5f5befddb7a1bdb46bb54de96c03736c134ffb2ada85e2a1cb9ca00000000000000000760f9719c411f73f750a374c9df5661688873221bf05f90c411f25205cb8b47ed9d838a164ec8dbfcec3b83e7ca78f431e00cb5e2d954f1ca2a51ca356c63a343ef23c3152a1c890aa204f40eb707d7683ae6a7bddf2d6c99ebee73ea5ffded233ae55616bf392115d489b14b3f2f8c5b894944e02123916299ebc4f54d1a72acbc3337be55bf88bcbea2fcd0419aa445491fb0767e5c28e3f51252c0c4e8cdea6201626411609e3081f12eb1b165e1271da7282d26c298ebd5d4f6276045f7148a8049faca8ef29138073ae21306f518abfd87b5b025643253076840635203565d1d29ab8b77810d5fbbb267af8f970117ebe111208d5604a506d7723563253ef6b4b81aa5df0dc99b81b44c59e64c5f8f365a6bee1f02c4717098b0a271a4d6d8a42cf35b106cdc88d35562666278a5b5babd534da188cdbccf97110497f35c52e5aab5efdcba025583a74af7e0308a8663eaaa86c27d48e0d7933aaf36eab1007987ca79d2c1e5cbb8f39f16d2c1f8fb29256c77563169125aed58f24d7f83da72c5caa30f6f2a0"], 0x216) r12 = dup(r11) write$FUSE_BMAP(r12, &(0x7f0000000100)={0x18}, 0x18) r13 = socket$inet(0x10, 0x2, 0x0) sendmsg(r13, 0x0, 0x0) r14 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(r14, 0x84, 0x11, &(0x7f0000000240), 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r13, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x7000000}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r12, 0x84, 0x66, &(0x7f0000000500), &(0x7f0000000540)=0x8) write$P9_RVERSION(r10, &(0x7f0000000280)=ANY=[], 0x0) dup(r10) 16:24:17 executing program 0: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f00000000c0), 0x12) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000880)="b1", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$USBDEVFS_CONNECTINFO(r8, 0x40085511, &(0x7f0000000080)) write$cgroup_int(r4, &(0x7f0000000200), 0xe00) [ 607.324376] hfs: unable to parse mount options 16:24:17 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x50, r2, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x10) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, &(0x7f00000000c0), 0x8080fffffffe) r6 = getpid() tkill(r6, 0x800000015) sched_getscheduler(r6) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r7 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self\x00', 0x109002, 0x0) sendfile(r5, r7, &(0x7f00000003c0)=0x3, 0x10000) 16:24:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:24:17 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0xa, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:24:17 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x3d, 0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/133, &(0x7f0000000340)=0x85) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e20, @dev}, 0xfffffffffffffe0e) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)={[0xffffffffffffffff]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:24:17 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000080)=0x401) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, &(0x7f0000000040)=0x100060, 0xa808) r5 = socket$inet6(0xa, 0x5, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x48, &(0x7f00000000c0)={@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$VT_OPENQRY(r8, 0x5600, &(0x7f0000000140)) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000000c0)=0x0) fcntl$lock(r5, 0x24, &(0x7f0000000100)={0x1, 0x4, 0x81, 0x1f, r9}) [ 607.681527] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 607.696490] hfs: creator requires a 4 character value [ 607.710012] hfs: unable to parse mount options 16:24:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3801000000011905d4020000000000000a000000440001002c0001001400030016f8bcd3830100000000000000d6b8bf14000400fe8000000000000000000000000000bb0c000200050001000000000006000300000200003c0002000c00020005000100000000002c00010014000300fe88000000000000000000000000000114000400ff020000000000000000000000000001080007000000000010000d000c000300040002004e2300008c000e002c00010014000300fe80000000000000000000000000001414000400fe8000000000000000000000000000bb46000300000300002c0001001400030000000000000000000000ffffac14140b140004004a925aa0ddf34330053d13c7087769421400010008000100ac1414aa08000200ac1414340c00020005000100110000000600030000040000"], 0x138}}, 0x0) 16:24:18 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x10, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:24:18 executing program 0: prctl$PR_SET_SECUREBITS(0x1c, 0xf) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r1, r1) open(&(0x7f00000001c0)='./file0\x00', 0x80344, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) open(&(0x7f00000000c0)='./file0\x00', 0x101e00, 0x0) [ 607.875558] audit: type=1804 audit(1583079858.223:139): pid=21357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir941147746/syzkaller.oAoeCv/571/bus" dev="sda1" ino=17950 res=1 16:24:18 executing program 4: ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000180)={0xa00000000000000, 0x5000, 0x3ff, 0x3, 0x1}) io_setup(0x3, &(0x7f00000001c0)=0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ocfs2_control\x00', 0x210002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = getpid() tkill(r5, 0x800000015) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r4, 0xc1105518, &(0x7f0000000380)={{0x0, 0x4, 0x1c0, 0x3, 'syz1\x00', 0x41}, 0x5, 0x3, 0x2, r5, 0x4, 0x1, 'syz0\x00', &(0x7f0000000300)=['/dev/ocfs2_control\x00', '/dev/ocfs2_control\x00', 'ppp0\'$\x00', '(eth1{}userem1@:.vmnet0bdeveth1-\x00'], 0x4e, [], [0x8, 0x5, 0x81, 0x9a3f]}) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000000240)={0x0, 0x0, [], @bt={0x10000, 0xe6, 0x2000000, 0xf0000000, 0x8000, 0x6, 0x3, 0x2}}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r1}) getsockopt$bt_sco_SCO_CONNINFO(r6, 0x11, 0x2, &(0x7f00000000c0)=""/79, &(0x7f0000000140)=0x4f) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$VIDIOC_S_PARM(r8, 0xc0cc5616, &(0x7f00000004c0)={0x3, @raw_data="562eaed24760e1329e2bea9dad42c603ff9534ffc93a0d20ecc40f9aa6f38bedfa1173edaf8ea3a7e803288420e1f2e1e359d3982a108d9837347b67da27586478203e2a9383c4ca0ed468f969f872c726e15ee86a1f5f28c1ceed0977932d7cb61e7ba809c42817efd2832396db3d3c870281f8254f40949b62e45262380e495d8c5f0cb7845def5f41451bf11e03b8fa4682a6eb7820c4469c4b001693c36c79335d00d243f120917d895fac7d16e7947ca447e31cf992c6bec605ccc0b70043e81b6f0a3eea5d"}) r9 = socket$tipc(0x1e, 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r9, 0x0}]) [ 607.983695] hfs: creator requires a 4 character value [ 608.001530] hfs: unable to parse mount options [ 608.008918] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:24:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 608.155406] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:24:20 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000009400)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x83, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60940000004d8800fe800000000000000000000000000000ff02000000000000000000000000000100004e20001e9078e29607149378d33e23b1c73936c77abf25ae4fc4f5d282074ad17bb2401ea3f7fa9f11cf1ac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429"], 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x2, 0x9, 0x1}}, 0x30) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) poll(&(0x7f0000000040)=[{r2, 0x10}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000140)=0x5b8d, 0x4) 16:24:20 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x22, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) [ 610.430245] hfs: creator requires a 4 character value [ 610.453559] hfs: unable to parse mount options 16:24:21 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000300)={0x0, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x2, 0x7, 0x0, 0x400000000000000}, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x44c1, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x3) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/netlink\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@textreal={0x8, &(0x7f0000000580)="baf80c66b898c4fb8866efbafc0c66ed0f009d45c2baf80c66b8adbc838166efbafc0cb0deeebaf80c66b8acce6d8966efbafc0cb87499ef66b9750200000f32d10f0fc73c3e0f01cb640f009de6000faee9", 0x52}], 0x1, 0x28, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r4) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r6}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f0000000340), r6, 0x2}}, 0x18) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r7 = syz_open_procfs(0x0, &(0x7f0000000380)='net/netlink\x00') syz_open_procfs(0x0, &(0x7f0000000380)='net/netlink\x00') close(r3) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x1, 0x2, 0x0, 0x40000, 0x0, 0x10000], 0x0, 0x84092}) openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x10140, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @local, @multicast2}, 0xc) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000600)={0x0, {{0x2, 0x4e24, @multicast1}}}, 0x88) ioctl$KVM_RUN(r3, 0xae80, 0x0) 16:24:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:24:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001000096368fe07072b03003700000a0014000300450201070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) 16:24:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="004e7c7c5b8a00001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x220800, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) 16:24:21 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x2c, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) [ 610.917520] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:24:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:24:21 executing program 2: ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000000c0)={0xfffffff, 0x7ff, 0x80, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x990a7e, 0x10000, [], @p_u32=&(0x7f0000000000)=0x3}}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, &(0x7f0000000100)={0x1}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x400, 0x100}}) [ 610.982222] hfs: creator requires a 4 character value [ 610.993097] hfs: unable to parse mount options [ 611.004117] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 16:24:21 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x48, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) [ 611.130277] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:24:21 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x4800, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00160013001d0400000000000000000000003f", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a0010000000140003006970766c616e31000000000000000000"], 0x3c}, 0x1, 0xf0}, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000000)={0x1000, 0x1, 0x8, 0x7f, 0xed4}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000100)=0xe) [ 611.230544] bond1: making interface bridge4 the new active one 16:24:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:24:21 executing program 2: socket$phonet_pipe(0x23, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) setuid(r3) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x3) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="6560000000b7f061971513405ea803a4b4950000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000540)=0x38) fadvise64(r6, 0x0, 0x8000, 0x2) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400, 0x0) ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000a80)=0x0) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000740)={0x4}) kcmp(r8, 0x0, 0x2, r6, r5) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f00000000c0)={0x67, 0x5, {r8}, {0x0}, 0x7f2b15d7, 0x3}) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x800, &(0x7f0000000780)=ANY=[@ANYBLOB="7f2626e991039ac75ea27546638533cfe5e44f9f493954c993040865c48c8a1bc91f6597d6b15e8225bb4b86d6f6c4f1d533200d3ad974c85653", @ANYRESHEX, @ANYBLOB=',ro000000000000000010000,usr_id=\x00@\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESDEC=r9, @ANYBLOB="2c67726f757036a7aeaab788765f69643d09e8af42572ee4da90cc24e3b7c33e23333d48d0a2ae02f75bba4b43c859cf76e963547629164f241bd21f032ce060447949ad052371ad54cff9293f997b262e5ab3af48aaa20dceb0267f4dbecbc30740f99fba6200ef0d858bbe0d89799b8c8bb6e0daf931c7204e", @ANYRESDEC=r10, @ANYBLOB="2c6d61785f726561643d3007000000300230303030303030346331392c626c6b736980653d3078303030303051303030303030303630302c646f6e745f6d6561737572652c7569643e", @ANYRESDEC=0xee00, @ANYBLOB=',subj_user={bdev,smackfstransmute=/dev/kvm\x00,\x00']) setgid(r10) fchownat(r1, &(0x7f00000000c0)='./bus\x00', r3, r10, 0x1000) r11 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r11) [ 611.273993] bond1: Enslaving bridge4 as an active interface with an up link 16:24:21 executing program 4: setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000100)=[@sack_perm, @sack_perm, @timestamp, @mss={0x2, 0x3ff}], 0x4) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x210001, 0x0) ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000000140)=0x80000001) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb", 0x2}, 0x20) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000180)={'IDLETIMER\x00'}, &(0x7f00000001c0)=0x1e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x44, r4, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x1c, 0x22, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xef}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x100}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x40) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="00be64b2d3459633e0d101ac732c8bd229a765ea43c7d455cbfe4046dde56a654b581fba79741d6ccc64ebd429c6d150eedd586abdb98d371e13896b9ab357994737995133b03965472aa08ded6161f5f48a2a91afbafb3b9484fa66b37d8fda87f1f7d1693a5ba623e6e0823c2b92fbda808289effa0cdd79df53c5e1d5c08d7c119ef4f032fb9eefd90612c4d01040c84c0d64d3735bb66fcf8328c2caba38aa563c753cf0da0ad4ab90f5c88537cc1d8ea03abd88970d2a61e5f22eae897c07e16b0dfd069ac80056806724c7949422efb6d309f56127ba16b40c29b76bfd7affb5"], 0x3}}, 0x20000080) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r3, 0x20, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40804}, 0x4040000) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xfe28, 0x400}], 0x10, 0x0) [ 611.379879] hfs: creator requires a 4 character value [ 611.393611] hfs: unable to parse mount options 16:24:21 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}], 0x1c) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) nanosleep(&(0x7f0000000180)={r4, r5+30000000}, &(0x7f00000001c0)) dup3(r3, r0, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) fanotify_mark(r7, 0x4, 0x8000001, r2, &(0x7f0000000100)='./bus\x00') r8 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) write$UHID_GET_REPORT_REPLY(r10, &(0x7f00000000c0)={0xa, {0xa, 0x1e, 0x40}}, 0xa) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x1}, 0x10) ftruncate(r8, 0x3) sendfile(r0, r8, 0x0, 0x80001d00c0d0) 16:24:21 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x4c, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) [ 611.469207] validate_nla: 1 callbacks suppressed [ 611.469216] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 611.528113] EXT4-fs (loop4): Unrecognized mount option "€" or missing value [ 611.549384] EXT4-fs (loop4): failed to parse options in superblock: € [ 611.571216] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended 16:24:21 executing program 0: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x200}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000000c0)}, 0x800000020000023a, 0x200008000083, 0x20000}, r0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcd86041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20fcb37164567ec336a825686dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56d", 0x94, 0x1}], 0x1044c8, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x8) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', 0x0, 0x0, 0x1, &(0x7f0000000100)=[{0x0, 0x0, 0x400}], 0x4801, 0x0) 16:24:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 611.618346] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 611.669352] EXT4-fs (loop4): bad geometry: block count 1080 exceeds size of device (32 blocks) [ 611.806110] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 611.861368] hfs: creator requires a 4 character value 16:24:22 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(r0, 0x0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x3) mkdirat(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000240)={0x4e, 0x6, 0x0, {0x0, 0x6, 0x25, 0x0, '}trusted/\']-!\xd1}eth0.userkeyringcpuset'}}, 0x4e) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$security_capability(r1, &(0x7f0000000000)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [{0x8, 0x7}, {0x0, 0x10000}], r2}, 0x18, 0x2) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r4, 0x400000001ffffffd) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg(r6, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) socket$netlink(0x10, 0x3, 0x12) 16:24:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3801000000011905000a0000000000000a000000440001002c0001001400030016f8bcd3830100000000000000d6b8bf14000400fe8000000000000000000000000000bb0c000200050001000000000006000300000200003c0002000c00020005000100000000002c00010014000300fe88000000000000000000000000000114000400ff020000000000000000000000000001080007000000000010000d000c000300040002004e2300008c000e002c00010014000300fe80000000000000000000000000001414000400fe8000000000000000000000000000bb46000300000300002c0001001400030000000000000000000000ffffac14140b140004004a925aa0ddf34330053d13c7087769421400010008000100ac1414aa08000200ac1414340c00020005000100110000000600030000040000"], 0x138}}, 0x0) [ 611.912532] EXT4-fs (loop4): Unrecognized mount option "€" or missing value [ 611.924537] EXT4-fs (loop4): failed to parse options in superblock: € [ 611.928917] hfs: unable to parse mount options [ 611.932730] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 611.945973] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 611.993803] EXT4-fs (loop4): bad geometry: block count 1080 exceeds size of device (32 blocks) 16:24:22 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) r3 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x11, 0x9, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000018100000", @ANYRES32=r2, @ANYBLOB="000000000000000018100000d7beb975a051fbd26d77483f3e467c7c8bb29e27575ab6a829226b96835aa6c3db4529f697c1bbcd40f2dc3aa68dfe1eda093662450099d3210b485b7727ec6ee1dde846f7b14c02cda331a2d0e883edcbbf2f9b74c8e1649aa584e0d37642d2c13f958d28a003e818984bf8742092", @ANYRES32=r3, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="e461f6b31a6054cbb78f376a537ff0acfea9e71eb1e6a6620000b1ec46fe4abcf5b4f268a10e000000000000bbf80ed706f7232dcc"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r4, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3b}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40810) 16:24:22 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x68, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:24:22 executing program 4: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) symlink(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='./bus/file1\x00') mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"]) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') unlink(&(0x7f0000000100)='./bus/file0\x00') [ 612.206022] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:24:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002f0000001400000000fbff0f95000000000000005183ea44d49244c8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r3, 0x40044103, &(0x7f0000000000)=0xa0fc) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x800, 0x70bd24, 0x0, {0x0, 0x0, 0x0, 0x0, 0x402, 0x20220}}, 0x20}}, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) 16:24:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 612.316472] hfs: creator requires a 4 character value [ 612.329947] hfs: unable to parse mount options 16:24:22 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x6c, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:24:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000340), 0xffffffffffffffff) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$inet(0x2, 0x2000000080002, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000840)=@broute={'broute\x00', 0x20, 0x2, 0x129, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f0000002400)=ANY=[@ANYRESOCT=0x0, @ANYPTR, @ANYPTR64=&(0x7f00000013c0)=ANY=[@ANYRESOCT, @ANYBLOB="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"], @ANYRESHEX, @ANYBLOB="8bdfe7be9438a2a5912f8a2f5802d394a9e28f0eeac6eaafcfe25979d5856f7b47b70c00c73585f7e99665143338246218267b6e061ea5c92c562784dd24a87716ca90902d5006a9190b8965aebc1e7ebbf200800f8541c6f8caae915f1bd0626c9c229ed30745e2891ce1869a2d3e92082a4c4bb70057fdb302f2870ffe17fa7f3688d891b74bae0e36671834a958d070607b627dbcaadb247a7b51a8321ab585b4498983f07341461aa0b7279fb0e287ce40a64ab5327f7730d02351f795b54860075b0595c2a23c28febbed32b4581b63d61ecd02443c5acd6f6368ac91f701be134134ac55d9416820f2", @ANYRES32]}, 0x1a1) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB]}, 0x78) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000100], 0x2, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000b40], 0x2, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB]}, 0x78) r3 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) pwritev(r3, &(0x7f0000000080)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) fallocate(r3, 0x20, 0x0, 0xfffffeff000) fallocate(r3, 0x0, 0x0, 0x10000101) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000380)={{{@in=@broadcast, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6=@loopback}}, &(0x7f0000000000)=0xe8) [ 612.512791] overlayfs: unrecognized mount option "workƒ4V¡"iQ±ØYÏÌ(÷¥" or missing value [ 612.537937] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:24:23 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f00000002c0)=ANY=[]) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f00000001c0)=[@in6={0xa, 0x82, 0x9, @local, 0x3}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e23, 0x5, @loopback, 0x8}], 0x58) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000280)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r6, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x44, r7, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x1c, 0x22, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xef}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x100}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x40) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r7, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x721}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x1ee}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x10001, 0x2}}, @NL80211_ATTR_MAC={0xa, 0x6, @local}]}, 0x44}, 0x1, 0x0, 0x0, 0x40012}, 0x28000) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x1, 0x400}, &(0x7f00000000c0)=0xc) accept$unix(r3, &(0x7f00000002c0), &(0x7f0000000240)=0x6e) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000100)={r8, 0x8000, 0x4, 0x9}, &(0x7f0000000140)=0x10) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 612.648266] overlayfs: unrecognized mount option "workƒ4V¡"iQ±ØYÏÌ(÷¥" or missing value 16:24:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:24:23 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000140)={0x4, 0x8}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="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", @ANYRESHEX=r1, @ANYBLOB=',posixacl,\x00']) [ 612.794949] hfs: creator requires a 4 character value [ 612.813466] hfs: unable to parse mount options [ 612.953967] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 613.108568] 9pnet: Insufficient options for proto=fd [ 613.173099] 9pnet: Insufficient options for proto=fd 16:24:23 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x74, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:24:23 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0xb, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000180)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r5 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r6) sendmsg$unix(r4, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r8 = getpid() r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r10) sendmsg$unix(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r8, r10, 0xee00}}}], 0x20}, 0x0) lstat(0x0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r12, 0x4c80, 0x0) r13 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r13, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r13, 0x4c80, 0x0) accept$ax25(r5, 0x0, &(0x7f0000000640)) r14 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r14, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r14, 0x4c80, 0x0) fstat(r14, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) getpid() socket(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r16) r17 = getegid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) getresgid(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) r19 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r19, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x1) sendfile(r19, r19, &(0x7f0000000240), 0x7fff) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000080)={0x28}, 0x28) statx(r19, &(0x7f0000000380)='./file0\x00', 0x6000, 0x100, &(0x7f00000003c0)) r20 = getpid() r21 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r22) sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r20, r22, 0xee00}}}], 0x20}, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000700)=ANY=[@ANYBLOB="02000000010002000000000002000200", @ANYRES32=r3, @ANYBLOB="02000100", @ANYRES32=r6, @ANYBLOB="02000700", @ANYRES32=r22, @ANYBLOB="02000000", @ANYRES32=r11, @ANYBLOB="02000300", @ANYRES32=r15, @ANYBLOB="02000410326180f510b15f8673e3bb710b97aa72301f00d14005597974a98c144b8c58c396ff00"/54, @ANYRES32=r16, @ANYBLOB="040006000000000008000100", @ANYRES32=r17, @ANYBLOB="08000200", @ANYRES32=r18, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="10d2a2d06df3fb7fc0994c420073bb090000000096552dfeffff2000040400000000"], 0x6c, 0x1) 16:24:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:24:23 executing program 3: socket(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) ioctl$sock_SIOCDELRT(r1, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0xffff, @remote}, @in={0x2, 0x0, @dev}, @sco, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000380)=[{{&(0x7f0000000500)=@generic={0x1e, "613bb88890d10b2cc683620d4093da04fff392e9f131a82dd9ab7cf51b9c1c00f63fe7fcac845846c811063dd3c0cd75ea9b71eaeb4c57bdb5e519d456eb315f20c319258c65902ee895bc19b1aeb84ce280857aeffccfa07b8482f58a6acc871254077c94002afa90b228f328695afbf342aa4a88a8a9feb22d0cc45ca9"}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @loopback}, 0x10) recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xa000000}], 0x1, &(0x7f0000000200)=""/20, 0x14, 0xb01001f1}, 0x0) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000100), &(0x7f00000001c0)=0xc) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"}) r6 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000000)=@v2={0x2, @aes256, 0x4, [], "e1869c810c5e807bb8095d8f634ad65e"}) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2) read(r6, 0x0, 0x6c00) dup2(r0, r6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x3d, 0x0, 0x1}) 16:24:23 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$char_usb(r1, &(0x7f0000000000)="2489ac9ee5fd2871f9c16041fe9ccf6c77fef2bb7e9b5b864da2c2284757baa8ca66a1e8307e71b0a653f6ee94d55463c54a747231fd44a2635ee10dd8", 0x3d) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x11) sendmsg$kcm(r2, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x10]}}, 0x80, &(0x7f0000000cc0)=[{0x0}, {&(0x7f00000008c0)="b6f8d5025efc404e98e3a7fbf94fa81d1d1dfb45688704a3e1ae2ea5a045332f7e10f38ec46a9a5ab67149c4e9f69bdeac4d40012c4263c91f52ba318017651ce36894bb752ce7a79dba5e1592b4d8852cb081e2188c09a97d3ce0a992ac6fcdb07515a56907bff421722b200f2da42496a8d848d6352eed2419fb80470e53ae6a07868e50e06bce58466e5833422a7fb80ca8080a71838a628688de46c652ae1a6d01205bfa91de664da1cfa2cab1dc3e064cc88a", 0xb5}, {0x0}], 0x3}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socket$kcm(0x29, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0185879, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000980)={0x101, {{0xa, 0x4e24, 0x5, @mcast1, 0x40}}, 0x0, 0x5, [{{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x3}}, {{0xa, 0x4e20, 0x5, @ipv4={[], [], @local}, 0x6d}}, {{0xa, 0x4e23, 0x6, @empty, 0x8001}}, {{0xa, 0x4e20, 0xfffffffc, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2}}, {{0xa, 0x4e21, 0xa3f0, @empty, 0xbb}}]}, 0x310) socket$kcm(0x10, 0x2, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7e79, 0x20}}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x191}, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, &(0x7f0000000040)) 16:24:23 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, &(0x7f00000001c0)={0x2, 0x100, "7f319959e189ec4d3e3c8b977c8838678e05626d495daf895c29ee6e5b4b692c", 0x6, 0x101, 0x2, 0xfffffff7, 0x126}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = socket(0x2, 0x802, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x32) r5 = open(&(0x7f0000074000)='./file0\x00', 0x141046, 0x0) write$P9_RXATTRCREATE(r5, &(0x7f0000000300)={0x7}, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendto$inet(r7, &(0x7f0000000100)="985afae7c5414bb94147cf3e81feb1baaa4bc6314f0d1c5a03798f165a349ad495e1a73c3ef06c623ed45c9204153a0df716efc8c78cc18b9e38bae04b4cc7493190a07667edafdd6a1d5d01539259fd118983793072973c896b47208363749a2c096da3c974898bff92b4be4a5adb3761ebcc4a9ceebb1dedf02cceca2570f34cc152932385e3a3f8873be3a8f7dd32d47adb418a6a2e6ab870e6995083f03c3a8bd4397eefb8bf71d3500a669857d4b3bd", 0xb2, 0x20000000, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) ftruncate(r5, 0x8007ffc) sendfile(r4, r5, 0x0, 0x400008bca) [ 613.447903] hfs: creator requires a 4 character value [ 613.457324] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 613.476163] hfs: unable to parse mount options 16:24:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:24:24 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000000001010400000000000000007a001b00003c00028004000214000300fead9a000000000000000000000006000000040000000000000000000000ffffffffff00"/80], 0x50}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$VIDIOC_S_JPEGCOMP(r2, 0x408c563e, &(0x7f0000000040)={0x0, 0xc, 0x37, "42bfb26e987f1075d69bc572d14fa8ec5d8f1babc21603420ec7a97406906e39711a44970371a856635a857cc7b4726776ad25f22cb4f1b051450a6c", 0x3c, "87323f966d6e140daf270960a3a8dc7a649bb83dca608a9056eb2d5ec5fdef8068f4febadcc34b1931b1ba6e15495ed22ae9002ea44ec8a1bf0e6dc0", 0x30}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCXONC(r2, 0x540a, 0x0) 16:24:24 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) getpid() ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r2 = epoll_create1(0x80000) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000000)={0x0, 0x1ff, 0x116f, 0x2f3fc192, 0x2}) listen(r1, 0x100000001) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef}, 0xe) recvmmsg(r3, &(0x7f0000004300), 0x3a4, 0x0, 0x0) 16:24:24 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) open$dir(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000240)={{0xa, 0x4e24, 0x3, @mcast1, 0x1}, {0xa, 0x4e24, 0x0, @rand_addr="fafc363354815742aff4bc730f292c90", 0x5}, 0x0, [0x40, 0x0, 0x1ff, 0x10000, 0x5, 0x1, 0x9, 0x1f]}, 0x5c) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000040)={'filter\x00', 0xc, "7a3112d9ee36e2bf0593ab90"}, &(0x7f00000002c0)=0x30) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) clock_gettime(0x0, &(0x7f00000000c0)={0x0}) futex(&(0x7f0000000140)=0x2, 0x8b, 0x2, &(0x7f00000001c0)={r2}, 0x0, 0x0) [ 613.884957] audit: type=1800 audit(1583079864.233:140): pid=21569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=17981 res=0 16:24:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 613.957044] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:24:24 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x7a, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) [ 614.176337] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 614.186018] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 614.212519] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. 16:24:24 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x1, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) getpriority(0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$AUDIT_SET(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x3e9, 0x800, 0x70bd28, 0x25dfdbfd, {0x53, 0x3, 0x1, r2, 0x40, 0x3ff, 0x1, 0x0, 0x2}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x9801}, 0x40008) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r6, &(0x7f0000000780)={{0x1b, 0x5b, 0x34, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1068, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000000000}]}, 0x78) fcntl$setown(r6, 0x8, r2) 16:24:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:24:24 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000003c0)=0x5, 0x26) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) socket$nl_route(0x10, 0x3, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000740)='/dev/nvram\x00', 0x400002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() tkill(r2, 0x800000015) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x9, 0x40, 0x4, 0x8, 0x0, 0x8, 0x41, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x100000000, 0x8000}, 0x408, 0x5, 0x47, 0x0, 0x3, 0x4d, 0x8}, r2, 0x4, r4, 0x1) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000090}, 0x20004010) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0) [ 614.394089] hfs: creator requires a 4 character value [ 614.439266] hfs: unable to parse mount options [ 614.510856] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:24:24 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x300, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:24:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 614.730713] hfs: creator requires a 4 character value 16:24:25 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = socket$caif_seqpacket(0x25, 0x5, 0x4) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RFSYNC(r1, &(0x7f0000000000)={0x7, 0x33, 0x2}, 0x7) 16:24:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 614.759644] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 614.768070] hfs: unable to parse mount options 16:24:25 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x3e4, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:24:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 614.999033] hfs: creator requires a 4 character value [ 615.029224] hfs: unable to parse mount options 16:24:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000040)={r2}) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x30}, 0x3}, 0x7a) listen(r3, 0xb9) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) recvmmsg(r4, &(0x7f00000018c0), 0x4000000000002ed, 0x2, 0x0) close(r4) accept4(r3, 0x0, 0x0, 0x0) close(r4) 16:24:25 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000240)=""/151, 0x97, 0x0, &(0x7f0000000040)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000005000000000000000000", @ANYRES32=0x0, @ANYRESOCT=r0, @ANYRES32=0x0, @ANYBLOB="b080d405cb0100d500000000000000004000505d528d6dcc3e61361f0883bbb461450e176e65025050212f8f797869858e6a07"], 0x5}, 0x1, 0x0, 0x0, 0x2c000081}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000017c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000001840)='TIPC\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KDSKBLED(r6, 0x4b65, 0x92) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000001900)={&(0x7f0000001800), 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x1c, r4, 0x400, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8030}, 0x40000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$EVIOCGABS3F(r8, 0x8018457f, &(0x7f0000000100)=""/127) 16:24:25 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file0/file0\x00', 0x100, 0xffffffff) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$6lowpan_control(r0, &(0x7f0000000140)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) r2 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x10000) 16:24:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:24:25 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x500, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) [ 615.243416] audit: type=1804 audit(1583079865.583:141): pid=21662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir917230067/syzkaller.7IUljM/512/file0/file0" dev="loop4" ino=118 res=1 [ 615.368232] audit: type=1800 audit(1583079865.583:142): pid=21662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="loop4" ino=118 res=0 [ 615.410675] audit: type=1804 audit(1583079865.613:143): pid=21662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir917230067/syzkaller.7IUljM/512/file0/file0" dev="loop4" ino=118 res=1 [ 615.454388] hfs: creator requires a 4 character value [ 615.469247] hfs: unable to parse mount options [ 615.472710] audit: type=1804 audit(1583079865.703:144): pid=21662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir917230067/syzkaller.7IUljM/512/file0/file0" dev="loop4" ino=118 res=1 16:24:27 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8460}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) r1 = socket$packet(0x11, 0x0, 0x300) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x100, 0x0) ioctl$TIOCNOTTY(r2, 0x5422) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r4) dup2(r1, 0xffffffffffffffff) dup3(r3, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000200)=@rose={'rose', 0x0}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x810) sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) creat(&(0x7f0000000280)='./bus\x00', 0x23) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r5 = socket$inet(0x2, 0x4, 0xe0) splice(r3, &(0x7f00000002c0)=0x2, r5, &(0x7f0000003700)=0x9, 0x3, 0x0) 16:24:27 executing program 2: r0 = creat(&(0x7f0000000780)='./file0\x00', 0xc2) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x3) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0xfd, 0x3f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd735b0039084f74e}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) r3 = socket$inet6(0xa, 0x5, 0x0) close(r3) r4 = socket(0x800000002, 0x20000000003, 0x7) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x22, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000700), 0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, 0x8) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000000)={0x0, 0x7, 0x4, 0x20000000, 0x8c, {0x0, 0x2710}, {0x3, 0x2, 0x8, 0x2d, 0xff, 0x3, "3b33e027"}, 0x802, 0x1, @fd=r2, 0xf8d, 0x0, r3}) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r5, 0x40184152, &(0x7f00000006c0)={0x0, &(0x7f0000000100)=[&(0x7f0000000080)="f45ebee408973626bad7687f8dbcf216f995eb911295dd06fb43b60a20af0fc54d5edd33ade7a78b41605992bfecf04ee57754278c2cbd49e3d37e425d5230518862f3525e2f35af0f4055a848834bcc3a77398dab07b99a4c", &(0x7f00000001c0)="ca7a555139b97f0402d09c82745b4649a471f6af1f8d7008d3f29c4adf5554807d1b288d78541164ac915439989cccbc69976cf26670c88f19533bb990372c7c79785e7a454b03617b6a0d5e4499b46493d576d1d50e04d0e3371d517ab50266b22ec396870d19e611a958387ce6f0108ee74e280fcf9c15b6e93ec7ddf5f75114d7f64d2b", &(0x7f0000000280)="0a437ac28f348ab2d063f5e83bd26f809cc05062de8564c729c82c0db9aa92e559154c1852ffa6062789f8cf0814898cdd11832b2a8cd3afeabb312d065b70dda68b71f190481e636a4f5b2e7617d1432789f0da8429b73b6c5455ebf92015fff3d2a2287252f36a7a07a878923f867b989fe159fff9932ea3fee413cef5231a0fcc3860db1abe58a8ee", &(0x7f0000000340)="b643dc1a81433019fc53fc9ba7c0e0ec21cd45d9900cdd4fc48a4553dd7aebce8085db6d43c884fecc315b655e0df522428b54cda787d8c3a2b8a25e66d67e5b65b8bc1d1b3173438e1786244cc4f87e761edba3036f4c054093ab0dbceeb32719f0bdf943f0af8f0f0140e9ff654ba8274f0e51bc439c964e9410beb61d06dbad2e76f13d6ea5b62df85451c6e5ab4f1ef18544ca0dd58b842935738d", &(0x7f0000000400)="7c4e838acb1c68aff096c035300ec2cdb08a633c6cb6eff1e8efdf6fb70ea75e161314ecb83c4621e127317b92306878a7f5bc8af728707a6998f3136bd2668efb68cc92cd3f1c464f244a076b619cd651238f13cec59c30677821eb9515dda9b98736b0ecd234a39125de07b7b31e117be9f1c4c20c8490728e12e88cf6a65841495a7197daefb0ce06e898842f034ec2d2e3", &(0x7f00000004c0)="d8c453747adeb12a486c5cd0365c8642d37a9b27821cb3b80f38da69ba8db99da6cf8ad8bcf71bfbe486ef7ef1ce404d4ea15ac010c6364a6608397e9c4e4d7c894b5ccb6bd756f2cbbb70b768628d75d4d3c3cb0d881d316251df0fa9e0fe9cb23f6a928c29c797bbba54eed4bc611c878a8debdb643723304cac635f2ce203984f9f0125a884591d926ac5404c7a3393e5e83904b76505399026a11e58667bcb7aac94f894717b6c3ae727927dda5907f5de31c1bc40788c1021e0c1e2dfe5911bec564cd4ff3b6ab160de00a097f9f028041663dd1dc31c3819972ec122dd637cc1f5902e62e62a35e3bf117ab59d90ae", &(0x7f00000005c0)="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"]}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000740)={0x0, 'macvtap0\x00'}) semctl$GETVAL(0x0, 0x0, 0xc, 0x0) 16:24:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:24:27 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x82201, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') creat(&(0x7f0000000000)='./bus\x00', 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="000826bc7000fddbdf074400000008560000070000003c638bdda420f899843687d24ebc7a6e5905b5f08b3bf9d98ff97fbac31922a08af3cf819a937f32a0cc19f857459c969ea625be0622e47c553be7bcbeac408477"], 0x1}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x2, 0x0, @local}, 0x10) r1 = socket(0x200000000000011, 0x4000000000080002, 0xdd86) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg$inet(r1, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="96c6322ea684879088175969ec15e10d40e4719016cbc15a36a88c6c843e12b1f5cb6a73613ceec274", 0x33}], 0x1, 0x0, 0x0, 0x534}}], 0x40001c0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e8}, 0x400081a0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6(0xa, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) 16:24:27 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = getpgrp(r0) setpriority(0x0, r1, 0xffff) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r3 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) geteuid() accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) shmget(0x1, 0x2000, 0x10, &(0x7f0000ffd000/0x2000)=nil) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) ptrace$getenv(0x4201, r4, 0xba, 0x0) connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x6, 0xa81) r5 = socket(0x1000000010, 0x80003, 0x0) write(r5, &(0x7f0000000000)="220000002100070777d000000900070102000009000000000020000305001380", 0x20) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000040)={0x0, 'batadv0\x00', {}, 0x3f}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000240)) syz_open_dev$vcsa(&(0x7f0000000500)='/dev/vcsa#\x00', 0xfffffffd, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f0000000540)) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) setuid(0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6(0xa, 0x5, 0xfc) sendto$inet6(r7, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@mcast1, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) stat(&(0x7f00000004c0)='./file0\x00', 0x0) socket$alg(0x26, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r3, 0x0, 0x20000102000007) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000100)={@empty, 0x2c}) socket(0x0, 0x0, 0x5) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000180)) memfd_create(0x0, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000004, 0x810, 0xffffffffffffffff, 0xffffc000) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1e, 0x10, 0xffffffffffffffff, 0x0) 16:24:27 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x600, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) [ 617.518050] validate_nla: 3 callbacks suppressed [ 617.518058] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 617.548742] hfs: creator requires a 4 character value [ 617.563039] hfs: unable to parse mount options 16:24:28 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x700, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:24:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:24:28 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x20000, 0x22) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r2, 0xc0bc5310, &(0x7f0000000140)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = dup(r5) ioctl$NBD_SET_SOCK(r4, 0xab00, r6) dup3(r3, r4, 0x0) [ 617.821907] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 617.857550] hfs: creator requires a 4 character value [ 617.889158] hfs: unable to parse mount options 16:24:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:24:28 executing program 3: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x4000, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x204080, 0x4) write$vhci(r1, &(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, "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"}, 0x1001) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x7) setresuid(0x0, 0xee01, 0x0) prctl$PR_MCE_KILL_GET(0x22) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b700000000100000bd000000000000001f010000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) [ 618.018009] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:24:28 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0xa00, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:24:28 executing program 2: arch_prctl$ARCH_GET_CPUID(0x1011) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6900) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8001) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x8000, 0x585a00) 16:24:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 618.237763] audit: type=1804 audit(1583079868.583:145): pid=21742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir933287246/syzkaller.nK3f6h/606/bus" dev="sda1" ino=16556 res=1 [ 618.315723] hfs: creator requires a 4 character value [ 618.330687] hfs: unable to parse mount options [ 618.368200] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:24:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 618.552621] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:24:29 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) recvfrom$ax25(0xffffffffffffffff, &(0x7f00000002c0)=""/157, 0x9d, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/nullb0\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000020000000000000002000000115a00000300000000000000f5e80000000000000500000000000000ee0d0000000000000000000000000000000000000000000008000000000000000000d6a7001000000000ff7f000000000000ff03000000000000000000000000000000000000000000000004000000000000000000000000000000000000c00100004cf500000000000007000000000000000000000000008e"]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xa, 0x12, r2, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff}, 0x6) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000000045000024000078ac1e0101ac1414aa000000000401907804f426e6003237fb"], 0xfdef) 16:24:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="e0"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000000c0)=0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000001000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x2}, {}, {0xf}}, [@filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1a35a}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=@deltclass={0x8c, 0x29, 0x10, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xe, 0x6}, {0x8, 0xd}, {0x9, 0xfff2}}, [@tclass_kind_options=@c_htb={{0x8, 0x1, 'htb\x00'}, {0x40, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0xab, 0x2, 0xfff, 0x8b, 0x3, 0x81}, {0x0, 0x0, 0x689, 0x8000, 0x0, 0x800}, 0x8, 0x8, 0x0, 0x4abe, 0xff}}, @TCA_HTB_CEIL64={0xc, 0x7, 0x83}]}}, @tclass_kind_options=@c_ingress={0xc, 0x1, 'ingress\x00'}, @TCA_RATE={0x6, 0x5, {0x0, 0x4}}, @tclass_kind_options=@c_cake={0x9, 0x1, 'cake\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=@bridge_getneigh={0x28, 0x1e, 0x2, 0x70bd2c, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x10200, 0x1000}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x24044840}, 0x0) r8 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$RTC_PLL_GET(r8, 0x80207011, &(0x7f0000000140)) 16:24:29 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0xeba, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:24:29 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x14, 0x4, 0x4, 0x3}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x28, &(0x7f0000000040)}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) accept$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0}, &(0x7f0000000180)=0x14) r4 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r4, &(0x7f0000ffa000/0x3000)=nil, 0x7000) shmctl$IPC_INFO(r4, 0x3, &(0x7f00000002c0)=""/140) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000001c0)={r3, 0x1, 0x6, @local}, 0x10) bpf$MAP_DELETE_ELEM(0x4, &(0x7f00000007c0)={0xffffffffffffffff, &(0x7f0000000780), 0x719000}, 0x20) ioctl$SNDRV_PCM_IOCTL_PREPARE(r2, 0x4140, 0x0) 16:24:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:24:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1040}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in=@local, @in6=@mcast2}, {@in6=@mcast2, 0x0, 0x32}, @in=@empty, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc}]}, 0x144}}, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="d57f080000000000000012"], 0x3}}, 0x0) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x2cc, r1, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xeb46}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xec9}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x3ff, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2f}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x7, @mcast1, 0x7}}}}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x40}]}, @TIPC_NLA_LINK={0xd0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20a}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xca6d}]}, @TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6a40aa7c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'netpci0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3, @empty, 0x8001}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}]}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x24008085}, 0x10) syncfs(r0) [ 618.726059] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:24:29 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$minix(&(0x7f0000000200)='minix\x00', &(0x7f0000000280)='./bus\x00', 0x9, 0x2, &(0x7f00000003c0)=[{&(0x7f00000002c0)="d084c47e62547d70525c2f166b34ea6104c4539d5f3b915ef5885b3091afb33bec41c29da129f8af00bc512a672af8d4eef1a7e5451e36eb5b0092be6b12128b87d4abb789fb3c8da8f8e6be16154fda972ddf12e9e481a641e8429005c93fd5229ed6aa4048e8995517f42cd1f32039390ca96640ded476d8dc8016271719cc42b3cd64a520a715f1e6620f8d3d9eb64da3b6487b794a754229565979fc6e2c5d3aede480", 0xa5, 0xb87}, {&(0x7f0000000380), 0x0, 0x7b9a}], 0x120e48, 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x467, 0xfffffffffffff000}, 0x183, 0x2, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {0x1, 0x4}, [{}, {}], {}, [{}, {}, {}, {}, {0x8, 0x4}]}, 0x5c, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='overlay\x00', 0xc000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@index_on='index=on', 0x5c}], [], 0xf603000000000000}) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000380)={0x1, [0x0]}, &(0x7f000095dffc)=0x3f) socket$inet6_sctp(0xa, 0x5, 0x84) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x3) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) open(0x0, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$cgroup_int(r1, &(0x7f0000000040)='cgroup.max.depth\x00', 0x2, 0x0) link(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 16:24:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 618.787686] hfs: creator requires a 4 character value [ 618.793098] hfs: unable to parse mount options 16:24:29 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x2, 0x7, 0x0, 0x400000000000000}, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r1 = gettid() waitid(0x83b895581628fca4, r1, &(0x7f0000000040), 0x2, &(0x7f0000000480)) close(0xffffffffffffffff) sendmsg$key(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f00000002c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) finit_module(0xffffffffffffffff, &(0x7f00000001c0)='nodev+\x00', 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x20081, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/netlink\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffff8000, 0x0, 0x0, 0x0, 0x0, 0x56c, 0x0, 0x3ff]}) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='net/netlink\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14140002", @ANYRES16=r6, @ANYBLOB="050400000000000000007e000000"], 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x6080}, 0x8014) 16:24:29 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x1f00, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) [ 618.918594] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:24:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:24:29 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) capget(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000380)={0x7, 'lo\x00', {0x100}, 0xe40}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl(r2, 0x4, &(0x7f0000000180)="d9742049238874a8c2615f53afbffca49dd0366d431ced4ee255c27913678ef134b8b49b916e66233e3cd459744fce61f788e842e305d941f19a03b388348c759ba06e5c3555281356201ec2e4f820f202355fd88cd6006072cabfdf2cfe409b3374075a38997faa491aaa0cefc37757f3405cab3997d8dab512224b4ebaeddd4a026a9ab1dac79a2c75ea7315e0fb96a0e73a07ee9ad8afcf334498117d5ed732bfb9d4e78b7b22f11b79ae3e47a95fed2bfbe7c1c936fa0aebad418309508a746a8f70ea03144406a0aaff855235ce812f447c4e46df883048a0f95075add283279620d1675d") preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, 0x0, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0x68082, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x8, @rand_addr=0x8}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x1, 0x2) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$vhost_msg(r7, &(0x7f0000000540)={0x1, {&(0x7f00000003c0)=""/227, 0xe3, &(0x7f00000004c0)=""/69, 0x3, 0x4}}, 0x48) ioctl$DRM_IOCTL_AGP_ALLOC(r5, 0xc0206434, &(0x7f0000000000)={0xe1, 0x0, 0x10000, 0x1}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000040)={0x4, r8, 0x2, 0x3}) r9 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) read$snddsp(r11, &(0x7f0000000280)=""/170, 0xaa) ioctl$BLKPG(r9, 0x40140921, &(0x7f0000000100)={0x0, 0x1f, 0x0, 0x0}) [ 619.060005] overlayfs: unrecognized mount option "index=on\" or missing value [ 619.094518] hfs: creator requires a 4 character value [ 619.146186] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 619.153889] hfs: unable to parse mount options [ 619.433356] md: invalid raid superblock magic on mtdblock0 [ 619.439201] md: mtdblock0 does not have a valid v0.0 superblock, not importing! [ 619.447866] md: md_import_device returned -22 16:24:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:24:30 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x8, 0x0, 0x0, 0x0, 0x0, 0x400000041c1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={&(0x7f0000000440), 0xf}, 0x0, 0x1}, 0x0, 0xffffffffffefffff, 0xffffffffffffffff, 0x9) read(r0, &(0x7f0000000340)=""/98, 0x62) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000280)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000f8], 0x1f004}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_open_dev$vcsn(&(0x7f00000003c0)='/dev/vcs#\x00', 0x201, 0x0) write$6lowpan_control(r6, &(0x7f0000000400)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e) ioctl$KVM_SET_DEBUGREGS(r5, 0x4080aea2, &(0x7f0000000240)={[0x1005, 0x2, 0x2, 0x3000], 0x5, 0x19, 0x9}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="740000002400f30700000000ddffffff00000000", @ANYRES32=r2, @ANYRES32=r2], 0x3}}, 0x0) r7 = socket(0x10, 0x80002, 0x0) socket(0x9, 0x4, 0x7f) prctl$PR_GET_NO_NEW_PRIVS(0x27) sendmmsg$alg(r7, &(0x7f0000000180)=[{0xa, 0x1000000000000, &(0x7f0000000100)=[{&(0x7f0000000040)="e588da94b522c2d1f313702948718f407fe7166ac45a790cd2095b44582f3310fb003cb29f9afc1ddb6272a61982d91403b9914e7638a71eab73d729de3c717034a0489e9ed7d8d5fa1979ad04faed8aeb63cac0ab9a4d2927d53b44ef0f6eb8b357571086780d116f40c92841c5a3d72ac31d7abedde3433aa57b7fefb2a6e25f68b39642e8ed4cba1d481661ba"}, {&(0x7f0000000600)="a175aecfc133f10e8096d588d507cb2369905aafe9156c60719627564d1f5841ed3912a4b4d6372b4d52111e6d26ae638675c823527d292fb9cfb0691358daaeed278a87b98817f0efa445e1e8110e40b7979829311002818ea4bfa43e186dbdf71f761f261789a4e4063b30213fc8674cff946703b49ecc157cd063ec3bf08b8f75365561ef81b12e6d77479cb6fba9e4a0e862fe0729da03403caa9b02aff1a185885195"}], 0xe, &(0x7f0000000100)}], 0x126618d46e7cf97, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x9, 0x1ff}, 0x8) 16:24:30 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x2000, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:24:30 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x40, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=r4, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0) 16:24:30 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) write$binfmt_misc(r2, &(0x7f0000000000)={'syz0', "c3875a1fa3b1e016af3b32846ba0d1f378557c648fc2a1741e7711afb1dc5a227251f1835bf686da8f8d69cf1eb72714ac339d11eab609897a35afc07acab8db8ce845167fe2c40ac6ec9a8b7490c6cdc2f503098aed21771d780c4d5f4b8f44875588818376ef11bce781300552b116af240151efd5e95c71c13b4deba9a6c285ce5c2461e581877d7f696f9a1f26bcad7d8c381bfe56c8694e53a08ca3d632c94e383618c3f93a2944de3cba58180ef3e445c6e0940ab98eb3f0b12b0a988f66ffd7540890fd"}, 0xcb) dup3(r0, r1, 0x0) r3 = syz_open_dev$swradio(0x0, 0x1, 0x2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) [ 619.750337] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 619.770687] hfs: creator requires a 4 character value [ 619.785768] hfs: unable to parse mount options 16:24:30 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget(0x2, 0x4, 0x5) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x28000003, &(0x7f0000000100)={0xa, 0x28000004e22, 0x0, @empty}, 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x3) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="6560000000b7f061971513405ea803a4b49500000000bc751776c15d01b31199ff9738f600000000"], 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x400400, 0x0) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000540)=0x38) fadvise64(r6, 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCINQ(r7, 0x541b, &(0x7f0000000780)) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400, 0x0) ioctl$EVIOCGPROP(r8, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TIOCGPGRP(r8, 0x540f, &(0x7f0000000a80)=0x0) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r6, &(0x7f0000000740)={0x4}) kcmp(r9, 0x0, 0x2, r6, r5) r10 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ocfs2_control\x00', 0x4042, 0x0) ioctl$KDGETMODE(r10, 0x4b3b, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800000}, 0x0, 0x0, 0x0, 0x7, 0x20, 0x2, 0x8000}, 0x0, 0x0, r10, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f00000000c0)={0x67, 0x5, {r9}, {0x0}, 0x0, 0x3}) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x800, &(0x7f00000007c0)=ANY=[@ANYBLOB="7f2626e991039ac75ea27546638533cfe5e44f9f493954c993040865c48c8a1bc91f6597d6b15e8225bb4b86d6f6c4f1d533200d3ad974c85653", @ANYRESHEX, @ANYBLOB="bc02d2a3b1bacc1da27091f49979ef419a543d665f9ff51565e14ed788471a88d065f5b508473d13eabaa48c6fb3c780eccc7a66813e2ce7aafaa61d7a4f45694f62c472519bdf9faa9272a0d9f228824a75e2fbda88073f52de601b493539a976ba619e57bd1ec2c369a018ac0180a5865a9a361134c12385ea82a15a8530ed1f26bc6de5df2316544ec42c2bcae7812e1af83e735e6605b35660708806c0d3338de19b9db3cff88ae96127d0c5b2dab1e413c322669e512d48ce960e90787f38f2d24ab1c0920316aeb13333c7413ab273cb0c09b23486c79cc3f7145af8822f", @ANYRESDEC=r11, @ANYBLOB=',group_i', @ANYRESDEC=r12, @ANYBLOB="2c6d61785f726561643d3007000000300230303030303030346331392c626c6b736980653d3078303030303051303030303030303630302c646f6e745f6d6561737572652c7569643e", @ANYBLOB=',subj_user={bdev,smackfstransmute=/dev/kvm\x00,\x00']) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fdd000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 16:24:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 619.805491] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=21840 comm=syz-executor.3 16:24:30 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x2200, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) [ 619.914904] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:24:30 executing program 3: syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000030000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x13c}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000000) 16:24:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:24:30 executing program 4: ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000240)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x100, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000180)={0x3, 0x0, 0x4, 0x80000, 0x0, {0x77359400}, {0x3, 0x8, 0x0, 0x89, 0x1f, 0x7f, "d620333f"}, 0x200, 0x0, @offset=0x8}) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r4, 0x28, 0x6, &(0x7f0000000280)={0x0, 0x7530}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000300)={0x2, 0x4e20, @local}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x20020059, 0x0, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x80, 0x80000) bind(0xffffffffffffffff, &(0x7f0000000100)=@xdp, 0xfffffe3d) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x4200, 0x0) r8 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) r9 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) close(r9) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000340)={0x0, {{0x2, 0x4e21, @local}}, {{0x2, 0x4e22, @multicast1}}}, 0x108) dup3(r6, r7, 0x0) dup2(r2, r10) [ 620.098515] hfs: creator requires a 4 character value 16:24:30 executing program 0: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x40000, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x48, &(0x7f0000000040)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7, 0x0, 0x0, 0x8, 0x6, 0x2}, 0x20) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f0000000180), &(0x7f0000000080)=0x8) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000100001040000f800000000000000000021b9bc94ce68d70a352ab2b5b8b8159a78ad7b99ede878c8f908305a0bcb1b63079f2bda7d50ad81456ed4adccddcef91fca78a44601000080f8eb608767c99eb74f00b2ea2ebc552929f8a09081ec60ed8c481152bab54e8618df2feba42f8a89a773031e69f606f3560896a3cd6d8775df5887fef1", @ANYRES32=r0, @ANYBLOB="00000000000000002c001280110001006272696467655f736c617665000000001400058005001900020000000500010000000000"], 0x3}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) [ 620.160214] hfs: unable to parse mount options 16:24:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="380100000001190500400300000000000a000000440001002c0001001400030016f8bcd3830100000000000000d6b8bf14000400fe8000000000000000000000000000bb0c000200050001000000000006000300000200003c0002000c00020005000100000000002c00010014000300fe88000000000000000000000000000114000400ff020000000000000000000000000001080007000000000010000d000c000300040002004e2300008c000e002c00010014000300fe80000000000000000000000000001414000400fe8000000000000000000000000000bb46000300000300002c0001001400030000000000000000000000ffffac14140b140004004a925aa0ddf34330053d13c7087769421400010008000100ac1414aa08000200ac1414340c00020005000100110000000600030000040000"], 0x138}}, 0x0) [ 620.200971] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities 16:24:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x1) open(&(0x7f0000000100)='./file0\x00', 0x300, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x4}, 0x800, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746d00c28b9f64653d0030eaabc45346baf39734303030302c75736572005f6964", @ANYRESDEC=0x0, @ANYBLOB="2c677275ccf45bed2a45874b9a209bf9b1766c8486e1f01d197bb0a9a62a3fea28a8be62938261524231c8b0d2b89001e68d9bcb22278f7658a5d39c30b939c9fb7fff078e83ade4a7dbc39ac53026617a74270d23f6d3c07f2883", @ANYRESDEC=0x0]) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 16:24:30 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x2c00, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) [ 620.302492] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities 16:24:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:24:30 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f0000000000)) ioctl$VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x3) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25GETUID(r2, 0x8912, &(0x7f0000000080)={0x3, @null}) [ 620.488197] hfs: creator requires a 4 character value [ 620.536337] hfs: unable to parse mount options 16:24:31 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = request_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)='\x00', 0xfffffffffffffffb) keyctl$get_keyring_id(0x0, r1, 0x1) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000000906010000000000000000000000000005000100060000fe13000880100007800c00194000000000000000000900020073797a310000000008000940000000000cd392914e73642bfa18daff78abc19332e6e3a7adc2fe8db3e4696b4c61a45ed44866c0147a029302f40d500bf40d2e4b062e1d9256f51abf4e318f02ad5c82c6b11b21fa015d3fa73484fd7265ae0f38bc74eb1d6442ce0dc7c7ec9b806a26fc74253b0549c87f8c897b293f019399dd859bfc187b68147e8c8766969037467c450c1801011787cb9bb607ef19cc7e02a48fc16aedbc7c566339eae38f48def1b0712ef23d3ebef1f161bd22b4f55c"], 0x44}}, 0x0) 16:24:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:24:31 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000100)={0x0, 0x9, 0x7, [0x2, 0xf800, 0xb4c6, 0x7fff, 0x401, 0x510f, 0x2]}, 0x16) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000680)=0x2, 0x143) socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 16:24:31 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x3f00, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:24:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) msgget$private(0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000000)=0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x62160555]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000780)={"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"}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) openat$cgroup(r5, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:24:31 executing program 0: mkdir(&(0x7f0000000440)='./file0/file0\x00', 0x20) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000000c0)={{0x7}, {0x0, 0x40}, 0x2, 0x0, 0xff}) openat(r0, 0x0, 0x0, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_DISCARDURB(r2, 0x550b, &(0x7f0000000140)=0x3) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f0000000240)) accept4$rose(0xffffffffffffffff, &(0x7f0000000500)=@full={0xb, @remote, @default, 0x0, [@rose, @netrom, @bcast, @netrom, @default, @rose]}, &(0x7f0000000040)=0x40, 0xc0800) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x0, &(0x7f00000000c0)=0x100000001, 0x4) lsetxattr(&(0x7f0000000400)='./file1\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="6f7332a468c76e13d2be542e7e505f1c2e74726d737465642e6f766598ad72"], &(0x7f0000000480)='vboxnet0{#userlo\x00', 0x11, 0x2) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x304}, "d9ab0a38b35805ef", "9ddee19c1769713fe1e31cb528010418", "fdba329f", "48b97d65ef62d517"}, 0x28) socket(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f0000000100)) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000180), 0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r5, 0x0) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000005c0)={0x3, &(0x7f0000000580)=[{0x0, 0x40}, {0x800, 0xaaa3}, {0x9694}]}) removexattr(&(0x7f0000000380)='./file1\x00', &(0x7f0000000200)=@random={'system.', 'pdinfo/3\x00'}) [ 620.909549] hfs: creator requires a 4 character value 16:24:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 620.970441] hfs: unable to parse mount options 16:24:31 executing program 2: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ocfs2_control\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$IOC_PR_PREEMPT(r2, 0xc0506107, 0x0) syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000004c0)) prctl$PR_GET_FP_MODE(0x2e) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200)={0x77359400}, 0x0) 16:24:31 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000007a40)=[{{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000000300)="12", 0x1}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x1) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCPKT(r1, 0x5420, 0xfffffffffffffffe) open_by_handle_at(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="5f0000000500000085c97f5630681df183b96bd033b123a07ff3d64452f1e30d3d1c5f5041f3e233754dc4425baa534b6a3094920a66ea9757611dcef30d58456b8ee186e124c648df02c4f5483c1c1c86fd4d21ea249f5a2c13d9f08c14540500e007ef2f9f3f32c84f8b77306b78ad9bf8809fca533cb3f241bb234afbdaa1aedb4d68bb36489e04a343f568597416f07dfdddeb"], 0x80) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x38}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000080)='.\x00', 0xfe) r4 = open(&(0x7f0000000040)='./file0\x00', 0x20000, 0x140) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = fcntl$dupfd(r8, 0x0, r7) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r10, 0x4400ae8f, &(0x7f00000000c0)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b22645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) ioctl$KVM_SET_MP_STATE(r10, 0x4004ae99, &(0x7f0000000000)=0x100005) ioctl$KVM_RUN(r10, 0xae80, 0x0) write$nbd(r4, &(0x7f0000000380)=ANY=[@ANYRESHEX=r4, @ANYPTR], 0x2) sendfile(r4, r4, &(0x7f0000000200), 0xa198) sendmsg$alg(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="6b243a8ddfc062db8f4cf3bcf3676fe8b772fc6e4522fada6c6a33d4f066d6c011ee21aacc63592691111d35c2497244cc14729e2e168c8e74ced7e24f9fae7cbb27851320955d070fc7afdbccca5369f85234cc8915a3742d9c03cdb2aaa209ea026d73c9ff02f5841697904a0c98f4", 0x70}], 0x2, &(0x7f00000015c0)=[@assoc={0x18, 0x117, 0x4, 0x7}], 0x18, 0x24000000}, 0x20000000) 16:24:31 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:24:31 executing program 3: semget(0x1, 0x0, 0x160) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080), 0x10) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) semctl$SEM_INFO(0x0, 0x1, 0x13, 0x0) timer_create(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) pipe(0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000028fc8)={0x0, 0x0, 0x0}, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x1) openat$random(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/urandom\x00', 0x0, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000580), 0x1000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$netlink(r1, 0x0, 0x0) 16:24:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:24:31 executing program 4: r0 = gettid() perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x6134, 0x46100, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 16:24:31 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x7, 0x400) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0xfffffffffffffffd, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000000c0)={0x1, 0x9, 0x4, 0x10000, 0x6, {r1, r2/1000+10000}, {0x3, 0x8, 0x5, 0x5, 0x0, 0x7f, "a54639ba"}, 0x18f, 0x4, @planes=&(0x7f0000000080)={0x1000, 0x3, @mem_offset=0x3f, 0xff8}, 0x80000000, 0x0, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x140e, 0x1, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x8010}, 0x20048090) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ashmem\x00', 0x180, 0x0) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ocfs2_control\x00', 0xe2800, 0x0) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f00000002c0)={0x2, {0x2, 0x4, 0x0, 0x914, 0x6, 0x4}}) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0xc0, 0x0) getpeername$l2tp6(r5, &(0x7f0000000340)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000380)=0x20) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x801, 0x0) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcsu\x00', 0x400000, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r6, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000804}, 0x40c88c4) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000580)='/dev/ppp\x00', 0x351042, 0x0) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f00000005c0)={0x9, 0x7, 0x4, 0xd7, 0x5, [{0x3016, 0x3, 0x0, [], 0x3}, {0x4, 0x6, 0x53, [], 0x2400}, {0x100000000, 0x7, 0x6, [], 0x1}, {0x190b, 0x5, 0xfff, [], 0xd72c759e9683ff67}, {0x7, 0x5, 0x1, [], 0x2880}]}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={0xffffffffffffffff, &(0x7f0000000700)="c81f429702204135aef255d845506456b7ba7c62249b0074abbc434d70e0bb44f5d70bad3bed40002846d0ff5e398f5139b03dfdfb4310e7e1d409d4e3cab60afab74fbedbc8bc1ca66f5c466762efa6cb93391afd034fb9adf61564d38215e06a61e0de3d1b0578d486e88b8c4155b4617cc7d22b8105ca02d2002373adacc4a63a06a19573258d89f14aaa46ac806b340547d3a8d2b145b36e597ea7884fac69ae6efb", &(0x7f00000007c0)="2d4a2b1fde22e64d040888774fbf0c4bf4c19d402b09ffe41224a7ab83a356a8ed74663b8dd9b9194d31214d058c9f1193cd65375280239acb996d911d837b91b4f4ee48eeab372992177ab9d29c39fc09e3447a571b1efab92c32451db748", 0x4}, 0x20) r8 = add_key$keyring(&(0x7f0000000880)='keyring\x00', &(0x7f00000008c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0xb, r8, &(0x7f0000000900)=""/39, 0x27) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, 0x2, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz0\x00'}}]}, 0x24}, 0x1, 0x0, 0x0, 0x8c0}, 0x11) r9 = syz_open_dev$mice(&(0x7f0000000a40)='/dev/input/mice\x00', 0x0, 0x10002) ioctl$RNDZAPENTCNT(r9, 0x5204, &(0x7f0000000a80)=0x5) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000000ac0)={0x1, "c335248526a0f947683bd7758a3a6fd05c846ada2f3cfadb320e5108267ecdfd", 0x1}) r10 = syz_open_dev$vcsa(&(0x7f0000000b00)='/dev/vcsa#\x00', 0x100000000, 0x82200) bind$isdn_base(r10, &(0x7f0000000b40)={0x22, 0x7f, 0x0, 0x1, 0xfe}, 0x6) ioctl$RTC_WIE_OFF(r0, 0x7010) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r9, 0x8982, &(0x7f0000000b80)={0x0, 'veth0_macvtap\x00', {}, 0x1}) socket$caif_seqpacket(0x25, 0x5, 0x1) r11 = syz_open_dev$mouse(&(0x7f0000000bc0)='/dev/input/mouse#\x00', 0x1, 0x10800) sendmsg$IPSET_CMD_FLUSH(r11, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x5c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x0) r12 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000d40)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r12, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, 0x1, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200460c4}, 0x8000) [ 621.287590] hfs: creator requires a 4 character value [ 621.354928] hfs: unable to parse mount options 16:24:31 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000a40), 0x1}, 0x0, 0xecb, 0x0, 0xc}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4008ae6a, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={0x0, 0xcf91}, &(0x7f0000000a00)=0x8) write$9p(r2, &(0x7f0000001400)="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", 0x600) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0xc}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0xfa0a4cb2b328c573}, 0x40094) semget(0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x1b, 0x5, 0x558, 0x0, 0x140, 0x398, 0x140, 0x398, 0x488, 0x488, 0x488, 0x488, 0x488, 0x5, &(0x7f00000003c0), {[{{@ipv6={@mcast2, @mcast1, [0xff, 0xffffffff], [0xffffffff, 0xff000000, 0xff, 0xff000000], 'bond_slave_1\x00', 'macvtap0\x00', {0xff}, {}, 0x5e, 0x81, 0x2}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@mh={{0x28, 'mh\x00'}, {'C\x00'}}, @common=@inet=@length={{0x28, 'length\x00'}, {0x6, 0x4}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv4=@broadcast, @ipv4=@local, @port=0x4e20, @gre_key=0x9}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2, [0xff, 0xffffff00, 0xffffffff, 0xff000000], [0xffffff00, 0xffffff00, 0xffffffff, 0xffffff00], 'vlan0\x00', 'caif0\x00', {0xff}, {}, 0x3a, 0x9, 0x2, 0x5}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@eui64={{0x28, 'eui64\x00'}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x14, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@local, @port=0x4e20, @gre_key=0x5}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48, 'hbh\x00'}, {0x15da, 0x2, 0x0, [0x6, 0x4, 0xfffc, 0x3a6, 0x0, 0x9, 0x0, 0x3, 0x2, 0x400, 0x1000, 0x400, 0x2, 0x2, 0x33db, 0x48c], 0x2}}, @common=@hl={{0x28, 'hl\x00'}, {0x2, 0x1}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xff, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1, @ipv6=@local, @ipv4=@broadcast, @port=0x4e23, @icmp_id=0x65}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) semctl$GETPID(0x0, 0x0, 0xb, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x301000, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="3400000032d6fbbf02060108000000000000000005e2ff000900020073797a31000000000900020073797a32000000000500e800ddb166f113a9a456d63fbbf0085ead9987571c09a79df4241d89fd3bc2cab09dbba44bad90ca5154c48a220c7596962f0345aad9d80202367642f60d99d430642338c51e1e03924fa97edde80ac0c8e3f50c3733cc7b9703fbeca58abd63086d339b37b917e8bc09a494f237d59587e5d359d171e7fb5074ebf0ccb0bb7e0e5d882f"], 0x34}}, 0x20801) sendfile(r2, 0xffffffffffffffff, 0x0, 0x10000) 16:24:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:24:31 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) [ 621.500705] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns 16:24:31 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(r1, r0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(0xffffffffffffffff, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0), 0x0) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000003c0)={0xf23, 0xe203, 0xc, 0x0, 0x7fff0, 0x0, 0x0, 0x7, r4}, &(0x7f0000000400)=0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000000)={0x6, 0x800, 0x8000, 0x8, 0x1f, 0x3, 0xac2b, 0x9, r4}, 0x20) 16:24:32 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r0 = getpid() prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x1c) sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000007e4754c2f0f4e06efab1350aff00000000000000035c8d63dd359a7a758587200be38d99ee431f24670097683c3ed4e599233cd981817cc50e04811611b75deb"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) recvmmsg(0xffffffffffffffff, &(0x7f0000003540)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000045c0)=""/4106, 0x100a}], 0x1}}], 0x1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(0xffffffffffffffff, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) [ 621.644025] x_tables: duplicate underflow at hook 1 [ 621.656006] x_tables: duplicate underflow at hook 1 16:24:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 621.742635] hfs: creator requires a 4 character value [ 621.786316] hfs: unable to parse mount options 16:24:32 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x4303, 0x141) fchdir(r0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000003000/0x3000)=nil, &(0x7f0000001000/0x4000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000001940)="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", 0x1000, r1}, 0x68) getpid() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x7a05, 0x1700) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000580)=0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect$tipc(r5, &(0x7f0000000540)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x2}}, 0x10) r6 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_type(r2, &(0x7f00000000c0)='threaded\x00', 0x9) writev(0xffffffffffffffff, &(0x7f0000001900)=[{&(0x7f0000000880)="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", 0xfb}, {&(0x7f0000000380)="357664a6eb136a8c093aeda6ca78c84b1cc4ac9bb07939d040b691d81fe0f6c040df7161171063d26997f0248502a23459a7c34ddf57b5325b6d8391372a758d24b206927b31fab6942f2c896931cc3c319c3633ad5cfe171a2f68d83077637be79efc2c16a6390c5356b4b5750e7e304d7c8febc7c57ede618106a3884e96deb9021e56be5a01796c1f0744fe498cc36a9dd7523b33bfc377592f47c9637753b9f06898878dcbd9d5bb3d54876598bf7d61d1fb9b7b89b02d5bd0725dd31d6871e4d13f6816f41d37db375728da236350406d34646a1e23358950504dcde27de2f47637cef7807b0fe6647600e51b85cad3e755adfc9210", 0xf8}, {&(0x7f00000009c0)="c384a235c07e956b29b267882cfb178ce04249deacee3abfac8f28ae462fb6194d2f3aa45c47f460f355269a3a64677c88bea56e51f0430f966e6d04a53b1b08fc5078250e8552cf4741c9cb0d637bf35b12c12a9b93507ca951ea11d3ec305a2c0f2b4b5784550e15b7a00b6d51ed5bfe50a63002b993f7b8676258", 0x7c}], 0x3) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xe00) r8 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x0, 0x10100) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) sendmsg$nl_route(r8, &(0x7f0000000500)={&(0x7f00000001c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="14fc00db5a13d2aa97a4ad00fe9932619478fd78"], 0x14}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 16:24:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfffffffffffffffb, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) fcntl$getown(0xffffffffffffffff, 0x9) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) get_robust_list(0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000000)='./bus\x00', 0x1410c2, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r3, 0x200004) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r4, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) shutdown(r4, 0x0) r5 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r5, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r5, 0x400000001ffffffd) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg(r6, &(0x7f0000003d40), 0x0, 0x0) r7 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r7, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) accept4(r7, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x1}, 0xffffffffffffff6f) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0xfffffffe, @mcast1}, 0x1c) r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x4400, 0x0) r9 = openat$cgroup_ro(r8, 0x0, 0x0, 0x0) ioctl$TUNATTACHFILTER(r9, 0x401054d5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0xc0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x9, 0x3}, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x0, 0x8}, &(0x7f00000008c0), 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x2e, &(0x7f0000000500)=""/46, 0x41100, 0x9, [], 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, r10}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x3a, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, r10}, 0x78) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 16:24:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:24:32 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x4c00, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:24:32 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x541b, 0x719000) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x1040, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000080)={0x8, 'netpci0\x00', {'tunl0\x00'}, 0x40}) 16:24:32 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket(0x400000000000010, 0x802, 0x0) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000100)=0x4) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r6, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0xff}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x200400c0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x32, &(0x7f0000000140), 0x4) [ 622.254124] hfs: creator requires a 4 character value 16:24:32 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r5) r7 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) timer_create(0x3, &(0x7f000049efa0), &(0x7f0000044000)) ftruncate(0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:24:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="380100000001190500000005000000000a000000440001002c0001001400030016f8bcd3830100000000000000d6b8bf14000400fe8000000000000000000000000000bb0c000200050001000000000006000300000200003c0002000c00020005000100000000002c00010014000300fe88000000000000000000000000000114000400ff020000000000000000000000000001080007000000000010000d000c000300040002004e2300008c000e002c00010014000300fe80000000000000000000000000001414000400fe8000000000000000000000000000bb46000300000300002c0001001400030000000000000000000000ffffac14140b140004004a925aa0ddf34330053d13c7087769421400010008000100ac1414aa08000200ac1414340c00020005000100110000000600030000040000"], 0x138}}, 0x0) [ 622.307030] hfs: unable to parse mount options 16:24:32 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f0000000140)={0x1, 0x0, &(0x7f0000000100)=[0x0]}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r4, 0x402c5342, &(0x7f0000000440)={0x9cf, 0x7, 0x5, {0x0, 0x32c7d91f}, 0x0, 0x2}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x123040, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SIGNAL_MSI(r9, 0x4008ae6a, &(0x7f0000000080)={0x1000, 0x0, 0x0, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x4cb, 0x0, 0x7f, 0xffffffffffffffff, 0xfffffffffffffffd, 0x9], 0x0, 0xd011}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r10 = creat(0x0, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) open$dir(0x0, 0x1cb403, 0x0) write$9p(r12, &(0x7f0000001400)="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", 0x600) r13 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) semget(0x0, 0x4, 0x80) semget$private(0x0, 0x3, 0x21) r14 = semget$private(0x0, 0x0, 0x90) semctl$GETPID(r14, 0x4, 0xb, 0x0) sendfile(r12, r13, 0x0, 0x10000) sendfile(r12, 0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 16:24:32 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x6800, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:24:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:24:32 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setscheduler(0x0, 0x0, 0x0) getpgid(0x0) getpid() r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000001000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001580)=ANY=[@ANYBLOB="3300000000270d000000000000000000b143eaa493156db900000000", @ANYRES32=r3, @ANYBLOB="02000000000000000f00000009000100666c6f77000000000c000200080001005aa30100"], 0x3c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat(r5, &(0x7f0000000240)='./file0\x00', 0xa000, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)=""/27, 0x1b, 0xffffffffffffffff}}, 0x10) r8 = syz_open_dev$media(&(0x7f0000000440)='/dev/media#\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x10, 0xa, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, [@jmp={0x5, 0x0, 0x8, 0x3, 0xa, 0x20, 0x14}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @exit, @exit, @alu={0x7, 0x0, 0xb, 0x2, 0x8, 0x6, 0x4}, @call={0x85, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0x7}]}, &(0x7f00000000c0)='GPL\x00', 0xa0000000, 0x1000, &(0x7f0000000580)=""/4096, 0x41100, 0x4, [], r3, 0x2, r6, 0x8, &(0x7f0000000280)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x2, 0x446, 0x6}, 0x10, r7, r8}, 0x78) sched_setattr(0x0, 0x0, 0x0) getpid() r9 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_DEL(r11, 0x2, r9) close(0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r12 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x0, 0x2a, 0x0, 0x3, 0x0, 0x0, 0x91804, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000500), 0x3}, 0x42201, 0x400, 0x80000000, 0x1, 0x0, 0x0, 0xff82}, 0x0, 0xe, 0xffffffffffffffff, 0xb) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000380)=r12, 0x4) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010602000270fff8", 0xffdf}], 0x0, 0x0) [ 622.586175] validate_nla: 10 callbacks suppressed [ 622.586184] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 622.617933] hfs: creator requires a 4 character value [ 622.623414] hfs: unable to parse mount options 16:24:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 623.016355] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 623.148805] audit: type=1804 audit(1583079873.483:146): pid=22077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir933287246/syzkaller.nK3f6h/616/file0" dev="sda1" ino=16553 res=1 16:24:33 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x6c00, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:24:33 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='highspeed\x00', 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) epoll_pwait(r4, &(0x7f0000000300)=[{}, {}, {}], 0x3, 0x5, &(0x7f0000000340)={[0x5]}, 0x8) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000140)={0x990000, 0x1, 0x101, r4, 0x0, &(0x7f0000000040)={0x990a76, 0x1, [], @ptr=0x7ff}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r6, 0x1c, 0x0, @ib={0x1b, 0x84, 0x400, {"7c159ae513ae87efd812918893068078"}, 0x8000, 0x2, 0x10001}}}, 0x90) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', r4}, 0x10) r7 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008002, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0xac14140d}, 0x10) 16:24:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:24:33 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x3}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}}, 0x80) [ 623.286830] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 623.318671] hfs: creator requires a 4 character value 16:24:33 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r5) r7 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) timer_create(0x3, &(0x7f000049efa0), &(0x7f0000044000)) ftruncate(0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) [ 623.360175] hfs: unable to parse mount options 16:24:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="380100000001190500000009000000000a000000440001002c0001001400030016f8bcd3830100000000000000d6b8bf14000400fe8000000000000000000000000000bb0c000200050001000000000006000300000200003c0002000c00020005000100000000002c00010014000300fe88000000000000000000000000000114000400ff020000000000000000000000000001080007000000000010000d000c000300040002004e2300008c000e002c00010014000300fe80000000000000000000000000001414000400fe8000000000000000000000000000bb46000300000300002c0001001400030000000000000000000000ffffac14140b140004004a925aa0ddf34330053d13c7087769421400010008000100ac1414aa08000200ac1414340c00020005000100110000000600030000040000"], 0x138}}, 0x0) 16:24:33 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_hsr\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x49}}) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self\x00', 0x41ac40, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f00000000c0)=0x1, 0x4) syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x1, 0x2) 16:24:33 executing program 2: r0 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(&(0x7f0000000340)='./bus\x00', 0x412040, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000001c0)=""/42) ioctl$KVM_SET_SIGNAL_MASK(r0, 0x4004ae8b, &(0x7f0000000400)={0x5c, "6f21f22ed3c29a6b004c62441a89339067211754ad95f8de042e4d7fef816cebc3ddece5c571d3c929b94e014554c8b9cf4c8b7fb8a036a254cb353a1ea038d37915f89db419aaba445454e94e719967b8441f36918a8dc8cb78bbf1"}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x2, 0x0, 0x1, 0x80000001, 0x0, 0x0, 0x4}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x6, [@restrict={0x7}, @enum={0x1, 0x3, 0x0, 0x6, 0x4, [{0x3, 0x7f}, {0x9, 0x2}, {0x4, 0x5}]}, @func={0x9, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x30, 0x61, 0x71, 0x30]}}, &(0x7f0000000380)=""/101, 0x5a, 0x65, 0x1}, 0x20) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0xf6, 0x4, 0xa150, 0x3}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x17}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r4}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6}]}}}]}, 0x40}}, 0x0) 16:24:33 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x7400, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) [ 623.555076] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:24:34 executing program 0: socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1c5) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x20}, 0x1, 0xf0ffffff}, 0x0) 16:24:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="110700000000000000000800000008000300", @ANYRES32=r4, @ANYBLOB="08000600", @ANYRES32, @ANYBLOB="c2a9aa13438b9656c64a0bd12d120a3bedd4244d6de3d3317c87d0f4444f46e5c713b93ca87825ef6308fb77bce07e8e8eb7ccf584cbd6e01855a961aea6dd731f3122112f1511752ce4a69d6540fddb2eb26cf2455c3bb731c061cc243d98e45bdd4c426c1751091413af7320d14a5c41dcb193a5e53ad19504d500"/135], 0x24}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2040}, 0x800) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000806050368fe07002b0000000e430a0014000b0045b300070300000319001a0012000200110001000600030000000040030000f769", 0x39}], 0x1) [ 623.644281] hfs: creator requires a 4 character value 16:24:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 623.674342] hfs: unable to parse mount options [ 623.700909] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 623.715088] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 16:24:34 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x9, 0x80, 0x3, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in=@remote, 0x0, 0x3c}, 0x2, @in=@empty, 0x0, 0x4, 0x0, 0x3}}, 0xe8) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0}}], 0x400000000000107, 0x6c1e) 16:24:34 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x7a00, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:24:34 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x281, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfff7fdffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0xfffe, 0x3, 0x0, 0x0, 0x0, "1a3af908056eb416"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17}) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0x5, 0x1, 0x8839}) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0xc00, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[]}}, 0x0) close(0xffffffffffffffff) socket$nl_crypto(0x10, 0x3, 0x15) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0) close(r4) ioctl$VIDIOC_QBUF(r4, 0xc058560f, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000000c0), &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x3}) r5 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000600), 0xc, &(0x7f00000007c0)={0x0}}, 0x0) ioctl$BLKPG(r5, 0x1269, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000800)}) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) write$FUSE_BMAP(r6, &(0x7f0000000140)={0x18, 0xfffffffffffffffe, 0x6, {0xb01}}, 0x18) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) 16:24:34 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000000c0)='binfmt_misc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0xc0, 0x2, 0x1, 0x3, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x3000}, @CTA_NAT_DST={0xc, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}]}, @CTA_PROTOINFO={0x20, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x1c, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x3f}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x3}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0xff}]}}, @CTA_TUPLE_MASTER={0x48, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_LABELS_MASK={0x10, 0x17, [0x70, 0xffffffdc, 0x9]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1400}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'pptp\x00'}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20000004}, 0x4040061) lseek(0xffffffffffffffff, 0x7, 0x4) [ 624.136665] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 624.270506] hfs: creator requires a 4 character value [ 624.292913] hfs: unable to parse mount options 16:24:34 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r5) r7 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) timer_create(0x3, &(0x7f000049efa0), &(0x7f0000044000)) ftruncate(0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:24:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:24:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f00000002c0)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f00000001c0)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 16:24:34 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0xba0e, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) [ 624.483689] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:24:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 624.584398] hfs: creator requires a 4 character value [ 624.606911] hfs: unable to parse mount options 16:24:35 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) recvmmsg(r2, &(0x7f00000006c0)=[{{&(0x7f00000000c0)=@nfc_llcp, 0x80, &(0x7f0000000480), 0x0, &(0x7f00000004c0)=""/49, 0x31}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)=""/245, 0xf5}], 0x1, &(0x7f0000000640)=""/66, 0x42}, 0x3}], 0x2, 0x40, &(0x7f0000000740)={0x0, 0x1c9c380}) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = dup3(r1, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="0207000702000000002000000008fdffc4d8d8ea55bda1c5846db6ba0ee78af602a10007b0da58bd2b0800000048f25d1b9eb8bf1974e9cf"], 0x10}}, 0xc8c4) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000000200fd000005000500000000000a004872bbb6896209000055781309e339be593f7710aa00007c201700410000"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 16:24:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 624.645272] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:24:35 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0xe403, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) [ 625.107616] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:24:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:24:35 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x4000, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="2321202e2f66696c65302040206e6f64657673656c696e7578202f6465762f736e617073686f7400206e626400202d7d2840402c6b657972696e676e6f6465765c206e626400202f6465762f736e617073686f74000af2a28146f2ac1a401cc858ad1e9b8718a1f6f0798a89fb8fb4f64f2e472478a72ae03d7a646b3fe77cba53172f76c906022771684f06b6a3"], 0x86) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000500)=0x7389, 0x324) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, r4, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5bf8}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r6}, {0x8, 0x1, r1}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x2000000) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000080)={0x2687, 0x1, 0x4, 0x200000, 0x9, {0x0, 0x2710}, {0x2, 0xc, 0x8, 0x7, 0x0, 0x90, "aa03c303"}, 0x1, 0x1, @planes=&(0x7f0000000000)={0xab, 0x5, @mem_offset=0x20}, 0x99, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r7, 0xc1205531, &(0x7f0000000100)={0x81, 0xbc00, 0x8, 0x7ff, [], [], [], 0xfffffffd, 0x5, 0x5, 0x5, "accd25407cd0c10495006b08e0481d80"}) [ 625.150955] hfs: creator requires a 4 character value [ 625.167138] hfs: unable to parse mount options 16:24:35 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0xedc0, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:24:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 625.370096] hfs: creator requires a 4 character value [ 625.381358] hfs: unable to parse mount options 16:24:35 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r5) r7 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) timer_create(0x3, &(0x7f000049efa0), &(0x7f0000044000)) ftruncate(0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:24:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:24:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:24:37 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x40000, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:24:37 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x1048a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f00000001c0)='./file2\x00', 0x100) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 16:24:37 executing program 3: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16, 0x7}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r7) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./bus\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r8, &(0x7f0000000100)='./bus\x00', r9, r10, 0x1000) getresuid(&(0x7f0000000340)=0x0, &(0x7f0000000380), &(0x7f00000003c0)) r12 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r12, &(0x7f0000000100)='./bus\x00', r13, r14, 0x1000) socket(0x10, 0x2, 0x0) r15 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0}, &(0x7f00000005c0)=0xc) setreuid(0x0, r16) r17 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r17, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) write$FUSE_DIRENTPLUS(r5, &(0x7f0000001c40)=ANY=[@ANYBLOB="e8010000000000000500000000000000010000000000000003000000000000000700000000000000f803000000000000ff0f000055000000020000000000050002000000000020000000100000000100000000000000ff0f0000000000000800000004000000000000002a0a00000000dc85a86ccca32b31436fa5595065ed00000000000000000000000018a9150eb1fee07903f75dce88f7d883eb8288a7be4956ab619740b013418705f6daa237152976478103a811011501c71e2e6d8514b67d5b92c976cef1b4556eef3c660b1d5469eef6f2267f1843ced78d3804e212e8378afa5b0449679a863c9ae32b26b612f72ced473b2ad4120f1b83175a87c2ed81988032600b091347ff01c561b551d88f95d20aafa4622d8e4fb0b1d4b3009281695bfb02e8413188927ea913a043d4c758e17ce5e3e3c6ac1069066f09eecb5bf6ae0c930bd4ad7f9c47031e58e424a3e3df0f24ff24603299d0190000", @ANYRES32=r7, @ANYRES32=r10, @ANYBLOB="1f00000006000000000000000300000000000000720000000000000006000000001000006d73646f73000000040000000000000000000000000000000000ff00000000000000ffffffff0900000000000000000000008d0900000000000005000000000000000000000000000000f2090000000000001a7d000000000000b2090000a0160000030000007fffffff000000004070fd47fe8cda7086a73393c7990140000000000000", @ANYRES32=r11, @ANYRES32=r14, @ANYRES16, @ANYRES32=r16, @ANYRES32, @ANYBLOB="28000000070000000000000002000000000000680400006d73646f7300"/44], 0x15a) write$UHID_INPUT(r1, &(0x7f0000000980)={0x8, {"0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000", 0x1000}}, 0x1006) r18 = socket$inet6(0xa, 0x5, 0x0) r19 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r19, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r19, 0x29, 0x48, &(0x7f00000000c0)={@loopback, 0x7, 0x0, 0x1, 0x0, 0x40}, 0xffffffffffffff24) pwritev(r18, &(0x7f0000000300)=[{&(0x7f0000000200)="0ee69715d191d2f4c50e192bd3d0c3acc3bd7c2b6462e5be92b3e3e7e4bbf781cca39cb8ac10b1eb87d3d87d6f3c8b469464a3c8cc3c220be5ed2c99ebe477c78bd7b8340df273bbb084393bec3de5c608504c8d215db8e9a25e8b6c4027984dfc08f0609375631e110c76f7ff46d39053cf5fbfb63e576b27cb4f104c95ddc3e6babfc678692b5cb3d071d8d6d7354b1f15d5e313cfde390f40f23a695c77268abe35318e9f2e2a4a55eb938364e7eedf5ae3f17ad2641e2aa765f5e67cc85b1166a4c0f928ed5b968e", 0xca}, {&(0x7f0000000040)="3dfbedd74975372000ec08c3a926f02c63959179f4bd73d4cec36f6a38f7cfec391da1efaf261c05df29e1ad871f5823c6870f62cd3452f591e86cfa2a3a5f26f9ffc86e877c6527d05536d4055f1d046f4c774eaae4", 0x56}, {&(0x7f0000000140)="d6fbc8", 0x3}], 0x3, 0x80000000000000) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 16:24:37 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r5) r7 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) timer_create(0x3, &(0x7f000049efa0), &(0x7f0000044000)) ftruncate(0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:24:37 executing program 0: r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fcntl$setstatus(r0, 0x4, 0x46000) lseek(r0, 0x4200, 0x0) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x35b2, 0xe0b7}) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) fallocate(r3, 0x4000000000000010, 0x0, 0x7fff) r6 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r6, 0x0, 0x8400fffffffa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TUNGETSNDBUF(r8, 0x800454d3, &(0x7f0000000040)) creat(&(0x7f0000000200)='./bus\x00', 0x0) [ 627.571488] FAT-fs (loop3): invalid media value (0x01) [ 627.578430] hfs: creator requires a 4 character value [ 627.585886] overlayfs: failed to resolve './file0': -2 [ 627.597445] hfs: unable to parse mount options [ 627.604808] FAT-fs (loop3): Can't find a valid FAT filesystem 16:24:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:24:38 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x1fffff, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:24:38 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000730b1b7f1b16db000000000000c1030000030000002003000068010000680100006801000000000000000000005002000050020000500200005002000050020000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000028016801000000000000000000000000000000000000000000000000280065636e00000000000000000000000000000000000000000000000000000000000000000000005800686173686c696d6974000000000000000000000000000000000000000001726f736530000000000000000000000024000000000003de00000000000000000000000005000000a600000000000000000000000000000040004c4f470000000000000000000000000000000000000000000000000000000000489e1c5140111982c047409b7ac3d722edd3fb24545886bbd1be494201b40000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800e800000000000000e1000000000000000000000000000000000040005443504f50545354524950000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e02690bb00000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000fe"], 0x380) [ 627.677169] audit: type=1804 audit(1583079878.013:147): pid=22304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir086322375/syzkaller.Dz6umC/608/bus" dev="sda1" ino=17009 res=1 [ 627.754770] audit: type=1804 audit(1583079878.093:148): pid=22314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir086322375/syzkaller.Dz6umC/608/bus" dev="sda1" ino=17009 res=1 16:24:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="38010000000119050000004c000000000a000000440001002c0001001400030016f8bcd3830100000000000000d6b8bf14000400fe8000000000000000000000000000bb0c000200050001000000000006000300000200003c0002000c00020005000100000000002c00010014000300fe88000000000000000000000000000114000400ff020000000000000000000000000001080007000000000010000d000c000300040002004e2300008c000e002c00010014000300fe80000000000000000000000000001414000400fe8000000000000000000000000000bb46000300000300002c0001001400030000000000000000000000ffffac14140b140004004a925aa0ddf34330053d13c7087769421400010008000100ac1414aa08000200ac1414340c00020005000100110000000600030000040000"], 0x138}}, 0x0) [ 628.076689] hfs: creator requires a 4 character value [ 628.081922] hfs: unable to parse mount options 16:24:38 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) accept(r0, &(0x7f0000000440)=@xdp, &(0x7f00000004c0)=0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x3, 0x8, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x20000c, 0x0, 0xf00, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x8000, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000000514001ebd7000fddbdf2508000100020000000800030000000000080001000200000008000300040000000820010002000000080003000100000008000100020000000800030000000000"], 0x50}, 0x1, 0x0, 0x0, 0x40040}, 0x2000000) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/enforce\x00', 0xe0000, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000400)={&(0x7f0000000200), 0xc, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="28010000cb837b2342457d452eaaf3f168ba5507bd6e814e10cf22bab975ed60fdaa4431f5534ab681ff5d41f211528591c42568bc7f4967c26b4246c7b26d33361434582aed160aa92c5b79381a372542071124757a7bf026fff2abe0e3fffffffffffff801726391a2ccfec688fb2a1c6e69831df0b36e323a63d14cc79fab69", @ANYRES16=r3, @ANYBLOB="00012cbd7000ffdbdf25090000003c00028008000300020000000800080005000000080003000000000008000700fd00000005000d0000000000060002004e2400000800050008000000080005004f0e000020000380050008000900000014000600ff0100000000000000000000000000012c0001800800050002000000060001000a0000000600010002000000060002002f0000000700060073680000440003800500080005000000050008000400000008000300040000000800030003000000060007004e230000060007004e220000060004003f00000008000100000000003400038008000500ac1414bb050008007f00000005000800860000000800010001000000060007004e210000060007004e2300000c00028005000d0000000000"], 0x128}, 0x1, 0x0, 0x0, 0x4004014}, 0x40) 16:24:38 executing program 0: syz_emit_ethernet(0x2e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004503002000000000002f907800000000fffffffb0000883e000c9078ca51c37e"], 0x0) [ 628.153191] audit: type=1804 audit(1583079878.383:149): pid=22314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir086322375/syzkaller.Dz6umC/608/bus" dev="sda1" ino=17009 res=1 [ 628.197250] validate_nla: 4 callbacks suppressed [ 628.197259] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:24:38 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x6b6b6b, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:24:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 628.277656] audit: type=1804 audit(1583079878.443:150): pid=22328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir086322375/syzkaller.Dz6umC/608/bus" dev="sda1" ino=17009 res=1 16:24:38 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r5) r7 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) timer_create(0x3, &(0x7f000049efa0), &(0x7f0000044000)) ftruncate(0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) [ 628.388053] FAT-fs (loop3): invalid media value (0x01) [ 628.395462] hfs: creator requires a 4 character value [ 628.400669] hfs: unable to parse mount options [ 628.431578] FAT-fs (loop3): Can't find a valid FAT filesystem [ 628.501988] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:24:39 executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket$inet6(0xa, 0x8000008000080003, 0x5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x4000, &(0x7f00000000c0)={&(0x7f0000002600)=ANY=[@ANYBLOB="2c0000001100358d000000030000000007000000", @ANYRES32=r1, @ANYBLOB="02000005000023000c001a0007000000af000400f4b863fcf9b3a8acfba52fc7ca9bb09c55956e7f67914223735a2e6f0e27befafd976cd2149ded4e58ac6eb763d1d3d3747458ac867ba5e9fbe1883888060203f378b0544138c12f193767cdfc18a34ae738ac17393ab8b3005f9e7c63e8b2154cad45f8293b18a5cfbf1791a35b8a5cf6e1ca7c0259712f9a66c6fd854af4ce0ae110a26200000000e61e772de361bb2f2475d935c55cd1008390b17100"/192], 0x2c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r3, 0xc058534b, &(0x7f0000000180)={0x40f, 0x1ff, 0x0, 0xe7, 0x25b4dbfd, 0x7fffffff}) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x2, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x359802, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r5, 0xc0305615, &(0x7f0000000100)={0x0, {0xfff, 0x8}}) 16:24:39 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x1000000, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:24:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:24:39 executing program 3: r0 = gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000040)=r0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000240)={'ipvlan0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="0000007e4361efe20000000000000000000000000000000000000100000000559e529422001f000000000000cad5d5dc0c7b7577a7e3c2df77a3f432be3cbe790b3f080fc7470992d482138b34f743db0cee626caca33517505c8ac903fb8accfca3c0499dd1946ce7d42378902ef2ee802277fc455c850b59f6c9bc8412"]}) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags=0x2}) [ 629.008969] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 629.045672] hfs: creator requires a 4 character value [ 629.066054] hfs: unable to parse mount options 16:24:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="380100000001190500000068000000000a000000440001002c0001001400030016f8bcd3830100000000000000d6b8bf14000400fe8000000000000000000000000000bb0c000200050001000000000006000300000200003c0002000c00020005000100000000002c00010014000300fe88000000000000000000000000000114000400ff020000000000000000000000000001080007000000000010000d000c000300040002004e2300008c000e002c00010014000300fe80000000000000000000000000001414000400fe8000000000000000000000000000bb46000300000300002c0001001400030000000000000000000000ffffac14140b140004004a925aa0ddf34330053d13c7087769421400010008000100ac1414aa08000200ac1414340c00020005000100110000000600030000040000"], 0x138}}, 0x0) 16:24:39 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000080)=0x8, 0x4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 16:24:39 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) [ 629.246307] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 629.337960] hfs: creator requires a 4 character value 16:24:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="38010000000119050000006c000000000a000000440001002c0001001400030016f8bcd3830100000000000000d6b8bf14000400fe8000000000000000000000000000bb0c000200050001000000000006000300000200003c0002000c00020005000100000000002c00010014000300fe88000000000000000000000000000114000400ff020000000000000000000000000001080007000000000010000d000c000300040002004e2300008c000e002c00010014000300fe80000000000000000000000000001414000400fe8000000000000000000000000000bb46000300000300002c0001001400030000000000000000000000ffffac14140b140004004a925aa0ddf34330053d13c7087769421400010008000100ac1414aa08000200ac1414340c00020005000100110000000600030000040000"], 0x138}}, 0x0) 16:24:39 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r5) r7 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) timer_create(0x3, &(0x7f000049efa0), &(0x7f0000044000)) ftruncate(0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:24:39 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) getsockopt(r1, 0x80000000, 0x77a8fc1f, &(0x7f0000000280)=""/160, &(0x7f0000000200)=0xa0) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000440)='wg2\x00', 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$SOCK_DESTROY(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000150000022bbd70005e3cdf4dbede2501"], 0x14}, 0x1, 0x0, 0x0, 0x40084}, 0x0) sendmmsg$alg(r2, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(0xffffffffffffffff, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0), 0x0) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000003c0)={0xf23, 0xe203, 0xc, 0x0, 0x7fff0, 0x0, 0x0, 0x7, r9}, &(0x7f0000000400)=0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000340)={r9, @in6={{0xa, 0x4e20, 0x3, @ipv4={[], [], @multicast1}, 0xfb}}, 0x9, 0x700}, 0x90) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000240), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000004c0)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r11, 0xc02064b6, &(0x7f0000000540)={r12, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000500)=[0x0, 0x0]}) [ 629.410550] hfs: unable to parse mount options [ 629.456691] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:24:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="380100000001190500000074000000000a000000440001002c0001001400030016f8bcd3830100000000000000d6b8bf14000400fe8000000000000000000000000000bb0c000200050001000000000006000300000200003c0002000c00020005000100000000002c00010014000300fe88000000000000000000000000000114000400ff020000000000000000000000000001080007000000000010000d000c000300040002004e2300008c000e002c00010014000300fe80000000000000000000000000001414000400fe8000000000000000000000000000bb46000300000300002c0001001400030000000000000000000000ffffac14140b140004004a925aa0ddf34330053d13c7087769421400010008000100ac1414aa08000200ac1414340c00020005000100110000000600030000040000"], 0x138}}, 0x0) 16:24:40 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x3000000, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) [ 629.711332] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:24:40 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 629.923567] hfs: creator requires a 4 character value 16:24:40 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x68) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) r0 = getpid() tkill(r0, 0x0) getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') socket$nl_route(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x1, 0x70bd29}, 0x14}}, 0x0) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010004000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="08000b00100000000a0009000000000000000000"], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x0, &(0x7f0000000d40)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r6, 0x84, 0x74, &(0x7f0000000040)=""/60, &(0x7f00000001c0)=0x3c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x404, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 629.950514] hfs: unable to parse mount options [ 629.981255] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:24:40 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:24:40 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x4000000, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) [ 630.347599] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:24:40 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) getsockopt(r1, 0x80000000, 0x77a8fc1f, &(0x7f0000000280)=""/160, &(0x7f0000000200)=0xa0) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000440)='wg2\x00', 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$SOCK_DESTROY(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000150000022bbd70005e3cdf4dbede2501"], 0x14}, 0x1, 0x0, 0x0, 0x40084}, 0x0) sendmmsg$alg(r2, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(0xffffffffffffffff, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0), 0x0) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000003c0)={0xf23, 0xe203, 0xc, 0x0, 0x7fff0, 0x0, 0x0, 0x7, r9}, &(0x7f0000000400)=0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000340)={r9, @in6={{0xa, 0x4e20, 0x3, @ipv4={[], [], @multicast1}, 0xfb}}, 0x9, 0x700}, 0x90) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000240), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000004c0)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r11, 0xc02064b6, &(0x7f0000000540)={r12, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000500)=[0x0, 0x0]}) 16:24:40 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/tty/ldiscs\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x29cb5a25, &(0x7f0000000340), 0x0, 0x0, 0xffbe}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') socket$kcm(0xa, 0x0, 0x73) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x79) getdents(r0, &(0x7f0000000040)=""/46, 0x2e) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpriority(0x0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000100)=0x1e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') r3 = getpid() tkill(r3, 0x800000015) capset(&(0x7f0000000140)={0x20080522, r3}, &(0x7f0000000180)={0xfffffff9, 0xfc000000, 0x0, 0x994, 0x200, 0x20}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)='\b') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000f00)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040001}, 0x8080) 16:24:40 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 630.450824] hfs: creator requires a 4 character value [ 630.488434] hfs: unable to parse mount options 16:24:40 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f00000002c0)) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r4) r6 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) timer_create(0x3, &(0x7f000049efa0), &(0x7f0000044000)) ftruncate(0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:24:40 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x5000000, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) [ 630.620143] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:24:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 630.785715] hfs: creator requires a 4 character value [ 630.798805] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 630.806774] hfs: unable to parse mount options 16:24:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:24:41 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x6000000, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) [ 631.104976] hfs: creator requires a 4 character value [ 631.119942] hfs: unable to parse mount options 16:24:41 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x7000000, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:24:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:24:41 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x100000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000680)={0x0}, 0x10) socket$kcm(0xa, 0x8000000000002, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)) socketpair(0x18, 0x8, 0x0, &(0x7f0000000740)) socket$kcm(0x29, 0x5, 0x0) socketpair(0x8, 0x5, 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000200), 0x12) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/hash_stats\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000900)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)=ANY=[@ANYBLOB="246fa800", @ANYRES16=r4, @ANYBLOB="000100000000fedbdf250100000008000200020000000800010002000000"], 0x24}}, 0x20000054) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r4, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0), 0x4) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000180)=r5) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x0, 0x71, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xfd39, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, r6, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30) ioctl$PERF_EVENT_IOC_REFRESH(r6, 0x2402, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000004e40)={0x0, 0x0, &(0x7f0000004cc0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7}, 0x0) [ 631.316342] hfs: creator requires a 4 character value 16:24:41 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) getsockopt(r1, 0x80000000, 0x77a8fc1f, &(0x7f0000000280)=""/160, &(0x7f0000000200)=0xa0) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000440)='wg2\x00', 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$SOCK_DESTROY(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000150000022bbd70005e3cdf4dbede2501"], 0x14}, 0x1, 0x0, 0x0, 0x40084}, 0x0) sendmmsg$alg(r2, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(0xffffffffffffffff, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0), 0x0) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000003c0)={0xf23, 0xe203, 0xc, 0x0, 0x7fff0, 0x0, 0x0, 0x7, r9}, &(0x7f0000000400)=0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000340)={r9, @in6={{0xa, 0x4e20, 0x3, @ipv4={[], [], @multicast1}, 0xfb}}, 0x9, 0x700}, 0x90) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000240), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000004c0)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r11, 0xc02064b6, &(0x7f0000000540)={r12, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000500)=[0x0, 0x0]}) [ 631.380729] hfs: unable to parse mount options 16:24:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:24:43 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0xa000000, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:24:43 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f00000002c0)) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r4) r6 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) timer_create(0x3, &(0x7f000049efa0), &(0x7f0000044000)) ftruncate(0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:24:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="380100000001190500f0ffff000000000a000000440001002c0001001400030016f8bcd3830100000000000000d6b8bf14000400fe8000000000000000000000000000bb0c000200050001000000000006000300000200003c0002000c00020005000100000000002c00010014000300fe88000000000000000000000000000114000400ff020000000000000000000000000001080007000000000010000d000c000300040002004e2300008c000e002c00010014000300fe80000000000000000000000000001414000400fe8000000000000000000000000000bb46000300000300002c0001001400030000000000000000000000ffffac14140b140004004a925aa0ddf34330053d13c7087769421400010008000100ac1414aa08000200ac1414340c00020005000100110000000600030000040000"], 0x138}}, 0x0) 16:24:43 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f00000002c0)) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r4) r6 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) timer_create(0x3, &(0x7f000049efa0), &(0x7f0000044000)) ftruncate(0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:24:43 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) getsockopt(r1, 0x80000000, 0x77a8fc1f, &(0x7f0000000280)=""/160, &(0x7f0000000200)=0xa0) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000440)='wg2\x00', 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$SOCK_DESTROY(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000150000022bbd70005e3cdf4dbede2501"], 0x14}, 0x1, 0x0, 0x0, 0x40084}, 0x0) sendmmsg$alg(r2, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(0xffffffffffffffff, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0), 0x0) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000003c0)={0xf23, 0xe203, 0xc, 0x0, 0x7fff0, 0x0, 0x0, 0x7, r9}, &(0x7f0000000400)=0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000340)={r9, @in6={{0xa, 0x4e20, 0x3, @ipv4={[], [], @multicast1}, 0xfb}}, 0x9, 0x700}, 0x90) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000240), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000004c0)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r11, 0xc02064b6, &(0x7f0000000540)={r12, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000500)=[0x0, 0x0]}) 16:24:43 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) r2 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x10, r1, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000003c0)=@nat={'nat\x00', 0x1b, 0x5, 0x6a0, 0x168, 0x0, 0x238, 0x380, 0x380, 0x5d0, 0x5d0, 0x5d0, 0x5d0, 0x5d0, 0x5, &(0x7f0000000340), {[{{@ipv6={@mcast1, @remote, [0xffffffff, 0x0, 0xffffffff, 0x101], [0xffffff00, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_to_hsr\x00', 'vxcan1\x00', {0xff}, {}, 0x32, 0x81, 0x2, 0x50}, 0x0, 0x140, 0x168, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}, {0x2, 0x9, [0x4e23, 0x4e24, 0x4e24, 0x4e20, 0x4e23, 0x4e21, 0x4e24, 0x4e21, 0x4e23, 0x4e20, 0x4e22, 0x4e23, 0x4e24, 0x4e24, 0x4e24], [0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1]}}, @common=@dst={{0x48, 'dst\x00'}, {0x4, 0xce1e5db3101419c8, 0x0, [0x0, 0x2, 0xffff, 0x4, 0x0, 0x78, 0x21e1, 0x20, 0x1000, 0xfff, 0x7, 0x2, 0x9, 0x1ff, 0x5, 0x7f], 0x8}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x19, 0x7f, 0x8}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@mh={{0x28, 'mh\x00'}, {"decb"}}, @common=@frag={{0x30, 'frag\x00'}, {[0x80000001, 0x5], 0xffffffff, 0x10, 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv4=@dev={0xac, 0x14, 0x14, 0x12}, @ipv6=@mcast2, @gre_key=0x200, @gre_key=0xffff}}}, {{@ipv6={@mcast2, @rand_addr="27fc3a23e4eaee7ef5e0b95bf9ea325a", [0xff, 0xffff00, 0x0, 0xffffff00], [0xff, 0xff000000, 0xff], 'batadv_slave_1\x00', 'wg2\x00', {0xff}, {0xff}, 0x3c, 0x7, 0x5, 0x8}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x8, [0x5, 0x7fffffff], 0x9, 0x8, 0x0, [@empty, @ipv4={[], [], @multicast2}, @ipv4={[], [], @empty}, @mcast2, @dev={0xfe, 0x80, [], 0x39}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @rand_addr="78eb6582fa4728e4b5ea023c0bcc03b4", @ipv4={[], [], @rand_addr=0x4}, @loopback, @mcast2, @local, @mcast2, @rand_addr="07db8f1f0a970509ac30a4c87fbe1184", @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, @local, @initdev={0xfe, 0x88, [], 0x0, 0x0}], 0x9}}, @common=@mh={{0x28, 'mh\x00'}, {'#:'}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x10, @ipv6=@loopback, @ipv6=@local, @gre_key, @gre_key=0x3}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x700) connect$rxrpc(r3, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @empty}}, 0x24) sendmmsg(r3, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000001001000001000000ec00000000000000937feecb07ab37918264a4d93e8d35b474759f7ed7bfa4efc7d97eea5b75d724ffff00000000000043e25d60825c9f14fbbc2e39b1484d4f1501b113d7d6030680a7fdea6f07ecd48502d57dda0132b56308a41ddb10e5f1a2169a7800b6474a6f0a25c2d2ad823114b062750a4e96fa8be9ac82b2e4c391b88414287109fb11aa71f2de1c73b24c9a28e628ad33cf7539e584cdabb9ce25829bdddf82f014316983eb7a4807d6370fdad41bc4e87aeff2f9af579d6d2bd6feb8c01181dc2f8fe235ea401c2ea627df5513ee25317fe197011fbd6a937c4608e3b293f5f0e3875d295b802f6e2024703c7c40512ceb1b45490ed5837cc3b89d9318935297532b7f4b365fccb3853b283bf76012d76c6be4008a498aca45bb465ed29abd263733f597a69cc72ae9f8c11b5ecacf14519a80831c14d1bdd4fff15b8b4cfd1c07b6b7c2"], 0x18}}], 0x1, 0x0) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) r5 = dup2(r4, r2) ioctl$SIOCPNENABLEPIPE(r5, 0x89ed, 0x0) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000000)=0x9) [ 633.523092] validate_nla: 3 callbacks suppressed [ 633.523100] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:24:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 633.566414] hfs: creator requires a 4 character value [ 633.572774] hfs: unable to parse mount options 16:24:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ftruncate(0xffffffffffffffff, 0x1000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000140)=""/16) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x6, 0x2, 0x0, 0x0, "755d1aa2"}, 0x0, 0x0, @planes=&(0x7f0000000040)={0x0, 0x9, @userptr=0xffffffff00000001, 0x401}}) syz_genetlink_get_family_id$tipc2(0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000540)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 634.027752] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:24:44 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x10000000, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:24:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 634.231970] hfs: creator requires a 4 character value [ 634.255132] hfs: unable to parse mount options [ 634.268999] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:24:44 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f00000002c0)) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r4) r6 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) timer_create(0x3, &(0x7f000049efa0), &(0x7f0000044000)) ftruncate(0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:24:44 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f00000002c0)) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r4) r6 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) timer_create(0x3, &(0x7f000049efa0), &(0x7f0000044000)) ftruncate(0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:24:44 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) getsockopt(r1, 0x80000000, 0x77a8fc1f, &(0x7f0000000280)=""/160, &(0x7f0000000200)=0xa0) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000440)='wg2\x00', 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$SOCK_DESTROY(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000150000022bbd70005e3cdf4dbede2501"], 0x14}, 0x1, 0x0, 0x0, 0x40084}, 0x0) sendmmsg$alg(r2, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(0xffffffffffffffff, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0), 0x0) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000003c0)={0xf23, 0xe203, 0xc, 0x0, 0x7fff0, 0x0, 0x0, 0x7, r9}, &(0x7f0000000400)=0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000340)={r9, @in6={{0xa, 0x4e20, 0x3, @ipv4={[], [], @multicast1}, 0xfb}}, 0x9, 0x700}, 0x90) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000240), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000004c0)={&(0x7f0000000480)=[0x0], 0x1}) 16:24:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:24:44 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x1f000000, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) [ 634.530987] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:24:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 634.586538] hfs: creator requires a 4 character value [ 634.600967] hfs: unable to parse mount options 16:24:45 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x20000000, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) [ 634.681466] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:24:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 635.106814] hfs: creator requires a 4 character value [ 635.112533] hfs: unable to parse mount options 16:24:45 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x22000000, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:24:45 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0x5ba09f51) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000240)) read$FUSE(r1, &(0x7f0000000380), 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x10000, 0x0) syz_open_procfs(0x0, 0x0) getpgid(0x0) memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x2, 0x5, 0x200, 0xffff}, &(0x7f00000005c0)=0x1, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@dev, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000000200)=0xe8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, r2}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00'}, 0x30) [ 635.249927] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 635.300332] hfs: creator requires a 4 character value 16:24:45 executing program 2: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="2503000010000507be003e000000000000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x134}}, 0x10) [ 635.322996] hfs: unable to parse mount options 16:24:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:24:45 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) getsockopt(r1, 0x80000000, 0x77a8fc1f, &(0x7f0000000280)=""/160, &(0x7f0000000200)=0xa0) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000440)='wg2\x00', 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$SOCK_DESTROY(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000150000022bbd70005e3cdf4dbede2501"], 0x14}, 0x1, 0x0, 0x0, 0x40084}, 0x0) sendmmsg$alg(r2, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(0xffffffffffffffff, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0), 0x0) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000003c0)={0xf23, 0xe203, 0xc, 0x0, 0x7fff0, 0x0, 0x0, 0x7, r9}, &(0x7f0000000400)=0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000340)={r9, @in6={{0xa, 0x4e20, 0x3, @ipv4={[], [], @multicast1}, 0xfb}}, 0x9, 0x700}, 0x90) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000240), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) 16:24:45 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r5) r7 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) timer_create(0x3, &(0x7f000049efa0), &(0x7f0000044000)) ftruncate(0xffffffffffffffff, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:24:45 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x2c000000, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) [ 635.470286] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:24:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:24:45 executing program 2: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="0400000000000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000180)={[{@fat=@flush='flush'}]}) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000000)=0x44) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r3, r0, 0x0, 0x80000005) [ 635.626585] hfs: creator requires a 4 character value [ 635.636575] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 635.648387] hfs: unable to parse mount options 16:24:46 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:24:46 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x3f000000, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:24:46 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x40000000, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) [ 635.976057] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:24:46 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:24:46 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000100)={{0xffffff92}, {0xd0}}) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x7, 0x7, 0x2, 0x7f, 0x0, 0x401}) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cgroups\x00', 0x0, 0x0) pread64(r2, 0x0, 0x0, 0x7) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/ocfs2_control\x00', 0x4a0002, 0x0) r4 = getpid() r5 = syz_open_procfs(r4, &(0x7f0000000340)='net/unix\x00') preadv(r5, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/178, 0xb2}], 0x1, 0x20) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x8100, 0x0) r7 = memfd_create(&(0x7f0000000480)='Yz\xb7{Est\x00'/19, 0x0) r8 = dup(r7) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r8, 0x404c534a, 0x0) r9 = dup(r8) ioctl$DRM_IOCTL_AGP_RELEASE(r9, 0x6431) r10 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x100000, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x26, 0xa, 0x40, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r13, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@ipv4_getroute={0x1c, 0x1a, 0x1, 0x70bd2a, 0x25dfdbf9, {0x2, 0x80, 0x20, 0x1f, 0xfe, 0x3, 0xfd, 0xb, 0x800}, ["", ""]}, 0x1c}}, 0x4040) r14 = socket(0x10, 0x3, 0x0) r15 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r15, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r15, 0x8983, &(0x7f0000000280)={0x0, 'veth0_to_bridge\x00', {0x3}, 0x2}) getsockopt$SO_TIMESTAMPING(r14, 0x1, 0xe, 0x0, &(0x7f0000000100)) r16 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r16, 0x1, 0x34, &(0x7f0000009000), 0x4) r17 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVEDEF(r16, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x3c, r17, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x41000}, 0x1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r14, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, r17, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xfffffffffffffff9}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={[], [], @rand_addr=0x7ff}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040040}, 0x40) sendmsg$NLBL_MGMT_C_VERSION(r13, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24520118", @ANYRES16=r17, @ANYBLOB="000428bd7000fcdbdf250800000008000c000200000006000b0029000000"], 0x24}, 0x1, 0x0, 0x0, 0x20044041}, 0x4c000) sendmsg$NLBL_MGMT_C_REMOVE(r12, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r17, @ANYBLOB="080028bd7000fbdbdf25020000005bbf16666e14f5407b27ded66075fd80b43475777ff0beb43cbf8cc45454e0b5a18574f7fda79b65012d01e3b292be889eda44d02884d61b701c81390361b6c1b35ca787d02f939a4bbcc523dcea65cf1119b0a5d3758e6e3aa866127361fdc554e3ff5610cde96951bf5a2db85bf078fca77c5426fbebda19c3e146ebe31a346fae3d414f05cac5bb999142be336f6d87263d46998fd3f04c9e821634c5fc81faeccf4ecdacccc6f39a5b893318dfa65c9f5401538ef9c35c29e964f2be81582bf80f22565350c0a7d12e5cc610dcf71df84de4a482d72d213d71db5867bbb4074eb52f7bd9b79206b67ab841ddfb5e9847e23750a91aad0a8b89bfaa444f5347f510134bdc36c51eb6b3b6d89b3702a6477b3b5247bc39fd92c558be109a4a1b1d0807c3ae5843b2b8f89cd55ad47c044f"], 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x2e60a808d3ddbbb0) sendmsg$NLBL_MGMT_C_VERSION(r11, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x24c2552}, 0xc, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="480073a059c7500000000080001efae73da3dfc5d3a5913a56255f60cd3893a1c9644d8d09d945bfdbc019b279ae6d4126ca36f68c", @ANYRES16=r17, @ANYBLOB="01002cbd7000fddbdf250800000014000600fe8000000000000000000000000000aa08000700ffffffff080004000300000008000800e00000010800070000000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x880) sendmsg$NLBL_MGMT_C_LISTDEF(r10, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r17, @ANYBLOB="00012bbd7100fddbdf2506000000080002000700000014000600ee8800000000ff000000000000000001080008007fc500011400ed592554e4d40b988236be8f8c74019ddedf"], 0x4c}, 0x1, 0x0, 0x0, 0x40108c1}, 0x94) sendmsg$NLBL_MGMT_C_ADD(r9, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f00000007c0)=ANY=[@ANYBLOB="2c000004c037ec7875b0d2156fe25ae02195de6113dfc1eed279438b081463a370c7e7880c8555d13153504adbc1b88a596f000d2ec0b6d4df3b2833614b5d260f99cdaecf08f963ea98eb3f2fce54bf9d11e0caec29e7ea4c13f569094eb2730a7ecb9ff148fa347df8b605c3caa731ec370ac202c4c4776e379cc1868046299ee52b4e18f365c77890cc8ad759a13cf629a16e801ad261f5fadefcd8f15661dc807fef5abec57fa5d71031b0abf83bc6912b56c94d7f4458060e179cc12bf6e54ccd643bf61d5f422a", @ANYRES16=r17, @ANYBLOB="000826bd7000ffdbdf2501000000160001002e2f6367726f75702e6e65742f73797a31000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x200000c0) sendmsg$NLBL_MGMT_C_VERSION(r6, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000f00)=ANY=[@ANYBLOB="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", @ANYRES16=r17, @ANYBLOB="000128bd7000fedbdf2508000000080002000500000008000700e000000114000600fe80000000000000000000000000002206000b00270000000800040002000000"], 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x20044010) sendmsg$NLBL_MGMT_C_VERSION(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r17, @ANYBLOB="000428bd7000fbdbdf2508000000140005000000000000000000000000000004000500000000000000020800040000000000140006000000000000000000000000000000b997c91d318050f922912959bf81d1049381ed85c02746b765783451544b6c309152a90707bf191ace793e9c7aa6fe51e76af3ca8460496cec19484369d03c31f50f72132974f8bbde4c3e1178178f74715af36900f1633a2d10b20d79be3f61811c5f881d09907431115bfb181d03f81e2718ee6572f17db2db5e78f0"], 0x4c}}, 0x4000040) sendmsg$NLBL_MGMT_C_LISTALL(r3, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001b00)={&(0x7f00000008c0)={0x48, r17, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={[], [], @empty}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}]}, 0x48}, 0x1, 0x0, 0x0, 0x24008095}, 0x8000) sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r17, @ANYBLOB="00022dbd7000fedbdf250800000006000b0008000000080002000700000008000c000100000006000b000900000008000700e000000106000b002b006a8e0000450b0400000000006956daddd2e93a0f072c231d85a585df7b54fd72f5af9fe286ea10f53effbfa75313e226c0d4209ce54671b00662d90ace6d721b494ec80e85b0906497d14630fd67d0f6ea866d3247098590221afd6eee2774f8ddff7d6c16e497378fc7cc84aab1d5597e4bb1849ee2b3b460f9709b6a9cd36bb1191d6d2f772710f52a3a98bddb8c2e974e292359e79edd9b2a91a4d057b9db2e0154c976388f2172181c35d052a8716a1a863726fe1a05"], 0x3}, 0x1, 0x0, 0x0, 0x800}, 0x10000000) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x24000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x54, r17, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x26}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x44) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800000003080500009d4ffa8dbe150f19bf14e61200000000000000050003000600000000000000"], 0x28}}, 0x0) [ 636.104363] hfs: creator requires a 4 character value [ 636.135367] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=29231 sclass=netlink_xfrm_socket pig=22683 comm=syz-executor.2 [ 636.157120] hfs: unable to parse mount options [ 636.198654] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 636.203411] sock: process `syz-executor.0' is using obsolete getsockopt SO_BSDCOMPAT 16:24:46 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 636.242877] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=27695 sclass=netlink_xfrm_socket pig=22683 comm=syz-executor.2 16:24:46 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) getsockopt(r1, 0x80000000, 0x77a8fc1f, &(0x7f0000000280)=""/160, &(0x7f0000000200)=0xa0) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000440)='wg2\x00', 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$SOCK_DESTROY(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000150000022bbd70005e3cdf4dbede2501"], 0x14}, 0x1, 0x0, 0x0, 0x40084}, 0x0) sendmmsg$alg(r2, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(0xffffffffffffffff, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0), 0x0) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000003c0)={0xf23, 0xe203, 0xc, 0x0, 0x7fff0, 0x0, 0x0, 0x7, r9}, &(0x7f0000000400)=0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000340)={r9, @in6={{0xa, 0x4e20, 0x3, @ipv4={[], [], @multicast1}, 0xfb}}, 0x9, 0x700}, 0x90) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000240), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r10) [ 636.288595] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=22686 comm=syz-executor.0 16:24:46 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x48000000, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:24:46 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r5) r7 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) timer_create(0x3, &(0x7f000049efa0), &(0x7f0000044000)) ftruncate(0xffffffffffffffff, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:24:46 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r5) r7 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) timer_create(0x3, &(0x7f000049efa0), &(0x7f0000044000)) ftruncate(0xffffffffffffffff, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:24:46 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="380100000001190500000000000000060a000000440001002c0001001400030016f8bcd3830100000000000000d6b8bf14000400fe8000000000000000000000000000bb0c000200050001000000000006000300000200003c0002000c00020005000100000000002c00010014000300fe88000000000000000000000000000114000400ff020000000000000000000000000001080007000000000010000d000c000300040002004e2300008c000e002c00010014000300fe80000000000000000000000000001414000400fe8000000000000000000000000000bb46000300000300002c0001001400030000000000000000000000ffffac14140b140004004a925aa0ddf34330053d13c7087769421400010008000100ac1414aa08000200ac1414340c00020005000100110000000600030000040000"], 0x138}}, 0x0) 16:24:46 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 636.492453] hfs: creator requires a 4 character value [ 636.499743] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 636.508164] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=22702 comm=syz-executor.0 [ 636.515263] hfs: unable to parse mount options [ 636.522848] FAT-fs (loop4): Filesystem has been set read-only 16:24:46 executing program 0: syz_open_dev$loop(0x0, 0x0, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$l2tp(r1, &(0x7f0000000540)="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", 0x1000, 0x2400c050, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000500)={0x0, 0xf0ffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, r3, 0xc46dfc707e1df77d, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) 16:24:47 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x4c000000, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:24:47 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:24:47 executing program 0: prctl$PR_SET_THP_DISABLE(0x29, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x400000, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f00000000c0)=""/103) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, [0x0, 0x18, 0x3, 0x400100]}, 0x3c) 16:24:47 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 636.828163] hfs: creator requires a 4 character value [ 636.847841] hfs: unable to parse mount options 16:24:47 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x68000000, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:24:47 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) getsockopt(r1, 0x80000000, 0x77a8fc1f, &(0x7f0000000280)=""/160, &(0x7f0000000200)=0xa0) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000440)='wg2\x00', 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$SOCK_DESTROY(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000150000022bbd70005e3cdf4dbede2501"], 0x14}, 0x1, 0x0, 0x0, 0x40084}, 0x0) sendmmsg$alg(r2, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(0xffffffffffffffff, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0), 0x0) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000003c0)={0xf23, 0xe203, 0xc, 0x0, 0x7fff0, 0x0, 0x0, 0x7, r9}, &(0x7f0000000400)=0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000340)={r9, @in6={{0xa, 0x4e20, 0x3, @ipv4={[], [], @multicast1}, 0xfb}}, 0x9, 0x700}, 0x90) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000240), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 16:24:47 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 637.612260] hfs: creator requires a 4 character value 16:24:48 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r5) r7 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) timer_create(0x3, &(0x7f000049efa0), &(0x7f0000044000)) ftruncate(0xffffffffffffffff, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:24:48 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r5) r7 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) timer_create(0x3, &(0x7f000049efa0), &(0x7f0000044000)) ftruncate(0xffffffffffffffff, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) [ 637.633328] hfs: unable to parse mount options 16:24:48 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x6b6b6b00, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) [ 637.700633] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 637.716851] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF 16:24:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:24:48 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r5) r7 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) timer_create(0x3, &(0x7f000049efa0), &(0x7f0000044000)) ftruncate(0xffffffffffffffff, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) [ 637.751737] FAT-fs (loop4): Filesystem has been set read-only [ 637.765196] FAT-fs (loop2): Filesystem has been set read-only [ 637.927013] hfs: creator requires a 4 character value 16:24:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 637.958073] hfs: unable to parse mount options 16:24:48 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x6c000000, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:24:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:24:49 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r5) r7 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) timer_create(0x3, &(0x7f000049efa0), &(0x7f0000044000)) ftruncate(0xffffffffffffffff, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:24:49 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r5) r7 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) timer_create(0x3, &(0x7f000049efa0), &(0x7f0000044000)) creat(&(0x7f0000000000)='./bus\x00', 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) [ 638.835497] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF 16:24:49 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) getsockopt(r1, 0x80000000, 0x77a8fc1f, &(0x7f0000000280)=""/160, &(0x7f0000000200)=0xa0) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000440)='wg2\x00', 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$SOCK_DESTROY(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000150000022bbd70005e3cdf4dbede2501"], 0x14}, 0x1, 0x0, 0x0, 0x40084}, 0x0) sendmmsg$alg(r2, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(0xffffffffffffffff, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0), 0x0) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000003c0)={0xf23, 0xe203, 0xc, 0x0, 0x7fff0, 0x0, 0x0, 0x7, r9}, &(0x7f0000000400)=0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000340)={r9, @in6={{0xa, 0x4e20, 0x3, @ipv4={[], [], @multicast1}, 0xfb}}, 0x9, 0x700}, 0x90) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000240), 0x8) 16:24:49 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r5) r7 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) timer_create(0x3, &(0x7f000049efa0), &(0x7f0000044000)) ftruncate(0xffffffffffffffff, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) [ 638.919464] FAT-fs (loop0): Filesystem has been set read-only [ 638.919574] validate_nla: 8 callbacks suppressed [ 638.919582] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 638.954419] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 638.957428] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 638.962656] FAT-fs (loop2): Filesystem has been set read-only [ 638.994568] hfs: creator requires a 4 character value [ 639.007920] FAT-fs (loop4): Filesystem has been set read-only [ 639.008874] hfs: unable to parse mount options 16:24:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:24:50 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x74000000, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:24:50 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r5) r7 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) timer_create(0x3, &(0x7f000049efa0), &(0x7f0000044000)) creat(&(0x7f0000000000)='./bus\x00', 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:24:50 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r5) r7 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) timer_create(0x3, &(0x7f000049efa0), &(0x7f0000044000)) ftruncate(0xffffffffffffffff, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) [ 639.805701] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:24:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 639.946549] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 639.978764] hfs: creator requires a 4 character value 16:24:50 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) getsockopt(r1, 0x80000000, 0x77a8fc1f, &(0x7f0000000280)=""/160, &(0x7f0000000200)=0xa0) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000440)='wg2\x00', 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$SOCK_DESTROY(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000150000022bbd70005e3cdf4dbede2501"], 0x14}, 0x1, 0x0, 0x0, 0x40084}, 0x0) sendmmsg$alg(r2, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(0xffffffffffffffff, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0), 0x0) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000003c0)={0xf23, 0xe203, 0xc, 0x0, 0x7fff0, 0x0, 0x0, 0x7, r9}, &(0x7f0000000400)=0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000340)={r9, @in6={{0xa, 0x4e20, 0x3, @ipv4={[], [], @multicast1}, 0xfb}}, 0x9, 0x700}, 0x90) [ 640.003712] FAT-fs (loop2): Filesystem has been set read-only [ 640.021223] hfs: unable to parse mount options 16:24:50 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', 0x0) [ 640.079417] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:24:50 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x7a000000, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:24:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3801000000011905000000000000003f0a000000440001002c0001001400030016f8bcd3830100000000000000d6b8bf14000400fe8000000000000000000000000000bb0c000200050001000000000006000300000200003c0002000c00020005000100000000002c00010014000300fe88000000000000000000000000000114000400ff020000000000000000000000000001080007000000000010000d000c000300040002004e2300008c000e002c00010014000300fe80000000000000000000000000001414000400fe8000000000000000000000000000bb46000300000300002c0001001400030000000000000000000000ffffac14140b140004004a925aa0ddf34330053d13c7087769421400010008000100ac1414aa08000200ac1414340c00020005000100110000000600030000040000"], 0x138}}, 0x0) 16:24:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 640.545089] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 640.561424] hfs: creator requires a 4 character value [ 640.567067] hfs: unable to parse mount options 16:24:50 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) shmget(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000140)={0xa00000, 0x4, 0x3, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x498514, 0x40, [], @value64=0x401}}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x3}}, 0x20) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$alg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000180)="1f64bec500df08baef541f75d64bbc9e3c", 0x11}], 0x1, &(0x7f0000000340)=[@ip_retopts={{0x90, 0x0, 0x7, {[@lsrr={0x83, 0x23, 0xba, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @broadcast, @multicast2, @broadcast, @multicast2, @rand_addr=0x7, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4}, @ssrr={0x89, 0xb, 0xf5, [@multicast1, @loopback]}, @timestamp_addr={0x44, 0xc, 0x22, 0x1, 0x9, [{@empty, 0x7}]}, @cipso={0x86, 0xd, 0x0, [{0x1, 0x7, "c76508965d"}]}, @end, @end, @timestamp={0x44, 0x20, 0x56, 0x0, 0xc, [0x3, 0x1, 0x40, 0x10000, 0x6, 0xde, 0x1f]}, @timestamp={0x44, 0x10, 0xc7, 0x0, 0x1, [0xfffffc00, 0x401, 0x4]}]}}}, @ip_tos_int={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}, @ip_retopts={{0x10}}], 0xe8}, 0x0) ioctl$HDIO_GETGEO(r4, 0x301, &(0x7f0000000000)) socket$inet6_udp(0xa, 0x2, 0x0) 16:24:51 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r5) r7 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) timer_create(0x3, &(0x7f000049efa0), &(0x7f0000044000)) creat(&(0x7f0000000000)='./bus\x00', 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:24:51 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) getsockopt(r1, 0x80000000, 0x77a8fc1f, &(0x7f0000000280)=""/160, &(0x7f0000000200)=0xa0) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000440)='wg2\x00', 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$SOCK_DESTROY(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000150000022bbd70005e3cdf4dbede2501"], 0x14}, 0x1, 0x0, 0x0, 0x40084}, 0x0) sendmmsg$alg(r2, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(0xffffffffffffffff, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0), 0x0) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000003c0)={0xf23, 0xe203, 0xc, 0x0, 0x7fff0, 0x0, 0x0, 0x7, r9}, &(0x7f0000000400)=0x20) [ 640.937747] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:24:51 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x8cffffff, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:24:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 641.121226] hfs: creator requires a 4 character value [ 641.133511] hfs: unable to parse mount options [ 641.152276] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:24:51 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x97ffffff, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:24:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:24:51 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r5) r7 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) timer_create(0x3, &(0x7f000049efa0), &(0x7f0000044000)) ftruncate(0xffffffffffffffff, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:24:51 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') dup3(0xffffffffffffffff, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) futimesat(r0, 0x0, &(0x7f0000000240)={{0x77359400}}) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000140)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VT_SETMODE(r3, 0x5602, &(0x7f0000000100)={0x0, 0x4, 0xb8a, 0x5, 0x20}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r4, r1, 0x0) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r5, 0xc0406619, &(0x7f00000002c0)={{0x1, 0x0, @descriptor="8be820b0b153be60"}}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in6=@local}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6=@local}}, &(0x7f0000000480)=0xe8) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000280)={0x2}) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000840)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000780)=0xff, 0xffffffffffffffff, 0x0, 0x0, 0x1}}, 0x20) r6 = socket(0x10, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r6, 0xc0a85352, &(0x7f0000000200)={{0xf8, 0x7}, 'port0\x00', 0x20, 0x1182a, 0x6, 0x0, 0x3, 0x101, 0x10001, 0x0, 0x2, 0x9}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2b00000022008151e00f80ecdb4cb904044865160a0011002f000000600520140e000a0002009d0edc2976", 0x2b}], 0x1}, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) gettid() [ 641.546305] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 641.576781] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 641.593369] FAT-fs (loop2): Filesystem has been set read-only 16:24:52 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 641.626963] hfs: creator requires a 4 character value [ 641.632191] hfs: unable to parse mount options 16:24:52 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0xba0e0000, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:24:52 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="380100000001190500000000000000600a000000440001002c0001001400030016f8bcd3830100000000000000d6b8bf14000400fe8000000000000000000000000000bb0c000200050001000000000006000300000200003c0002000c00020005000100000000002c00010014000300fe88000000000000000000000000000114000400ff020000000000000000000000000001080007000000000010000d000c000300040002004e2300008c000e002c00010014000300fe80000000000000000000000000001414000400fe8000000000000000000000000000bb46000300000300002c0001001400030000000000000000000000ffffac14140b140004004a925aa0ddf34330053d13c7087769421400010008000100ac1414aa08000200ac1414340c00020005000100110000000600030000040000"], 0x138}}, 0x0) [ 641.759123] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.0'. [ 641.774647] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:24:52 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r5) r7 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) ftruncate(0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) [ 642.111779] hfs: creator requires a 4 character value 16:24:52 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) getsockopt(r1, 0x80000000, 0x77a8fc1f, &(0x7f0000000280)=""/160, &(0x7f0000000200)=0xa0) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000440)='wg2\x00', 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$SOCK_DESTROY(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000150000022bbd70005e3cdf4dbede2501"], 0x14}, 0x1, 0x0, 0x0, 0x40084}, 0x0) sendmmsg$alg(r2, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(0xffffffffffffffff, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0), 0x0) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) [ 642.133943] hfs: unable to parse mount options 16:24:52 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r5) r7 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) timer_create(0x3, &(0x7f000049efa0), &(0x7f0000044000)) creat(&(0x7f0000000000)='./bus\x00', 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) [ 642.210316] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:24:52 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0xc0ed0000, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:24:52 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="380100000001190500000000000000680a000000440001002c0001001400030016f8bcd3830100000000000000d6b8bf14000400fe8000000000000000000000000000bb0c000200050001000000000006000300000200003c0002000c00020005000100000000002c00010014000300fe88000000000000000000000000000114000400ff020000000000000000000000000001080007000000000010000d000c000300040002004e2300008c000e002c00010014000300fe80000000000000000000000000001414000400fe8000000000000000000000000000bb46000300000300002c0001001400030000000000000000000000ffffac14140b140004004a925aa0ddf34330053d13c7087769421400010008000100ac1414aa08000200ac1414340c00020005000100110000000600030000040000"], 0x138}}, 0x0) [ 642.369774] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 642.419564] hfs: creator requires a 4 character value 16:24:52 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r5) r7 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) timer_create(0x3, &(0x7f000049efa0), &(0x7f0000044000)) ftruncate(0xffffffffffffffff, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:24:53 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 642.931405] hfs: unable to parse mount options [ 642.970148] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 642.979860] FAT-fs (loop2): Filesystem has been set read-only 16:24:53 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0xe4030000, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:24:53 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:24:53 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) getsockopt(r1, 0x80000000, 0x77a8fc1f, &(0x7f0000000280)=""/160, &(0x7f0000000200)=0xa0) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000440)='wg2\x00', 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$SOCK_DESTROY(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000150000022bbd70005e3cdf4dbede2501"], 0x14}, 0x1, 0x0, 0x0, 0x40084}, 0x0) sendmmsg$alg(r2, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(0xffffffffffffffff, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0), 0x0) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10) 16:24:53 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r5) r7 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) timer_create(0x3, &(0x7f000049efa0), &(0x7f0000044000)) creat(&(0x7f0000000000)='./bus\x00', 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:24:53 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r5) r7 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) ftruncate(0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:24:53 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 643.201420] hfs: creator requires a 4 character value [ 643.221087] hfs: unable to parse mount options 16:24:53 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0xf6ffffff, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:24:53 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 643.651456] hfs: creator requires a 4 character value 16:24:54 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 643.673327] hfs: unable to parse mount options 16:24:54 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) getsockopt(r1, 0x80000000, 0x77a8fc1f, &(0x7f0000000280)=""/160, &(0x7f0000000200)=0xa0) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000440)='wg2\x00', 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$SOCK_DESTROY(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000150000022bbd70005e3cdf4dbede2501"], 0x14}, 0x1, 0x0, 0x0, 0x40084}, 0x0) sendmmsg$alg(r2, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(0xffffffffffffffff, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0), 0x0) 16:24:54 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f00000002c0)) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r4) r6 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) timer_create(0x3, &(0x7f000049efa0), &(0x7f0000044000)) ftruncate(0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:24:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0xfcfdffff, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:24:54 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 644.240753] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 644.293543] FAT-fs (loop2): Filesystem has been set read-only [ 644.312347] validate_nla: 5 callbacks suppressed [ 644.312355] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:24:54 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:24:54 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r5) r7 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) ftruncate(0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:24:54 executing program 0: getpid() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x212140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x6, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x2, 0x2, 0x6, 0x1}}) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000200)=""/154) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x40002c, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) statfs(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[]) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sysfs$3(0x3) creat(&(0x7f0000000580)='./file0\x00', 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) [ 644.432910] hfs: creator requires a 4 character value 16:24:54 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) getsockopt(r1, 0x80000000, 0x77a8fc1f, &(0x7f0000000280)=""/160, &(0x7f0000000200)=0xa0) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000440)='wg2\x00', 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$SOCK_DESTROY(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000150000022bbd70005e3cdf4dbede2501"], 0x14}, 0x1, 0x0, 0x0, 0x40084}, 0x0) sendmmsg$alg(r2, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(0xffffffffffffffff, r8, 0x0) [ 644.462095] hfs: unable to parse mount options [ 644.487184] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:24:54 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:24:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0xfdfdffff, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) [ 644.694916] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:24:55 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) getsockopt(r1, 0x80000000, 0x77a8fc1f, &(0x7f0000000280)=""/160, &(0x7f0000000200)=0xa0) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000440)='wg2\x00', 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$SOCK_DESTROY(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000150000022bbd70005e3cdf4dbede2501"], 0x14}, 0x1, 0x0, 0x0, 0x40084}, 0x0) sendmmsg$alg(r2, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) socket$inet_sctp(0x2, 0x5, 0x84) 16:24:55 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 645.064974] hfs: creator requires a 4 character value [ 645.093755] hfs: unable to parse mount options 16:24:55 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0xfdffffff, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) [ 645.208151] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 645.271868] hfs: creator requires a 4 character value [ 645.277536] hfs: unable to parse mount options 16:24:55 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000100626f6e640000000014000280080012000000000005000c00"/44], 0x44}}, 0x0) 16:24:55 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) getsockopt(r1, 0x80000000, 0x77a8fc1f, &(0x7f0000000280)=""/160, &(0x7f0000000200)=0xa0) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000440)='wg2\x00', 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$SOCK_DESTROY(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000150000022bbd70005e3cdf4dbede2501"], 0x14}, 0x1, 0x0, 0x0, 0x40084}, 0x0) sendmmsg$alg(r2, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) 16:24:55 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3801000000011905000000007fffffff0a000000440001002c0001001400030016f8bcd3830100000000000000d6b8bf14000400fe8000000000000000000000000000bb0c000200050001000000000006000300000200003c0002000c00020005000100000000002c00010014000300fe88000000000000000000000000000114000400ff020000000000000000000000000001080007000000000010000d000c000300040002004e2300008c000e002c00010014000300fe80000000000000000000000000001414000400fe8000000000000000000000000000bb46000300000300002c0001001400030000000000000000000000ffffac14140b140004004a925aa0ddf34330053d13c7087769421400010008000100ac1414aa08000200ac1414340c00020005000100110000000600030000040000"], 0x138}}, 0x0) 16:24:55 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f00000002c0)) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r4) r6 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) timer_create(0x3, &(0x7f000049efa0), &(0x7f0000044000)) ftruncate(0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:24:55 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r5) open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) timer_create(0x3, &(0x7f000049efa0), &(0x7f0000044000)) ftruncate(0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:24:55 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0xffff1f00, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) [ 645.401833] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 645.406642] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 645.431175] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF 16:24:55 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/l2cap\x00') write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x6, 0x70, 0x5, 0x3c, 0x40, 0x2, 0x0, 0x100000001, 0x50002, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8ca, 0x1, @perf_config_ext={0x9, 0x9}, 0x0, 0x10001, 0x25, 0x5, 0x6, 0x3, 0xfff}, 0xffffffffffffffff, 0xe, r0, 0x2) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x1070c5, 0x0) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) write$9p(r2, &(0x7f0000001400)="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", 0x3bf) sendfile(r2, r3, 0x0, 0x10000) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x4b61, &(0x7f0000000000)) sendmmsg(0xffffffffffffffff, &(0x7f00000080c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="0b03922985a3ccd58d88ff84", 0xc}], 0x1, &(0x7f00000003c0)}}, {{&(0x7f0000000400)=@pptp={0x18, 0x2, {0x3, @local}}, 0x80, &(0x7f0000000900)=[{0x0}, {&(0x7f0000000680)="928964e8eec0eb76cd815cb1734bee4b9201062e820408bd25a02b5214cc498f51c187bd9d259b30ec72e1bbe115b8083b91aa8f89124359ff54e2e2f22dff01f6adf8fd441aa551ab65958ad37e934fd8b39038481d5755d60696dcfd978e74e282ec4c7e29e129991bccaaac43f7a73f1b1815ce5d18be8de3877d439e91e1775aba70c8af084abbb73216a89865342337401dc5ab03d1480480b55c13b35ab9dd35935c8f270a", 0xa8}, {&(0x7f0000000780)="acdc5f28b96121ebb31554537bbebfcb008c0c9a176eb7dec9059a7b9b9aa26cb7adbec2d5cde41df4583da4458d368cffde61e3157f45bece221e657abaed10b65d4db30b70ff7c64873e3ed0f0acf428edbf0ebffffd7657f57c7a789efbdcfca68d2b2023cd2c13ad1e45a1e3d7ff48f23cb6ec40e7ec82d39ebb5f2f728cacad4f10c2c5bba1e9934214d9211adb0b029c91dfca5159e67a0fa812430111bbdd2c1a161e1aafc91b71590d1518b7b7be1476c84a830fb35c52b802c6ef0fae4dc1995b2dee9f0ffb4fc45593e2e564d5d10475f487d32b9ea2d4b4f8ae0e392a028e9551b75a8768d5", 0xeb}, {&(0x7f0000000880)="88195b1e24053716f9d8a18933af06d753c154fefd8248277212119814171e96e0aeaf5a62f7420bdeb6df8f5c38a85cd1b16dc639a2e9b5a845364a", 0x3c}], 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x1f8}}, {{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f0000001200)}], 0x2, &(0x7f0000002e40)=[{0x10, 0x0, 0x3ce3}, {0x10, 0x29}], 0x20}}, {{0x0, 0x0, &(0x7f0000005fc0)=[{&(0x7f0000004e80)="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", 0xc00}, {&(0x7f0000005e80)}], 0x2}}, {{&(0x7f0000006040)=@ax25={{0x3, @default, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80, &(0x7f0000006200)=[{0x0}, {&(0x7f0000006140)="9a96b02605b6071ea1fe2d25adecc5f9eb731aec863e3ce874b1a320a727cf2c1662", 0x22}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x6, 0x10) 16:24:55 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 645.467836] FAT-fs (loop2): Filesystem has been set read-only [ 645.505408] hfs: creator requires a 4 character value [ 645.513580] hfs: unable to parse mount options 16:24:55 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) getsockopt(r1, 0x80000000, 0x77a8fc1f, &(0x7f0000000280)=""/160, &(0x7f0000000200)=0xa0) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000440)='wg2\x00', 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$SOCK_DESTROY(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000150000022bbd70005e3cdf4dbede2501"], 0x14}, 0x1, 0x0, 0x0, 0x40084}, 0x0) sendmmsg$alg(r2, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r6) [ 645.644424] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:24:56 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0xfffffdfc, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) [ 645.733139] audit: type=1804 audit(1583079896.073:151): pid=23187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir086322375/syzkaller.Dz6umC/629/file0/file0" dev="loop0" ino=157 res=1 16:24:56 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 645.774437] audit: type=1800 audit(1583079896.073:152): pid=23187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="loop0" ino=157 res=0 16:24:56 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f00000000c0)=0xc) r1 = getpid() r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb", 0x0, 0x0, 0x2}, 0x20) getuid() getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000180)={'ipvs\x00'}, &(0x7f0000000280)=0x1e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f0000000200)={0x0, @llc={0x1a, 0x334, 0x40, 0x2, 0x9, 0x2b, @local}, @ethernet={0x6, @multicast}, @rc={0x1f, @none, 0x8}, 0x3, 0x0, 0x0, 0x0, 0x7f, &(0x7f0000000080)='bridge0\x00', 0xb97, 0x2, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000040)) tkill(r1, 0x800000015) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x35, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x8, 0x2}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) sendmmsg(r6, &(0x7f0000007e00), 0x400000000000058, 0x34000) [ 646.048111] hfs: creator requires a 4 character value [ 646.064232] hfs: unable to parse mount options 16:24:56 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) getsockopt(r1, 0x80000000, 0x77a8fc1f, &(0x7f0000000280)=""/160, &(0x7f0000000200)=0xa0) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000440)='wg2\x00', 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$SOCK_DESTROY(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000150000022bbd70005e3cdf4dbede2501"], 0x14}, 0x1, 0x0, 0x0, 0x40084}, 0x0) sendmmsg$alg(r2, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 16:24:56 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0xfffffdfd, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) [ 646.213874] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:24:56 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3801000000011905000000000000000001000000440001002c0001001400030016f8bcd3830100000000000000d6b8bf14000400fe8000000000000000000000000000bb0c000200050001000000000006000300000200003c0002000c00020005000100000000002c00010014000300fe88000000000000000000000000000114000400ff020000000000000000000000000001080007000000000010000d000c000300040002004e2300008c000e002c00010014000300fe80000000000000000000000000001414000400fe8000000000000000000000000000bb46000300000300002c0001001400030000000000000000000000ffffac14140b140004004a925aa0ddf34330053d13c7087769421400010008000100ac1414aa08000200ac1414340c00020005000100110000000600030000040000"], 0x138}}, 0x0) [ 646.347676] hfs: creator requires a 4 character value [ 646.367174] hfs: unable to parse mount options 16:24:56 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f00000002c0)) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r4) r6 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) timer_create(0x3, &(0x7f000049efa0), &(0x7f0000044000)) ftruncate(0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:24:56 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r5) open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) timer_create(0x3, &(0x7f000049efa0), &(0x7f0000044000)) ftruncate(0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:24:56 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) getsockopt(r1, 0x80000000, 0x77a8fc1f, &(0x7f0000000280)=""/160, &(0x7f0000000200)=0xa0) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000440)='wg2\x00', 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$SOCK_DESTROY(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000150000022bbd70005e3cdf4dbede2501"], 0x14}, 0x1, 0x0, 0x0, 0x40084}, 0x0) sendmmsg$alg(r2, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) 16:24:56 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0xffffff7f, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:24:56 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) getsockopt(r1, 0x80000000, 0x77a8fc1f, &(0x7f0000000280)=""/160, &(0x7f0000000200)=0xa0) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000440)='wg2\x00', 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg$alg(r2, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) [ 646.558956] hfs: creator requires a 4 character value [ 646.564751] hfs: unable to parse mount options [ 646.576355] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 646.593578] FAT-fs (loop2): Filesystem has been set read-only 16:24:57 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0xffffff8c, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:24:57 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) getsockopt(r1, 0x80000000, 0x77a8fc1f, &(0x7f0000000280)=""/160, &(0x7f0000000200)=0xa0) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000440)='wg2\x00', 0x4) sendmmsg$alg(r2, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) [ 646.869224] hfs: creator requires a 4 character value [ 646.989478] hfs: unable to parse mount options 16:24:57 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3801000000011905000000000000000002000000440001002c0001001400030016f8bcd3830100000000000000d6b8bf14000400fe8000000000000000000000000000bb0c000200050001000000000006000300000200003c0002000c00020005000100000000002c00010014000300fe88000000000000000000000000000114000400ff020000000000000000000000000001080007000000000010000d000c000300040002004e2300008c000e002c00010014000300fe80000000000000000000000000001414000400fe8000000000000000000000000000bb46000300000300002c0001001400030000000000000000000000ffffac14140b140004004a925aa0ddf34330053d13c7087769421400010008000100ac1414aa08000200ac1414340c00020005000100110000000600030000040000"], 0x138}}, 0x0) 16:24:59 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x1, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', r0}, 0x10) ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f00000000c0)={0x1}) r1 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/member\x00', 0x2, 0x0) readahead(r1, 0x100, 0x6) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @empty}}}}, &(0x7f0000000300)=0xe8) setreuid(r2, r4) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000340)) r5 = semget(0x2, 0x4, 0x80) semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000380)=""/112) socketpair(0x5, 0x80000, 0x2, &(0x7f0000000400)={0xffffffffffffffff}) ioctl$SIOCX25SCUDMATCHLEN(r6, 0x89e7, &(0x7f0000000440)={0x6}) r7 = syz_open_dev$mice(&(0x7f0000000480)='/dev/input/mice\x00', 0x0, 0x80) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000000580)={0xe2, 0xe, 0x8, 0x0, 0x84, 0x1ff, &(0x7f00000004c0)="15b7f57671227f7c966d2030638b5ec309bed4b8c8f8dd37ba108a8db70746cd274d38b130bd3b1b614dbbec412556651ed7a2bf568c258fae3ada86afc4053a06f96931ea352d03872edf15fde52765d247bbe162e50a1442257f9a7e4fac16887ca4262981ef9335ae152f6346d25ec0de160a8517e8f9e268ae4cf5cfb04cd8c77500"}) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r8, 0x4008ae9c, &(0x7f0000000600)={0x0, 0x0, 0x8}) r9 = openat(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x200000, 0xa) ioctl$KVM_GET_LAPIC(r9, 0x8400ae8e, &(0x7f0000000680)={"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"}) r10 = syz_open_dev$mice(&(0x7f0000000a80)='/dev/input/mice\x00', 0x0, 0x80000) openat$cgroup_ro(r10, &(0x7f0000000ac0)='memory.current\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000b00)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r7, 0xc01064bd, &(0x7f0000000b80)={&(0x7f0000000b40)="2635c7f38d695c7f69", 0x9, 0x1}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r11, 0xc01064ac, &(0x7f0000000c40)={r12, 0x7a, &(0x7f0000000bc0)=""/122}) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000c80)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000cc0)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000d00)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6}}, &(0x7f0000000e00)=0xe8) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000e40)={@dev={0xfe, 0x80, [], 0x36}, r13}, 0x14) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000e80)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r14 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000ec0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r15 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000f40)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r14, &(0x7f0000001080)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x20200000}, 0xc, &(0x7f0000001040)={&(0x7f0000000f80)={0x84, r15, 0x100, 0x70bd29, 0x25dfdbff, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a='\xa0\\\xa8Ol\x9c\x8e8S\xe2\xfdzp\xae\x0f\xb2\x0f\xa1R`\f\xb0\bE\x17O\b\ao\x8dxC'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}]}, 0x84}, 0x1, 0x0, 0x0, 0x24000800}, 0x44800) 16:24:59 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0xffffff97, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:24:59 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="380100000001190500020000000000000a000000440001002c0001001400030016f8bcd3830100000000000000d6b8bf14000400fe8000000000000000000000000000bb0c000200050001000000000006000300000200003c0002000c00020005000100000000002c00010014000300fe88000000000000000000000000000114000400ff020000000000000000000000000001080007000000000010000d000c000300040002004e2300008c000e002c00010014000300fe80000000000000000000000000001414000400fe8000000000000000000000000000bb46000300000300002c0001001400030000000000000000000000ffffac14140b140004004a925aa0ddf34330053d13c7087769421400010008000100ac1414aa08000200ac1414340c00020005000100110000000600030000040000"], 0x138}}, 0x0) 16:24:59 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) getsockopt(r1, 0x80000000, 0x77a8fc1f, &(0x7f0000000280)=""/160, &(0x7f0000000200)=0xa0) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000440)='wg2\x00', 0x4) sendmmsg$alg(r2, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) 16:24:59 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r5) r7 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) timer_create(0x3, &(0x7f000049efa0), &(0x7f0000044000)) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:24:59 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r5) open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) timer_create(0x3, &(0x7f000049efa0), &(0x7f0000044000)) ftruncate(0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) [ 649.280888] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 649.319160] hfs: creator requires a 4 character value 16:24:59 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) getsockopt(r1, 0x80000000, 0x77a8fc1f, &(0x7f0000000280)=""/160, &(0x7f0000000200)=0xa0) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000440)='wg2\x00', 0x4) sendmmsg$alg(r2, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) 16:24:59 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="380100000001190500030000000000000a000000440001002c0001001400030016f8bcd3830100000000000000d6b8bf14000400fe8000000000000000000000000000bb0c000200050001000000000006000300000200003c0002000c00020005000100000000002c00010014000300fe88000000000000000000000000000114000400ff020000000000000000000000000001080007000000000010000d000c000300040002004e2300008c000e002c00010014000300fe80000000000000000000000000001414000400fe8000000000000000000000000000bb46000300000300002c0001001400030000000000000000000000ffffac14140b140004004a925aa0ddf34330053d13c7087769421400010008000100ac1414aa08000200ac1414340c00020005000100110000000600030000040000"], 0x138}}, 0x0) [ 649.348071] hfs: unable to parse mount options 16:25:00 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0xfffffff6, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:25:00 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) getsockopt(r1, 0x80000000, 0x77a8fc1f, &(0x7f0000000280)=""/160, &(0x7f0000000200)=0xa0) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg$alg(r2, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) 16:25:00 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 649.829496] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 649.887340] hfs: creator requires a 4 character value [ 649.900620] hfs: unable to parse mount options [ 649.949818] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:25:00 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) getsockopt(r1, 0x80000000, 0x77a8fc1f, &(0x7f0000000280)=""/160, &(0x7f0000000200)=0xa0) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) socket$inet6(0xa, 0x5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg$alg(r2, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) 16:25:00 executing program 0: socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080), &(0x7f0000000600)=0x4) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={0x750, {0x2, 0x0, @dev}, {0x2, 0x0, @dev}, {0x2, 0x0, @multicast1}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0x4785}) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x418141) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000200)=@req={0xffff0000, 0x6, 0x4, 0x8}, 0x10) dup2(r1, r0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) r3 = socket$inet(0x2, 0x4000000805, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) 16:25:00 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0xfffffffd, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:25:00 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:25:00 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r5) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) timer_create(0x3, &(0x7f000049efa0), &(0x7f0000044000)) ftruncate(0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:25:00 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r5) r7 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) timer_create(0x3, &(0x7f000049efa0), &(0x7f0000044000)) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:25:00 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) getsockopt(r1, 0x80000000, 0x77a8fc1f, &(0x7f0000000280)=""/160, &(0x7f0000000200)=0xa0) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg$alg(r2, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) [ 650.166924] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 650.177696] hfs: creator requires a 4 character value [ 650.204367] hfs: unable to parse mount options 16:25:00 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 650.243147] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF 16:25:00 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x1000000000, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) [ 650.302535] FAT-fs (loop2): Filesystem has been set read-only 16:25:00 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) getsockopt(r1, 0x80000000, 0x77a8fc1f, &(0x7f0000000280)=""/160, &(0x7f0000000200)=0xa0) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmmsg$alg(r2, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) [ 650.399278] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 650.505239] hfs: creator requires a 4 character value 16:25:01 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="380100000001190500070000000000000a000000440001002c0001001400030016f8bcd3830100000000000000d6b8bf14000400fe8000000000000000000000000000bb0c000200050001000000000006000300000200003c0002000c00020005000100000000002c00010014000300fe88000000000000000000000000000114000400ff020000000000000000000000000001080007000000000010000d000c000300040002004e2300008c000e002c00010014000300fe80000000000000000000000000001414000400fe8000000000000000000000000000bb46000300000300002c0001001400030000000000000000000000ffffac14140b140004004a925aa0ddf34330053d13c7087769421400010008000100ac1414aa08000200ac1414340c00020005000100110000000600030000040000"], 0x138}}, 0x0) 16:25:01 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x4000, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB='='], 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000070000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 650.865049] hfs: unable to parse mount options 16:25:01 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) getsockopt(r1, 0x80000000, 0x77a8fc1f, &(0x7f0000000280)=""/160, &(0x7f0000000200)=0xa0) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmmsg$alg(r2, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) 16:25:01 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0xedc000000000, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) [ 651.007731] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:25:01 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:25:01 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r5) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) timer_create(0x3, &(0x7f000049efa0), &(0x7f0000044000)) ftruncate(0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:25:01 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r5) r7 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) [ 651.179911] hfs: creator requires a 4 character value [ 651.193324] EXT4-fs (loop0): bad geometry: block count 1080 exceeds size of device (1 blocks) [ 651.205778] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:25:01 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) getsockopt(r1, 0x80000000, 0x77a8fc1f, &(0x7f0000000280)=""/160, &(0x7f0000000200)=0xa0) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmmsg$alg(r2, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) [ 651.246187] hfs: unable to parse mount options 16:25:01 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:25:01 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x4000000000000, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) [ 651.307848] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 651.326590] FAT-fs (loop2): Filesystem has been set read-only 16:25:01 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) getsockopt(r1, 0x80000000, 0x77a8fc1f, &(0x7f0000000280)=""/160, &(0x7f0000000200)=0xa0) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0), 0x8) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r2, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) [ 651.493494] EXT4-fs (loop0): bad geometry: block count 1080 exceeds size of device (1 blocks) [ 651.708800] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:25:02 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) getsockopt(r1, 0x80000000, 0x77a8fc1f, &(0x7f0000000280)=""/160, &(0x7f0000000200)=0xa0) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0), 0x8) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r2, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) 16:25:02 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './bus', [{0x20, ':vboxnet0trustedcpuset'}], 0xa, "629482ec7e628f45deffe9e82584cd4f7989c4077e86a041009475773d0068bdd4fc1f8da23863a563c3a23ca1f808a06b27a84cb636447eec642e2b146fd4a8e0efb038a3bed2fe04f0933566c56d1deb4af3f67c42e1509c185c59ed57b7cd9c878def8179faf88ec011368c9b7718dcbc808b6a1c6275f828d17f611a86dae7351762166da88374e9ac7cdfc9f5484b344edafab3753852837ae19c47b5543be4aa3457cdc4fdb9c6dcf72a438fc44aa97c7e"}, 0xd4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) write$UHID_INPUT(r0, &(0x7f0000001440), 0xfffffc41) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fadvise64(r0, 0x0, 0x0, 0x4) dup(0xffffffffffffffff) 16:25:02 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3801000000011905000a0000000000000a000000440001002c0001001400030016f8bcd3830100000000000000d6b8bf14000400fe8000000000000000000000000000bb0c000200050001000000000006000300000200003c0002000c00020005000100000000002c00010014000300fe88000000000000000000000000000114000400ff020000000000000000000000000001080007000000000010000d000c000300040002004e2300008c000e002c00010014000300fe80000000000000000000000000001414000400fe8000000000000000000000000000bb46000300000300002c0001001400030000000000000000000000ffffac14140b140004004a925aa0ddf34330053d13c7087769421400010008000100ac1414aa08000200ac1414340c00020005000100110000000600030000040000"], 0x138}}, 0x0) [ 651.801145] hfs: creator requires a 4 character value [ 651.813551] hfs: unable to parse mount options [ 651.921793] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:25:02 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3801000000011905000b0000000000000a000000440001002c0001001400030016f8bcd3830100000000000000d6b8bf14000400fe8000000000000000000000000000bb0c000200050001000000000006000300000200003c0002000c00020005000100000000002c00010014000300fe88000000000000000000000000000114000400ff020000000000000000000000000001080007000000000010000d000c000300040002004e2300008c000e002c00010014000300fe80000000000000000000000000001414000400fe8000000000000000000000000000bb46000300000300002c0001001400030000000000000000000000ffffac14140b140004004a925aa0ddf34330053d13c7087769421400010008000100ac1414aa08000200ac1414340c00020005000100110000000600030000040000"], 0x138}}, 0x0) 16:25:02 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r5) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) timer_create(0x3, &(0x7f000049efa0), &(0x7f0000044000)) ftruncate(0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:25:02 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) getsockopt(r1, 0x80000000, 0x77a8fc1f, &(0x7f0000000280)=""/160, &(0x7f0000000200)=0xa0) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0), 0x8) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r2, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) 16:25:02 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x6b6b6b00000000, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) [ 652.351651] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 652.371052] hfs: creator requires a 4 character value [ 652.407647] hfs: unable to parse mount options 16:25:03 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r5) r7 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:25:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:25:03 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) getsockopt(r1, 0x80000000, 0x77a8fc1f, &(0x7f0000000280)=""/160, &(0x7f0000000200)=0xa0) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg$alg(r2, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) 16:25:03 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x100000000000000, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) [ 652.722769] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 652.760934] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF 16:25:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:25:03 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) getsockopt(r1, 0x80000000, 0x77a8fc1f, &(0x7f0000000280)=""/160, &(0x7f0000000200)=0xa0) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg$alg(r2, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) [ 652.783383] FAT-fs (loop2): Filesystem has been set read-only [ 652.875551] hfs: creator requires a 4 character value [ 652.903561] hfs: unable to parse mount options 16:25:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) alarm(0x81) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0xc00, 0x0) ioctl$VFIO_CHECK_EXTENSION(r5, 0x3b65, 0x2) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e21, 0x7f, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80}, 0x1c) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=@newlink={0x84, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60002}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x58, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0xffff}, @IFLA_IPTUN_PMTUDISC={0x5}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @ipv4={[], [], @multicast2}}, @IFLA_IPTUN_LINK={0x8}]}}}]}, 0x84}}, 0x0) 16:25:03 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x200000000000000, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:25:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:25:03 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) r6 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) timer_create(0x3, &(0x7f000049efa0), &(0x7f0000044000)) ftruncate(0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:25:03 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) getsockopt(r1, 0x80000000, 0x77a8fc1f, &(0x7f0000000280)=""/160, &(0x7f0000000200)=0xa0) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg$alg(r2, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) 16:25:03 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) getsockopt(r1, 0x80000000, 0x77a8fc1f, &(0x7f0000000280)=""/160, &(0x7f0000000200)=0xa0) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg$alg(r2, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) [ 653.490210] hfs: creator requires a 4 character value [ 653.496873] hfs: unable to parse mount options [ 653.602225] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 653.635035] QAT: Invalid ioctl [ 653.665854] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 16:25:04 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) getsockopt(r1, 0x80000000, 0x77a8fc1f, &(0x7f0000000280)=""/160, &(0x7f0000000200)=0xa0) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg$alg(r2, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) 16:25:04 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="380100000001190500480000000000000a000000440001002c0001001400030016f8bcd3830100000000000000d6b8bf14000400fe8000000000000000000000000000bb0c000200050001000000000006000300000200003c0002000c00020005000100000000002c00010014000300fe88000000000000000000000000000114000400ff020000000000000000000000000001080007000000000010000d000c000300040002004e2300008c000e002c00010014000300fe80000000000000000000000000001414000400fe8000000000000000000000000000bb46000300000300002c0001001400030000000000000000000000ffffac14140b140004004a925aa0ddf34330053d13c7087769421400010008000100ac1414aa08000200ac1414340c00020005000100110000000600030000040000"], 0x138}}, 0x0) 16:25:04 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x300000000000000, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:25:04 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r5) r7 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) [ 653.891111] QAT: Invalid ioctl 16:25:04 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:25:04 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r5) r7 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) [ 653.940652] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 653.953451] FAT-fs (loop2): Filesystem has been set read-only 16:25:04 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) getsockopt(r1, 0x80000000, 0x77a8fc1f, &(0x7f0000000280)=""/160, &(0x7f0000000200)=0xa0) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg$alg(r2, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) [ 654.020832] hfs: creator requires a 4 character value [ 654.065971] hfs: unable to parse mount options 16:25:04 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:25:04 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x400000000000000, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:25:04 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) getsockopt(r1, 0x80000000, 0x77a8fc1f, &(0x7f0000000280)=""/160, &(0x7f0000000200)=0xa0) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg$alg(r2, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) 16:25:05 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) r6 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) timer_create(0x3, &(0x7f000049efa0), &(0x7f0000044000)) ftruncate(0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) [ 654.681747] hfs: creator requires a 4 character value [ 654.697340] hfs: unable to parse mount options 16:25:05 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:25:05 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) getsockopt(r1, 0x80000000, 0x77a8fc1f, &(0x7f0000000280)=""/160, &(0x7f0000000200)=0xa0) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg$alg(r2, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) 16:25:05 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x500000000000000, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:25:05 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r5) r7 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:25:05 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r5) open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) [ 654.907394] validate_nla: 5 callbacks suppressed [ 654.907404] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 655.044680] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 655.052858] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 655.066229] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 655.121764] FAT-fs (loop0): Filesystem has been set read-only [ 655.158809] FAT-fs (loop2): Filesystem has been set read-only 16:25:05 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) getsockopt(r1, 0x80000000, 0x77a8fc1f, &(0x7f0000000280)=""/160, &(0x7f0000000200)=0xa0) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg$alg(r2, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) 16:25:05 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 655.305696] hfs: creator requires a 4 character value [ 655.310952] hfs: unable to parse mount options 16:25:05 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) getsockopt(r1, 0x80000000, 0x77a8fc1f, &(0x7f0000000280)=""/160, &(0x7f0000000200)=0xa0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) 16:25:05 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x600000000000000, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:25:05 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 655.416850] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:25:06 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) r6 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) timer_create(0x3, &(0x7f000049efa0), &(0x7f0000044000)) ftruncate(0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:25:06 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 655.901029] hfs: creator requires a 4 character value [ 655.910358] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 655.929745] hfs: unable to parse mount options 16:25:06 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) getsockopt(r1, 0x80000000, 0x77a8fc1f, &(0x7f0000000280)=""/160, &(0x7f0000000200)=0xa0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) 16:25:06 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x700000000000000, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) [ 656.077882] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:25:06 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) getsockopt(r1, 0x80000000, 0x77a8fc1f, &(0x7f0000000280)=""/160, &(0x7f0000000200)=0xa0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) 16:25:06 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r5) r7 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:25:06 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:25:06 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r5) open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) [ 656.261642] hfs: creator requires a 4 character value [ 656.284226] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 656.399683] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 656.408982] hfs: unable to parse mount options 16:25:06 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 656.475981] FAT-fs (loop0): Filesystem has been set read-only 16:25:06 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x48, &(0x7f00000000c0)={@rand_addr="980998c22371cdf49438cb6a3e82c3bb"}, 0x20) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg$alg(r2, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) 16:25:07 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0xa00000000000000, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) [ 656.612351] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:25:07 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:25:07 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) fchdir(r5) r7 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) timer_create(0x3, &(0x7f000049efa0), &(0x7f0000044000)) ftruncate(0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) [ 657.121303] hfs: creator requires a 4 character value 16:25:07 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) socket$inet6(0xa, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) [ 657.169134] hfs: unable to parse mount options [ 657.180083] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:25:07 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x1f00000000000000, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:25:07 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="380100000001190500000500000000000a000000440001002c0001001400030016f8bcd3830100000000000000d6b8bf14000400fe8000000000000000000000000000bb0c000200050001000000000006000300000200003c0002000c00020005000100000000002c00010014000300fe88000000000000000000000000000114000400ff020000000000000000000000000001080007000000000010000d000c000300040002004e2300008c000e002c00010014000300fe80000000000000000000000000001414000400fe8000000000000000000000000000bb46000300000300002c0001001400030000000000000000000000ffffac14140b140004004a925aa0ddf34330053d13c7087769421400010008000100ac1414aa08000200ac1414340c00020005000100110000000600030000040000"], 0x138}}, 0x0) 16:25:07 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) [ 657.372329] hfs: creator requires a 4 character value [ 657.379859] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 657.383649] hfs: unable to parse mount options 16:25:07 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r5) r7 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:25:07 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r5) open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:25:07 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="380100000001190500000600000000000a000000440001002c0001001400030016f8bcd3830100000000000000d6b8bf14000400fe8000000000000000000000000000bb0c000200050001000000000006000300000200003c0002000c00020005000100000000002c00010014000300fe88000000000000000000000000000114000400ff020000000000000000000000000001080007000000000010000d000c000300040002004e2300008c000e002c00010014000300fe80000000000000000000000000001414000400fe8000000000000000000000000000bb46000300000300002c0001001400030000000000000000000000ffffac14140b140004004a925aa0ddf34330053d13c7087769421400010008000100ac1414aa08000200ac1414340c00020005000100110000000600030000040000"], 0x138}}, 0x0) 16:25:08 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x2000000000000000, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) [ 657.764077] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 657.804016] FAT-fs (loop0): Filesystem has been set read-only 16:25:08 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) [ 657.825571] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:25:08 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 657.960406] hfs: creator requires a 4 character value 16:25:08 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) [ 658.014662] hfs: unable to parse mount options 16:25:08 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="380100000001190500000900000000000a000000440001002c0001001400030016f8bcd3830100000000000000d6b8bf14000400fe8000000000000000000000000000bb0c000200050001000000000006000300000200003c0002000c00020005000100000000002c00010014000300fe88000000000000000000000000000114000400ff020000000000000000000000000001080007000000000010000d000c000300040002004e2300008c000e002c00010014000300fe80000000000000000000000000001414000400fe8000000000000000000000000000bb46000300000300002c0001001400030000000000000000000000ffffac14140b140004004a925aa0ddf34330053d13c7087769421400010008000100ac1414aa08000200ac1414340c00020005000100110000000600030000040000"], 0x138}}, 0x0) 16:25:08 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x2200000000000000, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:25:08 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) fchdir(r5) r7 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) timer_create(0x3, &(0x7f000049efa0), &(0x7f0000044000)) ftruncate(0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:25:08 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) 16:25:08 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 658.618710] hfs: creator requires a 4 character value [ 658.660021] hfs: unable to parse mount options 16:25:09 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f00000002c0)) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r4) r6 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:25:09 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) 16:25:09 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:25:09 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r5) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:25:09 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x2c00000000000000, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) [ 658.855863] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 658.895624] FAT-fs (loop0): Filesystem has been set read-only 16:25:09 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:25:09 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) 16:25:09 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 659.278478] hfs: creator requires a 4 character value [ 659.286090] hfs: unable to parse mount options [ 659.421919] FAT-fs (loop2): error, invalid access to FAT (entry 0x00006500) [ 659.429504] FAT-fs (loop2): Filesystem has been set read-only 16:25:09 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) 16:25:10 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x3f00000000000000, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:25:10 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:25:10 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) fchdir(r5) r7 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) timer_create(0x3, &(0x7f000049efa0), &(0x7f0000044000)) ftruncate(0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) [ 659.756708] hfs: creator requires a 4 character value [ 659.809639] hfs: unable to parse mount options 16:25:10 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:25:10 executing program 3: connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) 16:25:10 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x4000000000000000, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:25:10 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r5) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:25:10 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f00000002c0)) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r4) r6 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:25:10 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 660.282088] validate_nla: 7 callbacks suppressed [ 660.282093] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:25:10 executing program 3: connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) [ 660.330149] hfs: creator requires a 4 character value [ 660.344540] hfs: unable to parse mount options 16:25:10 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x4800000000000000, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) [ 660.460041] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:25:10 executing program 3: connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) 16:25:10 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 660.539394] hfs: creator requires a 4 character value [ 660.545299] hfs: unable to parse mount options [ 660.627200] FAT-fs (loop2): error, invalid access to FAT (entry 0x00006500) [ 660.634887] FAT-fs (loop2): Filesystem has been set read-only 16:25:11 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) fchdir(r5) r7 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) timer_create(0x3, &(0x7f000049efa0), &(0x7f0000044000)) ftruncate(0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:25:11 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x4c00000000000000, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) [ 660.820538] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:25:11 executing program 3: r0 = socket$inet(0xa, 0x0, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) 16:25:11 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 660.951899] hfs: creator requires a 4 character value [ 660.963584] hfs: unable to parse mount options 16:25:11 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x6800000000000000, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) [ 661.040874] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:25:11 executing program 3: r0 = socket$inet(0xa, 0x0, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) 16:25:11 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f00000002c0)) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r4) r6 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:25:11 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r5) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:25:11 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 661.511703] hfs: creator requires a 4 character value 16:25:11 executing program 3: r0 = socket$inet(0xa, 0x0, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) [ 661.534103] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 661.560983] hfs: unable to parse mount options 16:25:11 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:25:12 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x6c00000000000000, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) [ 661.678562] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 661.852290] FAT-fs (loop2): error, invalid access to FAT (entry 0x00006500) [ 661.859503] FAT-fs (loop2): Filesystem has been set read-only 16:25:12 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="380100000001190500004c00000000000a000000440001002c0001001400030016f8bcd3830100000000000000d6b8bf14000400fe8000000000000000000000000000bb0c000200050001000000000006000300000200003c0002000c00020005000100000000002c00010014000300fe88000000000000000000000000000114000400ff020000000000000000000000000001080007000000000010000d000c000300040002004e2300008c000e002c00010014000300fe80000000000000000000000000001414000400fe8000000000000000000000000000bb46000300000300002c0001001400030000000000000000000000ffffac14140b140004004a925aa0ddf34330053d13c7087769421400010008000100ac1414aa08000200ac1414340c00020005000100110000000600030000040000"], 0x138}}, 0x0) 16:25:12 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) fchdir(r5) r7 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) timer_create(0x3, &(0x7f000049efa0), &(0x7f0000044000)) ftruncate(0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:25:12 executing program 3: r0 = socket$inet(0xa, 0x801, 0x0) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) 16:25:12 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 662.122710] hfs: creator requires a 4 character value [ 662.132725] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 662.158923] hfs: unable to parse mount options 16:25:12 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x7400000000000000, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) [ 662.313964] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:25:12 executing program 3: r0 = socket$inet(0xa, 0x801, 0x0) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) 16:25:12 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) r6 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:25:12 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f00000002c0)) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r4) open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:25:12 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 662.439542] hfs: creator requires a 4 character value [ 662.452984] hfs: unable to parse mount options [ 662.514456] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:25:12 executing program 3: r0 = socket$inet(0xa, 0x801, 0x0) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) 16:25:13 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:25:13 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x7a00000000000000, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) [ 662.858202] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 662.894731] FAT-fs (loop0): Filesystem has been set read-only [ 662.951613] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:25:13 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) [ 663.058204] hfs: creator requires a 4 character value [ 663.173531] hfs: unable to parse mount options 16:25:13 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) fchdir(r5) r7 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) timer_create(0x3, &(0x7f000049efa0), &(0x7f0000044000)) ftruncate(0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:25:13 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:25:13 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x8cffffff00000000, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:25:13 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:25:13 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) [ 663.496420] hfs: creator requires a 4 character value [ 663.511304] hfs: unable to parse mount options 16:25:14 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) 16:25:14 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) r6 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:25:14 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:25:14 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x97ffffff00000000, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:25:14 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, 0x0, 0x0) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) 16:25:14 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f00000002c0)) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r4) open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:25:14 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 664.153146] hfs: creator requires a 4 character value [ 664.163345] hfs: unable to parse mount options 16:25:14 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) fchdir(r5) r7 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) timer_create(0x3, &(0x7f000049efa0), &(0x7f0000044000)) ftruncate(0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:25:14 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, 0x0, 0x0) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) 16:25:14 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0xba0e000000000000, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:25:14 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:25:15 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, 0x0, 0x0) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) [ 664.615184] hfs: creator requires a 4 character value [ 664.651537] hfs: unable to parse mount options 16:25:15 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:25:15 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) 16:25:15 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0xe403000000000000, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:25:15 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3801000000011905000afd00000000000a000000440001002c0001001400030016f8bcd3830100000000000000d6b8bf14000400fe8000000000000000000000000000bb0c000200050001000000000006000300000200003c0002000c00020005000100000000002c00010014000300fe88000000000000000000000000000114000400ff020000000000000000000000000001080007000000000010000d000c000300040002004e2300008c000e002c00010014000300fe80000000000000000000000000001414000400fe8000000000000000000000000000bb46000300000300002c0001001400030000000000000000000000ffffac14140b140004004a925aa0ddf34330053d13c7087769421400010008000100ac1414aa08000200ac1414340c00020005000100110000000600030000040000"], 0x138}}, 0x0) 16:25:15 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) r6 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:25:15 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f00000002c0)) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r4) open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:25:15 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) [ 665.268675] hfs: creator requires a 4 character value [ 665.297508] hfs: unable to parse mount options 16:25:15 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="380100000001190500004003000000000a000000440001002c0001001400030016f8bcd3830100000000000000d6b8bf14000400fe8000000000000000000000000000bb0c000200050001000000000006000300000200003c0002000c00020005000100000000002c00010014000300fe88000000000000000000000000000114000400ff020000000000000000000000000001080007000000000010000d000c000300040002004e2300008c000e002c00010014000300fe80000000000000000000000000001414000400fe8000000000000000000000000000bb46000300000300002c0001001400030000000000000000000000ffffac14140b140004004a925aa0ddf34330053d13c7087769421400010008000100ac1414aa08000200ac1414340c00020005000100110000000600030000040000"], 0x138}}, 0x0) 16:25:15 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0xf6ffffff00000000, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:25:15 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) 16:25:15 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) fchdir(r5) r7 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) timer_create(0x3, &(0x7f000049efa0), &(0x7f0000044000)) ftruncate(0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) [ 665.554729] validate_nla: 7 callbacks suppressed [ 665.554738] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:25:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 665.779541] hfs: creator requires a 4 character value 16:25:16 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) [ 665.872185] hfs: unable to parse mount options 16:25:16 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0xfcfdffff00000000, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:25:16 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) [ 665.945757] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:25:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:25:16 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) fchdir(r5) r7 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:25:16 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f00000002c0)) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r4) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:25:16 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) [ 666.411456] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:25:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="380100000001190500fffff0000000000a000000440001002c0001001400030016f8bcd3830100000000000000d6b8bf14000400fe8000000000000000000000000000bb0c000200050001000000000006000300000200003c0002000c00020005000100000000002c00010014000300fe88000000000000000000000000000114000400ff020000000000000000000000000001080007000000000010000d000c000300040002004e2300008c000e002c00010014000300fe80000000000000000000000000001414000400fe8000000000000000000000000000bb46000300000300002c0001001400030000000000000000000000ffffac14140b140004004a925aa0ddf34330053d13c7087769421400010008000100ac1414aa08000200ac1414340c00020005000100110000000600030000040000"], 0x138}}, 0x0) [ 666.482698] hfs: creator requires a 4 character value [ 666.500958] hfs: unable to parse mount options [ 666.562940] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:25:16 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0xfdfdffff00000000, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:25:17 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) [ 666.768595] hfs: creator requires a 4 character value [ 666.790961] hfs: unable to parse mount options [ 666.807770] FAT-fs (loop0): error, invalid access to FAT (entry 0x00006500) [ 666.814973] FAT-fs (loop0): Filesystem has been set read-only 16:25:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:25:17 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) fchdir(r5) r7 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) timer_create(0x3, &(0x7f000049efa0), &(0x7f0000044000)) ftruncate(0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:25:17 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) [ 667.062233] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:25:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:25:17 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0xfdffffff00000000, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:25:17 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) [ 667.243638] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 667.313164] hfs: creator requires a 4 character value [ 667.350968] hfs: unable to parse mount options 16:25:18 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) fchdir(r5) r7 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:25:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:25:18 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) 16:25:18 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f00000002c0)) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r4) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:25:18 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0xffff1f0000000000, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) [ 667.747262] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:25:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 667.797920] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF 16:25:18 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) [ 667.849775] FAT-fs (loop2): Filesystem has been set read-only [ 667.878513] hfs: creator requires a 4 character value [ 667.891214] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 667.914679] hfs: unable to parse mount options 16:25:18 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) fchdir(r5) r6 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) timer_create(0x3, &(0x7f000049efa0), &(0x7f0000044000)) ftruncate(0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:25:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:25:18 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0xffffff7f00000000, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:25:18 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) [ 668.069836] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 668.083996] FAT-fs (loop0): error, invalid access to FAT (entry 0x00006500) [ 668.091179] FAT-fs (loop0): Filesystem has been set read-only 16:25:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 668.462823] hfs: creator requires a 4 character value [ 668.503498] hfs: unable to parse mount options [ 668.520583] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:25:19 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) fchdir(r5) r7 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:25:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:25:19 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) 16:25:19 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f00000002c0)) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r4) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:25:19 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0xffffffff00000000, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) [ 668.981173] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 669.020448] FAT-fs (loop2): Filesystem has been set read-only [ 669.037561] hfs: creator requires a 4 character value 16:25:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:25:19 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) [ 669.068590] hfs: unable to parse mount options [ 669.221798] FAT-fs (loop0): error, invalid access to FAT (entry 0x00006500) [ 669.229302] FAT-fs (loop0): Filesystem has been set read-only 16:25:19 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:25:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:25:19 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) fchdir(r5) r6 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) timer_create(0x3, &(0x7f000049efa0), &(0x7f0000044000)) ftruncate(0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:25:19 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) 16:25:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 669.438137] hfs: creator requires a 4 character value [ 669.671119] hfs: unable to parse mount options 16:25:20 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x2, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:25:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:25:20 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f00000002c0)) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) r5 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:25:20 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100), 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) 16:25:20 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r5) r7 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:25:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 670.180387] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 670.199232] FAT-fs (loop2): Filesystem has been set read-only [ 670.242187] hfs: creator requires a 4 character value 16:25:20 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100), 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) [ 670.267128] hfs: unable to parse mount options 16:25:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:25:20 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x3, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:25:20 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) fchdir(r5) r6 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) timer_create(0x3, &(0x7f000049efa0), &(0x7f0000044000)) ftruncate(0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:25:20 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100), 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) 16:25:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:25:21 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) [ 670.869324] hfs: creator requires a 4 character value [ 670.878356] hfs: unable to parse mount options [ 670.888893] validate_nla: 8 callbacks suppressed [ 670.888902] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:25:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:25:21 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x4, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:25:21 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) [ 671.099058] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 671.165922] hfs: creator requires a 4 character value [ 671.464802] hfs: unable to parse mount options 16:25:21 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f00000002c0)) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) r5 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:25:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:25:21 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) 16:25:21 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r5) r7 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:25:21 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x5, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) [ 671.578608] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 671.595480] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 671.615155] FAT-fs (loop2): Filesystem has been set read-only [ 671.681910] hfs: creator requires a 4 character value [ 671.690133] hfs: unable to parse mount options 16:25:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="380100000001190500000000400000000a000000440001002c0001001400030016f8bcd3830100000000000000d6b8bf14000400fe8000000000000000000000000000bb0c000200050001000000000006000300000200003c0002000c00020005000100000000002c00010014000300fe88000000000000000000000000000114000400ff020000000000000000000000000001080007000000000010000d000c000300040002004e2300008c000e002c00010014000300fe80000000000000000000000000001414000400fe8000000000000000000000000000bb46000300000300002c0001001400030000000000000000000000ffffac14140b140004004a925aa0ddf34330053d13c7087769421400010008000100ac1414aa08000200ac1414340c00020005000100110000000600030000040000"], 0x138}}, 0x0) 16:25:22 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) 16:25:22 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x6, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:25:22 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f00000002c0)) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) fchdir(r4) r5 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) timer_create(0x3, &(0x7f000049efa0), &(0x7f0000044000)) ftruncate(0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) [ 671.872459] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:25:22 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) 16:25:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 672.206572] hfs: creator requires a 4 character value [ 672.239470] hfs: unable to parse mount options [ 672.259362] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:25:22 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) 16:25:23 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f00000002c0)) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) r5 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:25:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:25:23 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x7, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) [ 672.737459] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:25:23 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r5) r7 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:25:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:25:23 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140), 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) [ 672.802579] hfs: creator requires a 4 character value [ 672.844516] hfs: unable to parse mount options [ 672.850605] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 672.860216] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 672.868085] FAT-fs (loop2): Filesystem has been set read-only 16:25:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:25:23 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140), 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) [ 673.032394] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:25:23 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0xa, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:25:23 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f00000002c0)) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) fchdir(r4) r5 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) timer_create(0x3, &(0x7f000049efa0), &(0x7f0000044000)) ftruncate(0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:25:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:25:23 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140), 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) [ 673.185850] hfs: creator requires a 4 character value [ 673.212889] hfs: unable to parse mount options [ 673.451585] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:25:24 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) 16:25:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:25:24 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x10, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:25:24 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f00000002c0)) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) fchdir(r4) r6 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:25:24 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r5) r7 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:25:24 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) [ 673.992199] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 674.003391] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 674.011398] FAT-fs (loop2): Filesystem has been set read-only 16:25:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 674.116250] hfs: creator requires a 4 character value [ 674.142852] hfs: unable to parse mount options 16:25:24 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f00000002c0)) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) fchdir(r4) r5 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) timer_create(0x3, &(0x7f000049efa0), &(0x7f0000044000)) ftruncate(0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:25:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:25:24 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) 16:25:24 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x22, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:25:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 674.788914] hfs: creator requires a 4 character value [ 674.804569] hfs: unable to parse mount options 16:25:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:25:25 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) 16:25:25 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r5) r7 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:25:25 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f00000002c0)) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) fchdir(r4) r6 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:25:25 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f00000002c0)) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) fchdir(r4) r5 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) timer_create(0x3, &(0x7f000049efa0), &(0x7f0000044000)) ftruncate(0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:25:25 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x2c, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:25:25 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) [ 675.197749] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 675.213373] FAT-fs (loop2): Filesystem has been set read-only 16:25:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 675.272519] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 675.280899] FAT-fs (loop0): Filesystem has been set read-only 16:25:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 675.401525] hfs: creator requires a 4 character value [ 675.417719] hfs: unable to parse mount options 16:25:25 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) 16:25:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="38010000000119050000000afc0000000a000000440001002c0001001400030016f8bcd3830100000000000000d6b8bf14000400fe8000000000000000000000000000bb0c000200050001000000000006000300000200003c0002000c00020005000100000000002c00010014000300fe88000000000000000000000000000114000400ff020000000000000000000000000001080007000000000010000d000c000300040002004e2300008c000e002c00010014000300fe80000000000000000000000000001414000400fe8000000000000000000000000000bb46000300000300002c0001001400030000000000000000000000ffffac14140b140004004a925aa0ddf34330053d13c7087769421400010008000100ac1414aa08000200ac1414340c00020005000100110000000600030000040000"], 0x138}}, 0x0) 16:25:26 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x48, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) [ 676.102624] validate_nla: 7 callbacks suppressed [ 676.102633] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:25:26 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) 16:25:26 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r5) r7 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) [ 676.220859] hfs: creator requires a 4 character value 16:25:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:25:26 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f00000002c0)) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) fchdir(r4) r6 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:25:26 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f00000002c0)) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) fchdir(0xffffffffffffffff) r4 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) timer_create(0x3, &(0x7f000049efa0), &(0x7f0000044000)) ftruncate(0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) [ 676.248258] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 676.255379] hfs: unable to parse mount options [ 676.286502] FAT-fs (loop2): Filesystem has been set read-only 16:25:26 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) 16:25:26 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x4c, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:25:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="38010000000119050000f0ffff0000000a000000440001002c0001001400030016f8bcd3830100000000000000d6b8bf14000400fe8000000000000000000000000000bb0c000200050001000000000006000300000200003c0002000c00020005000100000000002c00010014000300fe88000000000000000000000000000114000400ff020000000000000000000000000001080007000000000010000d000c000300040002004e2300008c000e002c00010014000300fe80000000000000000000000000001414000400fe8000000000000000000000000000bb46000300000300002c0001001400030000000000000000000000ffffac14140b140004004a925aa0ddf34330053d13c7087769421400010008000100ac1414aa08000200ac1414340c00020005000100110000000600030000040000"], 0x138}}, 0x0) [ 676.351708] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:25:26 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) 16:25:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 676.518262] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 676.532748] hfs: creator requires a 4 character value [ 676.550199] hfs: unable to parse mount options 16:25:27 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x68, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) [ 677.163283] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:25:27 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) 16:25:27 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r5) r7 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:25:27 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f00000002c0)) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) fchdir(0xffffffffffffffff) r4 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) timer_create(0x3, &(0x7f000049efa0), &(0x7f0000044000)) ftruncate(0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:25:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3801000000011905009effffff0000000a000000440001002c0001001400030016f8bcd3830100000000000000d6b8bf14000400fe8000000000000000000000000000bb0c000200050001000000000006000300000200003c0002000c00020005000100000000002c00010014000300fe88000000000000000000000000000114000400ff020000000000000000000000000001080007000000000010000d000c000300040002004e2300008c000e002c00010014000300fe80000000000000000000000000001414000400fe8000000000000000000000000000bb46000300000300002c0001001400030000000000000000000000ffffac14140b140004004a925aa0ddf34330053d13c7087769421400010008000100ac1414aa08000200ac1414340c00020005000100110000000600030000040000"], 0x138}}, 0x0) [ 677.332243] hfs: creator requires a 4 character value [ 677.353960] hfs: unable to parse mount options 16:25:27 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f00000002c0)) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x40]}) fchdir(r4) r6 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:25:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) 16:25:27 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) [ 677.376902] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 677.395010] FAT-fs (loop2): Filesystem has been set read-only [ 677.399910] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:25:27 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x6c, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) [ 677.467682] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 677.483707] FAT-fs (loop0): Filesystem has been set read-only [ 677.545543] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 16:25:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="380100000001190500000000000000000c000000440001002c0001001400030016f8bcd3830100000000000000d6b8bf14000400fe8000000000000000000000000000bb0c000200050001000000000006000300000200003c0002000c00020005000100000000002c00010014000300fe88000000000000000000000000000114000400ff020000000000000000000000000001080007000000000010000d000c000300040002004e2300008c000e002c00010014000300fe80000000000000000000000000001414000400fe8000000000000000000000000000bb46000300000300002c0001001400030000000000000000000000ffffac14140b140004004a925aa0ddf34330053d13c7087769421400010008000100ac1414aa08000200ac1414340c00020005000100110000000600030000040000"], 0x138}}, 0x0) 16:25:28 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) [ 677.849325] hfs: creator requires a 4 character value [ 677.870562] hfs: unable to parse mount options 16:25:28 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x74, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) 16:25:28 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f00000002c0)) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) fchdir(0xffffffffffffffff) r4 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) timer_create(0x3, &(0x7f000049efa0), &(0x7f0000044000)) ftruncate(0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:25:28 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) 16:25:28 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0xe13c, 0x7fff, 0x1, 0x81}, {0x80000007, 0x0, 0x8, 0x374, 0x66e90956}]}) fchdir(r5) r6 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:25:28 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) [ 678.563846] hfs: creator requires a 4 character value [ 678.580835] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 678.589300] hfs: unable to parse mount options [ 678.606392] FAT-fs (loop2): Filesystem has been set read-only 16:25:29 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f00000002c0)) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="408cd85e879fc6af66d8804e1e5401c384a46908ce8ce32e914ba5c1c9895520f8b94e5447f0951a8ce05086714b02c40a048a442bbd52c9f1043c7fd8481bd811dc065491fb8cec10f7cfeff5d23e3646d1c6d4fba782f94b440801c6baaa5204c75ab6d6a08f4411178080638ae2828775d5bce6d691142d397d67c3600cd560be057b1876b1", 0x87}], 0x1}, 0x20040880) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) fchdir(r4) r6 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 16:25:29 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x7a, 0x0, 0x0, &(0x7f0000001a40)={[{@creator={'creator', 0x3d, '\\Ae\x00'}}]}) [ 678.779775] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF 16:25:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) [ 678.873435] FAT-fs (loop0): Filesystem has been set read-only 16:25:29 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) [ 679.011763] hfs: creator requires a 4 character value [ 679.071358] ================================================================== [ 679.079118] BUG: KASAN: global-out-of-bounds in nfnetlink_parse_nat_setup+0x3fb/0x410 [ 679.087099] Read of size 8 at addr ffffffff880fa978 by task syz-executor.5/24961 [ 679.094633] [ 679.096280] CPU: 0 PID: 24961 Comm: syz-executor.5 Not tainted 4.19.107-syzkaller #0 [ 679.104163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 679.113515] Call Trace: [ 679.116117] dump_stack+0x188/0x20d [ 679.119756] ? nfnetlink_parse_nat_setup+0x3fb/0x410 [ 679.124874] print_address_description.cold+0x5/0x212 [ 679.130076] ? nfnetlink_parse_nat_setup+0x3fb/0x410 [ 679.135184] kasan_report.cold+0x88/0x2b9 [ 679.139341] nfnetlink_parse_nat_setup+0x3fb/0x410 [ 679.144282] ? nf_nat_inet_fn+0x8c0/0x8c0 [ 679.148448] ? __lock_is_held+0xad/0x140 [ 679.152525] ctnetlink_parse_nat_setup+0xb6/0x640 [ 679.157377] ctnetlink_create_conntrack+0x4b7/0x1280 [ 679.162498] ? ctnetlink_dump_table+0x11e0/0x11e0 [ 679.167356] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 679.172637] ? hash_conntrack_raw+0x2d3/0x450 [ 679.177146] ? nf_ct_unconfirmed_destroy+0xa0/0xa0 [ 679.182087] ? __nf_conntrack_confirm+0x2fc0/0x2fc0 [ 679.187122] ctnetlink_new_conntrack+0x4f5/0xde0 [ 679.191896] ? ctnetlink_create_conntrack+0x1280/0x1280 [ 679.192610] hfs: unable to parse mount options [ 679.197263] ? mutex_trylock+0x1a0/0x1a0 [ 679.197302] ? __lock_is_held+0xad/0x140 [ 679.197321] ? check_preemption_disabled+0x41/0x280 [ 679.197339] ? ctnetlink_create_conntrack+0x1280/0x1280 [ 679.197354] nfnetlink_rcv_msg+0xc9e/0xf4b [ 679.197378] ? nfnetlink_bind+0x2b0/0x2b0 [ 679.228942] ? __local_bh_enable_ip+0x159/0x270 [ 679.233632] ? cred_has_capability+0x162/0x2e0 [ 679.238228] ? cred_has_capability+0x16d/0x2e0 [ 679.242827] ? selinux_ipv4_output+0x50/0x50 [ 679.247268] ? selinux_ipv4_output+0x50/0x50 [ 679.251715] netlink_rcv_skb+0x160/0x410 [ 679.255789] ? nfnetlink_bind+0x2b0/0x2b0 [ 679.259957] ? netlink_ack+0xa60/0xa60 [ 679.263870] ? ns_capable_common+0xe2/0x100 [ 679.268209] nfnetlink_rcv+0x1b2/0x420 [ 679.272107] ? nfnetlink_rcv_batch+0x15e0/0x15e0 [ 679.276883] netlink_unicast+0x4d7/0x6a0 [ 679.280960] ? netlink_attachskb+0x710/0x710 [ 679.285392] netlink_sendmsg+0x80b/0xcd0 [ 679.289476] ? netlink_unicast+0x6a0/0x6a0 [ 679.293718] ? move_addr_to_kernel.part.0+0x110/0x110 [ 679.298927] ? netlink_unicast+0x6a0/0x6a0 [ 679.303166] sock_sendmsg+0xcf/0x120 [ 679.306890] ___sys_sendmsg+0x803/0x920 [ 679.310878] ? copy_msghdr_from_user+0x410/0x410 [ 679.315643] ? __fget+0x319/0x510 [ 679.319111] ? lock_downgrade+0x740/0x740 [ 679.323277] ? check_preemption_disabled+0x41/0x280 [ 679.328307] ? __fget+0x340/0x510 [ 679.331804] ? iterate_fd+0x350/0x350 [ 679.335627] ? __fget_light+0x1d1/0x230 [ 679.339615] __sys_sendmsg+0xec/0x1b0 [ 679.343428] ? __ia32_sys_shutdown+0x70/0x70 [ 679.347860] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 679.352632] ? trace_hardirqs_off_caller+0x55/0x210 [ 679.357666] ? do_syscall_64+0x21/0x620 [ 679.361655] do_syscall_64+0xf9/0x620 [ 679.365484] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 679.370676] RIP: 0033:0x45c479 [ 679.373865] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 679.392820] RSP: 002b:00007fea4cfe0c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 679.400563] RAX: ffffffffffffffda RBX: 00007fea4cfe16d4 RCX: 000000000045c479 [ 679.407828] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 679.415097] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 679.422376] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 679.429643] R13: 0000000000000914 R14: 00000000004cb741 R15: 000000000076bf2c [ 679.436909] [ 679.438523] The buggy address belongs to the variable: [ 679.443938] nft_immediate_policy+0x138/0x140 [ 679.448472] [ 679.450095] Memory state around the buggy address: [ 679.455024] ffffffff880fa800: 00 fa fa fa fa fa fa fa 00 00 00 00 00 00 fa fa [ 679.462368] ffffffff880fa880: fa fa fa fa 00 00 00 00 00 00 00 00 00 00 00 00 [ 679.469745] >ffffffff880fa900: 00 00 00 00 fa fa fa fa 04 fa fa fa fa fa fa fa [ 679.477221] ^ [ 679.484497] ffffffff880fa980: 00 00 00 00 00 00 00 00 00 00 00 00 00 fa fa fa [ 679.491846] ffffffff880faa00: fa fa fa fa 00 00 00 00 00 00 00 00 00 00 00 00 [ 679.499196] ================================================================== [ 679.506547] Disabling lock debugging due to kernel taint [ 679.516295] Kernel panic - not syncing: panic_on_warn set ... [ 679.516295] 16:25:29 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f00000002c0)) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) fchdir(r4) r5 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) timer_create(0x3, &(0x7f000049efa0), &(0x7f0000044000)) ftruncate(0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) [ 679.523678] CPU: 0 PID: 24961 Comm: syz-executor.5 Tainted: G B 4.19.107-syzkaller #0 [ 679.532946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 679.542300] Call Trace: [ 679.544902] dump_stack+0x188/0x20d [ 679.548608] panic+0x26a/0x50e [ 679.551810] ? __warn_printk+0xf3/0xf3 [ 679.555715] ? preempt_schedule_common+0x4a/0xc0 [ 679.560486] ? nfnetlink_parse_nat_setup+0x3fb/0x410 [ 679.565600] ? ___preempt_schedule+0x16/0x18 [ 679.569999] ? trace_hardirqs_on+0x55/0x210 [ 679.574323] ? nfnetlink_parse_nat_setup+0x3fb/0x410 [ 679.579496] kasan_end_report+0x43/0x49 [ 679.583533] kasan_report.cold+0xa4/0x2b9 [ 679.587699] nfnetlink_parse_nat_setup+0x3fb/0x410 [ 679.592631] ? nf_nat_inet_fn+0x8c0/0x8c0 [ 679.596809] ? __lock_is_held+0xad/0x140 [ 679.600877] ctnetlink_parse_nat_setup+0xb6/0x640 [ 679.605719] ctnetlink_create_conntrack+0x4b7/0x1280 [ 679.610812] ? ctnetlink_dump_table+0x11e0/0x11e0 [ 679.615650] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 679.620830] ? hash_conntrack_raw+0x2d3/0x450 [ 679.625314] ? nf_ct_unconfirmed_destroy+0xa0/0xa0 [ 679.630235] ? __nf_conntrack_confirm+0x2fc0/0x2fc0 [ 679.635238] ctnetlink_new_conntrack+0x4f5/0xde0 [ 679.639983] ? ctnetlink_create_conntrack+0x1280/0x1280 [ 679.645331] ? mutex_trylock+0x1a0/0x1a0 [ 679.649395] ? __lock_is_held+0xad/0x140 [ 679.653445] ? check_preemption_disabled+0x41/0x280 [ 679.658486] ? ctnetlink_create_conntrack+0x1280/0x1280 [ 679.663843] nfnetlink_rcv_msg+0xc9e/0xf4b [ 679.668069] ? nfnetlink_bind+0x2b0/0x2b0 [ 679.672215] ? __local_bh_enable_ip+0x159/0x270 [ 679.676876] ? cred_has_capability+0x162/0x2e0 [ 679.681451] ? cred_has_capability+0x16d/0x2e0 [ 679.686026] ? selinux_ipv4_output+0x50/0x50 [ 679.690447] ? selinux_ipv4_output+0x50/0x50 [ 679.694868] netlink_rcv_skb+0x160/0x410 [ 679.698929] ? nfnetlink_bind+0x2b0/0x2b0 [ 679.703067] ? netlink_ack+0xa60/0xa60 [ 679.706943] ? ns_capable_common+0xe2/0x100 [ 679.711256] nfnetlink_rcv+0x1b2/0x420 [ 679.715144] ? nfnetlink_rcv_batch+0x15e0/0x15e0 [ 679.719900] netlink_unicast+0x4d7/0x6a0 [ 679.723952] ? netlink_attachskb+0x710/0x710 [ 679.728382] netlink_sendmsg+0x80b/0xcd0 [ 679.732471] ? netlink_unicast+0x6a0/0x6a0 [ 679.736702] ? move_addr_to_kernel.part.0+0x110/0x110 [ 679.741878] ? netlink_unicast+0x6a0/0x6a0 [ 679.746100] sock_sendmsg+0xcf/0x120 [ 679.749864] ___sys_sendmsg+0x803/0x920 [ 679.753839] ? copy_msghdr_from_user+0x410/0x410 [ 679.758599] ? __fget+0x319/0x510 [ 679.762042] ? lock_downgrade+0x740/0x740 [ 679.766227] ? check_preemption_disabled+0x41/0x280 [ 679.771234] ? __fget+0x340/0x510 [ 679.774692] ? iterate_fd+0x350/0x350 [ 679.778495] ? __fget_light+0x1d1/0x230 [ 679.782535] __sys_sendmsg+0xec/0x1b0 [ 679.786403] ? __ia32_sys_shutdown+0x70/0x70 [ 679.790806] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 679.795550] ? trace_hardirqs_off_caller+0x55/0x210 [ 679.800566] ? do_syscall_64+0x21/0x620 [ 679.804538] do_syscall_64+0xf9/0x620 [ 679.808368] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 679.813545] RIP: 0033:0x45c479 [ 679.816727] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 679.835624] RSP: 002b:00007fea4cfe0c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 679.843346] RAX: ffffffffffffffda RBX: 00007fea4cfe16d4 RCX: 000000000045c479 [ 679.850613] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 679.857880] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 679.865147] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 679.872416] R13: 0000000000000914 R14: 00000000004cb741 R15: 000000000076bf2c [ 679.880983] Kernel Offset: disabled [ 679.884605] Rebooting in 86400 seconds..