0x2, 0x2, 0xab, 0x1, 0x5, r10, r18}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r19, r20, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r23, r24, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r27, r28, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r29 = socket(0x10, 0x4000000000000002, 0xc) write(r29, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000840)='/dev/rfkill\x00', 0x2000, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000880)='/dev/btrfs-control\x00', 0x541000, 0x0) r30 = socket(0x10, 0x4000000000000002, 0xc) write(r30, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r31 = socket(0x10, 0x4000000000000002, 0xc) write(r31, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) syz_open_dev$sndpcmc(&(0x7f00000008c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x800) r32 = getpid() sched_setattr(r32, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)) r33 = socket$nl_xfrm(0x10, 0x3, 0x6) r34 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r34, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r33, 0x0, r35) r36 = socket(0x10, 0x4000000000000002, 0xc) write(r36, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$md(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/md0\x00', 0x10002, 0x0) r37 = socket(0x10, 0x4000000000000002, 0xc) write(r37, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r39 = dup(r38) ioctl$PERF_EVENT_IOC_ENABLE(r39, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r39, 0xc0502100, &(0x7f0000000a00)) stat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)) r40 = socket$nl_xfrm(0x10, 0x3, 0x6) r41 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r41, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r40, 0x0, r42) getgroups(0x4, &(0x7f0000000b40)=[0xee00, 0xee00, 0xffffffffffffffff, r42]) r43 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r43, &(0x7f0000000300), 0x12) r44 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r44, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r44, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r44, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r44, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r44, &(0x7f0000000080)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e11bf746b048e9a94b61db6b4c41bd5a5259e62506cda287b857aacc858a00a60f818b2292c594e6707bfab893045fca422a6c99f5f450f79c1d464019ba3855d48ab458d233ff1fe27afb17f", 0xffffffffffffff72, 0x2a0400d6, 0x0, 0xfffffecb) [ 286.909888][T13099] fuse: Bad value for 'fd' 09:34:33 executing program 5: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r1, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r3 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYRESOCT=r4], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000000)={0x0}) 09:34:33 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xc8}, 0x1c) socket$inet6(0xa, 0x80003, 0x80) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ioctl(r1, 0xe0, &(0x7f0000000100)="0805b5055e0bcfe84740719309ce0b925e114f8cb4219c426b805658e95d78fc0dc7d9183f80c002f67c6b1ae086be4c8515331afb7ac9f072aa8a77f187e8df127929fed7637779de564b288cf8345da1640097f6c69d65d354f0601eb65ed7c56022030000006ef130d8c05e3324328c14e3440d6701c92abc148d84a386107cb4646011ac0507f30e9ff5d3c535f6d161f8218a4c042d9cbed79d16b28b7b04581328ff3e") bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81004e22a31b00000028925aa80020007b00090080000efffeffe809000000ff0000f03ac710c8000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x1, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x80010, r3, 0xa000) r4 = socket(0x10, 0x4000000000000002, 0xc) write(r4, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket(0x10, 0x4000000000000002, 0xc) write(r7, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f00000004c0)=0x8f) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000100)={0x4, 0x7, 0x2, 0x2000, &(0x7f0000018000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) 09:34:33 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xc8}, 0x1c) socket$inet6(0xa, 0x80003, 0x80) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ioctl(r1, 0xe0, &(0x7f0000000100)="0805b5055e0bcfe84740719309ce0b925e114f8cb4219c426b805658e95d78fc0dc7d9183f80c002f67c6b1ae086be4c8515331afb7ac9f072aa8a77f187e8df127929fed7637779de564b288cf8345da1640097f6c69d65d354f0601eb65ed7c56022030000006ef130d8c05e3324328c14e3440d6701c92abc148d84a386107cb4646011ac0507f30e9ff5d3c535f6d161f8218a4c042d9cbed79d16b28b7b04581328ff3e") bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81004e22a31b00000028925aa80020007b00090080000efffeffe809000000ff0000f03ac710c8000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x1, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x80010, r3, 0xa000) r4 = socket(0x10, 0x4000000000000002, 0xc) write(r4, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket(0x10, 0x4000000000000002, 0xc) write(r7, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f00000004c0)=0x8f) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000500)='/dev/dlm-monitor\x00', 0x0, 0x0) 09:34:33 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c288000000000000000086f16000140000303a0000000000000000000200000000000000ff0200000000000000000000000000010100907800090400600000000000f7ff00000000000000000000fffffffffffc00000000000000000000ffffffffffff"], 0x0) r0 = socket(0x10, 0x4000000000000002, 0xc) write(r0, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r1 = semget$private(0x0, 0x2000000010a, 0x0) semop(r1, &(0x7f0000000100)=[{0x0, 0xfffffffffffefffc}], 0x1) semop(r1, &(0x7f0000000040)=[{0x0, 0x316f}, {0x0, 0xff}], 0x2) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r3 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r4}}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r6 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r7 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r7, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r9}, 0x18, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r11 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r11) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r12, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r13, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r11, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r13}}, 0x18) r14 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r14) r15 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r15, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r15, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r16, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r14, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r16}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r11, @ANYRES32=r9, @ANYRES32=r14, @ANYRES32=r10, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r17 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r20, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r22}, 0x18, 0x0) r23 = getegid() r24 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r25 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r24, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r26}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r27}}) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r3, r4, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r9, r17}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r18, r19, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r22, r23, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r26, r27, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) r28 = socket$nl_xfrm(0x10, 0x3, 0x6) r29 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r28, 0x0, r30) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r31}}) r32 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r32, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r32, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r32, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r33 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r34 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r35 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r35, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r34, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r36}, 0x18, 0x0) getsockopt$sock_cred(r32, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r38 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r38) r39 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r39, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r39, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r40, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r38, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r40}}, 0x18) r41 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r41) r42 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r42, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r42, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r43, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r41, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r43}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r33, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r38, @ANYRES32=r36, @ANYRES32=r41, @ANYRES32=r37, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)) [ 287.060300][T13106] fuse: Bad value for 'fd' 09:34:33 executing program 4: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r4 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB="f6d040b04b59c1080420ce79a2e2b3994c97b85d4fa9b26a74821f722687526491cc51067444475b3fbd777463f6189dba679cec43bcdeb9a8321d07b76ce392a565aa1357587cffb5c0bc4e9f36ea4092a8e4ec4f4f3eede465e04d810c4eccfb42fe2485c5b828787fed2649086f276010068f6aa1d799ac9bd11bba04ce8e2de0d596a38c"]) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r7 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r12 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r12) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r13, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r14, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r12, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r14}}, 0x18) r15 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r15) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r16, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r16, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r17, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r15, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r17}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r12, @ANYRES32=r10, @ANYRES32=r15, @ANYRES32=r11, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r18 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r22 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r21, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r23}, 0x18, 0x0) r24 = getegid() r25 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r26 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r25, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r27}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r28}}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r4, r5, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r10, r18}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r19, r20, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r23, r24, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r27, r28, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) r30 = socket(0x10, 0x4000000000000002, 0xc) write(r30, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r31 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000840)='/dev/rfkill\x00', 0x2000, 0x0) r32 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000880)='/dev/btrfs-control\x00', 0x541000, 0x0) r33 = socket(0x10, 0x4000000000000002, 0xc) write(r33, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r34 = socket(0x10, 0x4000000000000002, 0xc) write(r34, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r35 = syz_open_dev$sndpcmc(&(0x7f00000008c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x800) r36 = getpid() sched_setattr(r36, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) r38 = socket$nl_xfrm(0x10, 0x3, 0x6) r39 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r39, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r38, 0x0, r40) r41 = socket(0x10, 0x4000000000000002, 0xc) write(r41, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r42 = openat$md(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/md0\x00', 0x10002, 0x0) r43 = socket(0x10, 0x4000000000000002, 0xc) write(r43, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r45 = dup(r44) ioctl$PERF_EVENT_IOC_ENABLE(r45, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r45, 0xc0502100, &(0x7f0000000a00)={0x0, 0x0}) stat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0}) r48 = socket$nl_xfrm(0x10, 0x3, 0x6) r49 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r49, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r48, 0x0, r50) getgroups(0x4, &(0x7f0000000b40)=[0xee00, 0xee00, 0xffffffffffffffff, r50]) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000000)="b603c1cf0051a0236a3c50c17de61e1e031e8a", 0x13}, {&(0x7f0000000340)="1b6ee0f974de775cee2f764ec7e317aeb5e6f6693e86d9f329fa64f21554890d7b6182998aff4e632b326e65444faef870eda11613ddba72b41fd8383163cedf02b722380ee18176dbea770c2ad29d8732ab24cee0f9c2ed60e92627c0fa9ef9c46b2128e05fd7b0a6251415796c", 0x6e}, {&(0x7f00000001c0)="7ecfb3fd63b3c024fc3207cd80656b9f990874aaf307373621338e1219e2e8a2a79ed37cef7c8b", 0x27}, {&(0x7f00000004c0)="602b066a1354d536d83022181b5c29048cf8559801e39a11660f4c95dd52d614ae9ea65c50cb6cec9c59abfc3f8a22d48de13081e39ac0a472382d1989e83b1dad257538c14b6473e713b04f14c0d6260ee6f1017df7bda229eff464cf1fa2978bf5102d4548b59c68879eaf07fc0d8a7f49c688baa3220170eab1f5cc67e6e5141c1fe2ebc4f8349d63517a0cd585a71f73bc3ad233bd350c9b0d0aa988ecef1c3c01eac6a8269b571996d5", 0xac}, {&(0x7f0000000580)="a5247c36cfedc2279d295653e64a153526793d4f8593cb524e0f9b2ac73bb47db44a1f8d062ee3039e00a50b360259560dd267369b46df58da13c875dc927bc39b35c9f10c1dc08abf1568684b22ef199a62a14c0ff207e4b407386adb69bed2f52cc0ab39a0d7feb8ccb3c47a9c47df1f02df456350bab2bcf97a647851e9fe7794fd78593120c60187e6c0f32b732e7a6220fcad8bb693c6d6f9e9e7f140ceae08cace1739c02822a91f8959dbe9b7533d788ba2ed7b8c0d465ca84bc7763c", 0xc0}, {&(0x7f0000000640)="168df6d69f63a19a4fe4c9bfceebee28ecf14d7d39bcbea968996aa8f61db581ebeba1d305a1dbbbec5bc572203ee38a4a8b423c25acb1000b7310bc3fefb1ec3d538bea1362ec19967cf4ff01df30784fa4eb5ba2211208ceb0d57a8b84ed5c54fe3a79c2bc8d96741df035186fca9ea89b818f659d29fff46f6135c8bc5122162e0c34816eeef183e890b154fccd9998d10fd4e2c3cdf6e9de260c6726c5343ed4429d2bb39501fb583b53e5fab5275fa4fe0bf827992c8b7521c15cf5996eeba58bce8a65ba5c2e259d4d1c05441562e4f8cb293aac7aed", 0xd9}, {&(0x7f0000000740)="a6bc8d7c03e44f33546742c676745381ec2ed90e34e16b0ef70152cc37a5b605ed434b93118c85878df21d93f1869d9d8aebf3c436665862c23cbc4c978e6fec935ccd1eaacf8b0d22abf4eb", 0x4c}, {&(0x7f0000001640)="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", 0x1000}], 0x8, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=r19, @ANYRES32=r29, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r30, @ANYRES32=r31, @ANYRES32=r0, @ANYRES32=r32, @ANYRES32=r33, @ANYRES32=r0, @ANYBLOB="18fb070000000000010009000000000024000bae7e49ca4e2ec86c48dd9a6df6d976605edcc502eeb402a4be91eb42d2bd7900166d856f9f2ee0", @ANYRES32=r34, @ANYRES32=r35, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r36, @ANYRES32=r37, @ANYRES32=r40, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r41, @ANYRES32=r0, @ANYRES32=r42, @ANYRES32, @ANYRES32=r43, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r46, @ANYRES32=r47, @ANYRES32=r51, @ANYBLOB='\x00\x00\x00\x00'], 0xd0, 0x20018000}, {&(0x7f0000000c80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000f40)=[{&(0x7f0000000d00)="515302c5f0e90819e9c27ca92e170a0a6aad39c06aede00192db6c9cd2024e961e4cc0f8f0c84616a98254e7a1bd1a6181311c6cbcd4df7d8c320a7fe8a0f7a1dc6ec0a06f07b0328c6a731b8da9a6fa347b8ecf6a646a2ad0a5d59bee51d0ecc2190ebfbbb781f1bbfac168be36f9c93921f518f663bc5239c80820345e128eab910a628af54671581d3d14b42e12cfd3cbe9ce0c4d83d0a0ad3307872ec23ddda8f6fc1b9a3d2112d04102560a960b74223c8e3692e901339e6b58970ba003badcdb1a3bd90f349414fb38ca791d706fc4ba36d53a8a473dee8fc6e21568f4802a13dca2d93d0ea9701b5a102fadaaebbf28b329c387a073", 0xf9}, {&(0x7f0000000e00)="a20d819f74c10f70a85a03f6209550d423a9", 0x12}, {&(0x7f0000000e40)="d8767272835fefbfa6f4c5c18b23e994e2182b2105539c8626f2e231bcf1040b27ea33e703490f75011c9c04c46b0418a012d045acfc14acf3c1fab448c45a09ddc802a8000ecee22b5d", 0x4a}, {&(0x7f0000000ec0)="3463724f6308358234d8500c64b59c2901b459aaee90bb543758a871840d216bf722427b6610be84bdd5faf599db7cdd4d3178fb4d49b13021beff6d8e6d3dc3333d59655ee4a3469b9249c655852f789b03e5a27143d78799a485", 0x5b}, {&(0x7f0000002640)="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", 0x1000}], 0x5, 0x0, 0x0, 0xc000}], 0x2, 0x10000000) bind$inet(0xffffffffffffffff, 0x0, 0x0) r52 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r52, &(0x7f0000000300), 0x12) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000080)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e11bf746b048e9a94b61db6b4c41bd5a5259e62506cda287b857aacc858a00a60f818b2292c594e6707bfab893045fca422a6c99f5f450f79c1d464019ba3855d48ab458d233ff1fe27afb17f", 0xffffffffffffff72, 0x2a0400d6, 0x0, 0xfffffecb) [ 287.191188][T13122] fuse: Bad value for 'fd' [ 287.251941][T13119] fuse: Bad value for 'fd' [ 287.259868][T13119] fuse: Bad value for 'fd' [ 287.285033][T13132] fuse: Bad value for 'fd' [ 287.303223][T13132] fuse: Bad value for 'fd' 09:34:33 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xc8}, 0x1c) socket$inet6(0xa, 0x80003, 0x80) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ioctl(r1, 0xe0, &(0x7f0000000100)="0805b5055e0bcfe84740719309ce0b925e114f8cb4219c426b805658e95d78fc0dc7d9183f80c002f67c6b1ae086be4c8515331afb7ac9f072aa8a77f187e8df127929fed7637779de564b288cf8345da1640097f6c69d65d354f0601eb65ed7c56022030000006ef130d8c05e3324328c14e3440d6701c92abc148d84a386107cb4646011ac0507f30e9ff5d3c535f6d161f8218a4c042d9cbed79d16b28b7b04581328ff3e") bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81004e22a31b00000028925aa80020007b00090080000efffeffe809000000ff0000f03ac710c8000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x1, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x80010, r3, 0xa000) r4 = socket(0x10, 0x4000000000000002, 0xc) write(r4, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket(0x10, 0x4000000000000002, 0xc) write(r7, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f00000004c0)=0x8f) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000500)='/dev/dlm-monitor\x00', 0x0, 0x0) 09:34:33 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c288000000000000000086f16000140000303a0000000000000000000200000000000000ff0200000000000000000000000000010100907800090400600000000000f7ff00000000000000000000fffffffffffc00000000000000000000ffffffffffff"], 0x0) r0 = socket(0x10, 0x4000000000000002, 0xc) write(r0, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r1 = semget$private(0x0, 0x2000000010a, 0x0) semop(r1, &(0x7f0000000100)=[{0x0, 0xfffffffffffefffc}], 0x1) semop(r1, &(0x7f0000000040)=[{0x0, 0x316f}, {0x0, 0xff}], 0x2) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r3 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r4}}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r6 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r7 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r7, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r9}, 0x18, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r11 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r11) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r12, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r13, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r11, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r13}}, 0x18) r14 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r14) r15 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r15, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r15, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r16, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r14, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r16}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000009800f8000000000000000000000000000000000000000000000000006000534554000000000000000000000000000000000000000000000000000000001000000400000001000000ff000000f5f7feffffffffffffaf31000005f900000800000009000000040000000600000004000000000000800800000005000000e00000017f00000100000000ffffff0074756e6c300000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000020001100000000000000000000000000000d000f80000000000000000000000000000000000000000000000000038006f776e657200"/426, @ANYRES32=r11, @ANYRES32=r9, @ANYRES32=r14, @ANYRES32=r10, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r17 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r20, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r22}, 0x18, 0x0) r23 = getegid() r24 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r25 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r24, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r26}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r27}}) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r3, r4, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r9, r17}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r18, r19, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r22, r23, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r26, r27, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) r28 = socket$nl_xfrm(0x10, 0x3, 0x6) r29 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r28, 0x0, r30) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r31}}) r32 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r32, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r32, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r32, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r33 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r34 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r35 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r35, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r34, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r36}, 0x18, 0x0) getsockopt$sock_cred(r32, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r38 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r38) r39 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r39, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r39, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r40, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r38, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r40}}, 0x18) r41 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r41) r42 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r42, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r42, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r43, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r41, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r43}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r33, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r38, @ANYRES32=r36, @ANYRES32=r41, @ANYRES32=r37, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) 09:34:33 executing program 4: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r4 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB="f6d040b04b59c1080420ce79a2e2b3994c97b85d4fa9b26a74821f722687526491cc51067444475b3fbd777463f6189dba679cec43bcdeb9a8321d07b76ce392a565aa1357587cffb5c0bc4e9f36ea4092a8e4ec4f4f3eede465e04d810c4eccfb42fe2485c5b828787fed2649086f276010068f6aa1d799ac9bd11bba04ce8e2de0d596a38c"]) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r7 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r12 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r12) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r13, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r14, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r12, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r14}}, 0x18) r15 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r15) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r16, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r16, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r17, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r15, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r17}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r12, @ANYRES32=r10, @ANYRES32=r15, @ANYRES32=r11, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r18 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r22 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r21, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r23}, 0x18, 0x0) r24 = getegid() r25 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r26 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r25, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r27}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r28}}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r4, r5, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r10, r18}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r19, r20, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r23, r24, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r27, r28, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) r30 = socket(0x10, 0x4000000000000002, 0xc) write(r30, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r31 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000840)='/dev/rfkill\x00', 0x2000, 0x0) r32 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000880)='/dev/btrfs-control\x00', 0x541000, 0x0) r33 = socket(0x10, 0x4000000000000002, 0xc) write(r33, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r34 = socket(0x10, 0x4000000000000002, 0xc) write(r34, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r35 = syz_open_dev$sndpcmc(&(0x7f00000008c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x800) r36 = getpid() sched_setattr(r36, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) r38 = socket$nl_xfrm(0x10, 0x3, 0x6) r39 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r39, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r38, 0x0, r40) r41 = socket(0x10, 0x4000000000000002, 0xc) write(r41, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r42 = openat$md(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/md0\x00', 0x10002, 0x0) r43 = socket(0x10, 0x4000000000000002, 0xc) write(r43, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r45 = dup(r44) ioctl$PERF_EVENT_IOC_ENABLE(r45, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r45, 0xc0502100, &(0x7f0000000a00)={0x0, 0x0}) stat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0}) r48 = socket$nl_xfrm(0x10, 0x3, 0x6) r49 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r49, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r48, 0x0, r50) getgroups(0x4, &(0x7f0000000b40)=[0xee00, 0xee00, 0xffffffffffffffff, r50]) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000000)="b603c1cf0051a0236a3c50c17de61e1e031e8a", 0x13}, {&(0x7f0000000340)="1b6ee0f974de775cee2f764ec7e317aeb5e6f6693e86d9f329fa64f21554890d7b6182998aff4e632b326e65444faef870eda11613ddba72b41fd8383163cedf02b722380ee18176dbea770c2ad29d8732ab24cee0f9c2ed60e92627c0fa9ef9c46b2128e05fd7b0a6251415796c", 0x6e}, {&(0x7f00000001c0)="7ecfb3fd63b3c024fc3207cd80656b9f990874aaf307373621338e1219e2e8a2a79ed37cef7c8b", 0x27}, {&(0x7f00000004c0)="602b066a1354d536d83022181b5c29048cf8559801e39a11660f4c95dd52d614ae9ea65c50cb6cec9c59abfc3f8a22d48de13081e39ac0a472382d1989e83b1dad257538c14b6473e713b04f14c0d6260ee6f1017df7bda229eff464cf1fa2978bf5102d4548b59c68879eaf07fc0d8a7f49c688baa3220170eab1f5cc67e6e5141c1fe2ebc4f8349d63517a0cd585a71f73bc3ad233bd350c9b0d0aa988ecef1c3c01eac6a8269b571996d5", 0xac}, {&(0x7f0000000580)="a5247c36cfedc2279d295653e64a153526793d4f8593cb524e0f9b2ac73bb47db44a1f8d062ee3039e00a50b360259560dd267369b46df58da13c875dc927bc39b35c9f10c1dc08abf1568684b22ef199a62a14c0ff207e4b407386adb69bed2f52cc0ab39a0d7feb8ccb3c47a9c47df1f02df456350bab2bcf97a647851e9fe7794fd78593120c60187e6c0f32b732e7a6220fcad8bb693c6d6f9e9e7f140ceae08cace1739c02822a91f8959dbe9b7533d788ba2ed7b8c0d465ca84bc7763c", 0xc0}, {&(0x7f0000000640)="168df6d69f63a19a4fe4c9bfceebee28ecf14d7d39bcbea968996aa8f61db581ebeba1d305a1dbbbec5bc572203ee38a4a8b423c25acb1000b7310bc3fefb1ec3d538bea1362ec19967cf4ff01df30784fa4eb5ba2211208ceb0d57a8b84ed5c54fe3a79c2bc8d96741df035186fca9ea89b818f659d29fff46f6135c8bc5122162e0c34816eeef183e890b154fccd9998d10fd4e2c3cdf6e9de260c6726c5343ed4429d2bb39501fb583b53e5fab5275fa4fe0bf827992c8b7521c15cf5996eeba58bce8a65ba5c2e259d4d1c05441562e4f8cb293aac7aed", 0xd9}, {&(0x7f0000000740)="a6bc8d7c03e44f33546742c676745381ec2ed90e34e16b0ef70152cc37a5b605ed434b93118c85878df21d93f1869d9d8aebf3c436665862c23cbc4c978e6fec935ccd1eaacf8b0d22abf4eb", 0x4c}, {&(0x7f0000001640)="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", 0x1000}], 0x8, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=r19, @ANYRES32=r29, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r30, @ANYRES32=r31, @ANYRES32=r0, @ANYRES32=r32, @ANYRES32=r33, @ANYRES32=r0, @ANYBLOB="18fb070000000000010009000000000024000bae7e49ca4e2ec86c48dd9a6df6d976605edcc502eeb402a4be91eb42d2bd7900166d856f9f2ee0", @ANYRES32=r34, @ANYRES32=r35, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r36, @ANYRES32=r37, @ANYRES32=r40, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r41, @ANYRES32=r0, @ANYRES32=r42, @ANYRES32, @ANYRES32=r43, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r46, @ANYRES32=r47, @ANYRES32=r51, @ANYBLOB='\x00\x00\x00\x00'], 0xd0, 0x20018000}, {&(0x7f0000000c80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000f40)=[{&(0x7f0000000d00)="515302c5f0e90819e9c27ca92e170a0a6aad39c06aede00192db6c9cd2024e961e4cc0f8f0c84616a98254e7a1bd1a6181311c6cbcd4df7d8c320a7fe8a0f7a1dc6ec0a06f07b0328c6a731b8da9a6fa347b8ecf6a646a2ad0a5d59bee51d0ecc2190ebfbbb781f1bbfac168be36f9c93921f518f663bc5239c80820345e128eab910a628af54671581d3d14b42e12cfd3cbe9ce0c4d83d0a0ad3307872ec23ddda8f6fc1b9a3d2112d04102560a960b74223c8e3692e901339e6b58970ba003badcdb1a3bd90f349414fb38ca791d706fc4ba36d53a8a473dee8fc6e21568f4802a13dca2d93d0ea9701b5a102fadaaebbf28b329c387a073", 0xf9}, {&(0x7f0000000e00)="a20d819f74c10f70a85a03f6209550d423a9", 0x12}, {&(0x7f0000000e40)="d8767272835fefbfa6f4c5c18b23e994e2182b2105539c8626f2e231bcf1040b27ea33e703490f75011c9c04c46b0418a012d045acfc14acf3c1fab448c45a09ddc802a8000ecee22b5d", 0x4a}, {&(0x7f0000000ec0)="3463724f6308358234d8500c64b59c2901b459aaee90bb543758a871840d216bf722427b6610be84bdd5faf599db7cdd4d3178fb4d49b13021beff6d8e6d3dc3333d59655ee4a3469b9249c655852f789b03e5a27143d78799a485", 0x5b}, {&(0x7f0000002640)="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", 0x1000}], 0x5, 0x0, 0x0, 0xc000}], 0x2, 0x10000000) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) r52 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r52, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r52, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r52, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r52, &(0x7f0000000080)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e11bf746b048e9a94b61db6b4c41bd5a5259e62506cda287b857aacc858a00a60f818b2292c594e6707bfab893045fca422a6c99f5f450f79c1d464019ba3855d48ab458d233ff1fe27afb17f", 0xffffffffffffff72, 0x2a0400d6, 0x0, 0xfffffecb) 09:34:33 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xc8}, 0x1c) socket$inet6(0xa, 0x80003, 0x80) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ioctl(r1, 0xe0, &(0x7f0000000100)="0805b5055e0bcfe84740719309ce0b925e114f8cb4219c426b805658e95d78fc0dc7d9183f80c002f67c6b1ae086be4c8515331afb7ac9f072aa8a77f187e8df127929fed7637779de564b288cf8345da1640097f6c69d65d354f0601eb65ed7c56022030000006ef130d8c05e3324328c14e3440d6701c92abc148d84a386107cb4646011ac0507f30e9ff5d3c535f6d161f8218a4c042d9cbed79d16b28b7b04581328ff3e") bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81004e22a31b00000028925aa80020007b00090080000efffeffe809000000ff0000f03ac710c8000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x1, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x80010, r3, 0xa000) r4 = socket(0x10, 0x4000000000000002, 0xc) write(r4, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket(0x10, 0x4000000000000002, 0xc) write(r7, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f00000004c0)=0x8f) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000100)={0x4, 0x7, 0x2, 0x2000, &(0x7f0000018000/0x2000)=nil}) 09:34:33 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xc8}, 0x1c) socket$inet6(0xa, 0x80003, 0x80) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ioctl(r1, 0xe0, &(0x7f0000000100)="0805b5055e0bcfe84740719309ce0b925e114f8cb4219c426b805658e95d78fc0dc7d9183f80c002f67c6b1ae086be4c8515331afb7ac9f072aa8a77f187e8df127929fed7637779de564b288cf8345da1640097f6c69d65d354f0601eb65ed7c56022030000006ef130d8c05e3324328c14e3440d6701c92abc148d84a386107cb4646011ac0507f30e9ff5d3c535f6d161f8218a4c042d9cbed79d16b28b7b04581328ff3e") bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81004e22a31b00000028925aa80020007b00090080000efffeffe809000000ff0000f03ac710c8000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x1, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x80010, r3, 0xa000) r4 = socket(0x10, 0x4000000000000002, 0xc) write(r4, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = socket(0x10, 0x4000000000000002, 0xc) write(r6, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f00000004c0)=0x8f) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000500)='/dev/dlm-monitor\x00', 0x0, 0x0) [ 287.663031][T13147] fuse: Bad value for 'fd' [ 287.729813][T13147] fuse: Bad value for 'fd' 09:34:33 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r4 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB="f6d040b04b59c1080420ce79a2e2b3994c97b85d4fa9b26a74821f722687526491cc51067444475b3fbd777463f6189dba679cec43bcdeb9a8321d07b76ce392a565aa1357587cffb5c0bc4e9f36ea4092a8e4ec4f4f3eede465e04d810c4eccfb42fe2485c5b828787fed2649086f276010068f6aa1d799ac9bd11bba04ce8e2de0d596a38c"]) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r7 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r12 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r12) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r13, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r14, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r12, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r14}}, 0x18) r15 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r15) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r16, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r16, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r17, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r15, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r17}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r12, @ANYRES32=r10, @ANYRES32=r15, @ANYRES32=r11, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r18 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r22 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r21, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r23}, 0x18, 0x0) r24 = getegid() r25 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r26 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r25, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r27}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r28}}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r4, r5, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r10, r18}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r19, r20, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r23, r24, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r27, r28, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r29 = socket(0x10, 0x4000000000000002, 0xc) write(r29, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000840)='/dev/rfkill\x00', 0x2000, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000880)='/dev/btrfs-control\x00', 0x541000, 0x0) r30 = socket(0x10, 0x4000000000000002, 0xc) write(r30, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r31 = socket(0x10, 0x4000000000000002, 0xc) write(r31, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) syz_open_dev$sndpcmc(&(0x7f00000008c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x800) r32 = getpid() sched_setattr(r32, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)) r33 = socket$nl_xfrm(0x10, 0x3, 0x6) r34 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r34, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r33, 0x0, r35) r36 = socket(0x10, 0x4000000000000002, 0xc) write(r36, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$md(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/md0\x00', 0x10002, 0x0) r37 = socket(0x10, 0x4000000000000002, 0xc) write(r37, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r39 = dup(r38) ioctl$PERF_EVENT_IOC_ENABLE(r39, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r39, 0xc0502100, &(0x7f0000000a00)) stat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)) r40 = socket$nl_xfrm(0x10, 0x3, 0x6) r41 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r41, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r40, 0x0, r42) getgroups(0x4, &(0x7f0000000b40)=[0xee00, 0xee00, 0xffffffffffffffff, r42]) r43 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r43, &(0x7f0000000300), 0x12) r44 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r44, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r44, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r44, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r44, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r44, &(0x7f0000000080)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e11bf746b048e9a94b61db6b4c41bd5a5259e62506cda287b857aacc858a00a60f818b2292c594e6707bfab893045fca422a6c99f5f450f79c1d464019ba3855d48ab458d233ff1fe27afb17f", 0xffffffffffffff72, 0x2a0400d6, 0x0, 0xfffffecb) [ 287.786534][T13144] fuse: Bad value for 'fd' [ 287.863082][T13144] fuse: Bad value for 'fd' [ 287.927985][T13163] fuse: Bad value for 'fd' 09:34:34 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xc8}, 0x1c) socket$inet6(0xa, 0x80003, 0x80) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ioctl(r1, 0xe0, &(0x7f0000000100)="0805b5055e0bcfe84740719309ce0b925e114f8cb4219c426b805658e95d78fc0dc7d9183f80c002f67c6b1ae086be4c8515331afb7ac9f072aa8a77f187e8df127929fed7637779de564b288cf8345da1640097f6c69d65d354f0601eb65ed7c56022030000006ef130d8c05e3324328c14e3440d6701c92abc148d84a386107cb4646011ac0507f30e9ff5d3c535f6d161f8218a4c042d9cbed79d16b28b7b04581328ff3e") bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81004e22a31b00000028925aa80020007b00090080000efffeffe809000000ff0000f03ac710c8000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x1, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x80010, r3, 0xa000) r4 = socket(0x10, 0x4000000000000002, 0xc) write(r4, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket(0x10, 0x4000000000000002, 0xc) write(r7, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f00000004c0)=0x8f) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000100)={0x4, 0x7, 0x2, 0x2000, &(0x7f0000018000/0x2000)=nil}) 09:34:34 executing program 5: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r1, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r3 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYRESOCT=r4], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000000)={0x0}) 09:34:34 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xc8}, 0x1c) socket$inet6(0xa, 0x80003, 0x80) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ioctl(r1, 0xe0, &(0x7f0000000100)="0805b5055e0bcfe84740719309ce0b925e114f8cb4219c426b805658e95d78fc0dc7d9183f80c002f67c6b1ae086be4c8515331afb7ac9f072aa8a77f187e8df127929fed7637779de564b288cf8345da1640097f6c69d65d354f0601eb65ed7c56022030000006ef130d8c05e3324328c14e3440d6701c92abc148d84a386107cb4646011ac0507f30e9ff5d3c535f6d161f8218a4c042d9cbed79d16b28b7b04581328ff3e") bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81004e22a31b00000028925aa80020007b00090080000efffeffe809000000ff0000f03ac710c8000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x1, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x80010, r3, 0xa000) r4 = socket(0x10, 0x4000000000000002, 0xc) write(r4, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = socket(0x10, 0x4000000000000002, 0xc) write(r6, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000500)='/dev/dlm-monitor\x00', 0x0, 0x0) [ 288.009268][T13163] fuse: Bad value for 'fd' 09:34:34 executing program 4: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r4 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB="f6d040b04b59c1080420ce79a2e2b3994c97b85d4fa9b26a74821f722687526491cc51067444475b3fbd777463f6189dba679cec43bcdeb9a8321d07b76ce392a565aa1357587cffb5c0bc4e9f36ea4092a8e4ec4f4f3eede465e04d810c4eccfb42fe2485c5b828787fed2649086f276010068f6aa1d799ac9bd11bba04ce8e2de0d596a38c"]) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r7 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r12 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r12) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r13, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r14, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r12, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r14}}, 0x18) r15 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r15) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r16, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r16, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r17, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r15, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r17}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r12, @ANYRES32=r10, @ANYRES32=r15, @ANYRES32=r11, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r18 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r22 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r21, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r23}, 0x18, 0x0) r24 = getegid() r25 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r26 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r25, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r27}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r28}}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r4, r5, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r10, r18}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r19, r20, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r23, r24, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r27, r28, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) r30 = socket(0x10, 0x4000000000000002, 0xc) write(r30, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r31 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000840)='/dev/rfkill\x00', 0x2000, 0x0) r32 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000880)='/dev/btrfs-control\x00', 0x541000, 0x0) r33 = socket(0x10, 0x4000000000000002, 0xc) write(r33, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r34 = socket(0x10, 0x4000000000000002, 0xc) write(r34, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r35 = syz_open_dev$sndpcmc(&(0x7f00000008c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x800) r36 = getpid() sched_setattr(r36, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) r38 = socket$nl_xfrm(0x10, 0x3, 0x6) r39 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r39, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r38, 0x0, r40) r41 = socket(0x10, 0x4000000000000002, 0xc) write(r41, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r42 = openat$md(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/md0\x00', 0x10002, 0x0) r43 = socket(0x10, 0x4000000000000002, 0xc) write(r43, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r45 = dup(r44) ioctl$PERF_EVENT_IOC_ENABLE(r45, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r45, 0xc0502100, &(0x7f0000000a00)={0x0, 0x0}) stat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0}) r48 = socket$nl_xfrm(0x10, 0x3, 0x6) r49 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r49, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r48, 0x0, r50) getgroups(0x4, &(0x7f0000000b40)=[0xee00, 0xee00, 0xffffffffffffffff, r50]) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000000)="b603c1cf0051a0236a3c50c17de61e1e031e8a", 0x13}, {&(0x7f0000000340)="1b6ee0f974de775cee2f764ec7e317aeb5e6f6693e86d9f329fa64f21554890d7b6182998aff4e632b326e65444faef870eda11613ddba72b41fd8383163cedf02b722380ee18176dbea770c2ad29d8732ab24cee0f9c2ed60e92627c0fa9ef9c46b2128e05fd7b0a6251415796c", 0x6e}, {&(0x7f00000001c0)="7ecfb3fd63b3c024fc3207cd80656b9f990874aaf307373621338e1219e2e8a2a79ed37cef7c8b", 0x27}, {&(0x7f00000004c0)="602b066a1354d536d83022181b5c29048cf8559801e39a11660f4c95dd52d614ae9ea65c50cb6cec9c59abfc3f8a22d48de13081e39ac0a472382d1989e83b1dad257538c14b6473e713b04f14c0d6260ee6f1017df7bda229eff464cf1fa2978bf5102d4548b59c68879eaf07fc0d8a7f49c688baa3220170eab1f5cc67e6e5141c1fe2ebc4f8349d63517a0cd585a71f73bc3ad233bd350c9b0d0aa988ecef1c3c01eac6a8269b571996d5", 0xac}, {&(0x7f0000000580)="a5247c36cfedc2279d295653e64a153526793d4f8593cb524e0f9b2ac73bb47db44a1f8d062ee3039e00a50b360259560dd267369b46df58da13c875dc927bc39b35c9f10c1dc08abf1568684b22ef199a62a14c0ff207e4b407386adb69bed2f52cc0ab39a0d7feb8ccb3c47a9c47df1f02df456350bab2bcf97a647851e9fe7794fd78593120c60187e6c0f32b732e7a6220fcad8bb693c6d6f9e9e7f140ceae08cace1739c02822a91f8959dbe9b7533d788ba2ed7b8c0d465ca84bc7763c", 0xc0}, {&(0x7f0000000640)="168df6d69f63a19a4fe4c9bfceebee28ecf14d7d39bcbea968996aa8f61db581ebeba1d305a1dbbbec5bc572203ee38a4a8b423c25acb1000b7310bc3fefb1ec3d538bea1362ec19967cf4ff01df30784fa4eb5ba2211208ceb0d57a8b84ed5c54fe3a79c2bc8d96741df035186fca9ea89b818f659d29fff46f6135c8bc5122162e0c34816eeef183e890b154fccd9998d10fd4e2c3cdf6e9de260c6726c5343ed4429d2bb39501fb583b53e5fab5275fa4fe0bf827992c8b7521c15cf5996eeba58bce8a65ba5c2e259d4d1c05441562e4f8cb293aac7aed", 0xd9}, {&(0x7f0000000740)="a6bc8d7c03e44f33546742c676745381ec2ed90e34e16b0ef70152cc37a5b605ed434b93118c85878df21d93f1869d9d8aebf3c436665862c23cbc4c978e6fec935ccd1eaacf8b0d22abf4eb", 0x4c}, {&(0x7f0000001640)="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", 0x1000}], 0x8, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=r19, @ANYRES32=r29, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r30, @ANYRES32=r31, @ANYRES32=r0, @ANYRES32=r32, @ANYRES32=r33, @ANYRES32=r0, @ANYBLOB="18fb070000000000010009000000000024000bae7e49ca4e2ec86c48dd9a6df6d976605edcc502eeb402a4be91eb42d2bd7900166d856f9f2ee0", @ANYRES32=r34, @ANYRES32=r35, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r36, @ANYRES32=r37, @ANYRES32=r40, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r41, @ANYRES32=r0, @ANYRES32=r42, @ANYRES32, @ANYRES32=r43, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r46, @ANYRES32=r47, @ANYRES32=r51, @ANYBLOB='\x00\x00\x00\x00'], 0xd0, 0x20018000}, {&(0x7f0000000c80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000f40)=[{&(0x7f0000000d00)="515302c5f0e90819e9c27ca92e170a0a6aad39c06aede00192db6c9cd2024e961e4cc0f8f0c84616a98254e7a1bd1a6181311c6cbcd4df7d8c320a7fe8a0f7a1dc6ec0a06f07b0328c6a731b8da9a6fa347b8ecf6a646a2ad0a5d59bee51d0ecc2190ebfbbb781f1bbfac168be36f9c93921f518f663bc5239c80820345e128eab910a628af54671581d3d14b42e12cfd3cbe9ce0c4d83d0a0ad3307872ec23ddda8f6fc1b9a3d2112d04102560a960b74223c8e3692e901339e6b58970ba003badcdb1a3bd90f349414fb38ca791d706fc4ba36d53a8a473dee8fc6e21568f4802a13dca2d93d0ea9701b5a102fadaaebbf28b329c387a073", 0xf9}, {&(0x7f0000000e00)="a20d819f74c10f70a85a03f6209550d423a9", 0x12}, {&(0x7f0000000e40)="d8767272835fefbfa6f4c5c18b23e994e2182b2105539c8626f2e231bcf1040b27ea33e703490f75011c9c04c46b0418a012d045acfc14acf3c1fab448c45a09ddc802a8000ecee22b5d", 0x4a}, {&(0x7f0000000ec0)="3463724f6308358234d8500c64b59c2901b459aaee90bb543758a871840d216bf722427b6610be84bdd5faf599db7cdd4d3178fb4d49b13021beff6d8e6d3dc3333d59655ee4a3469b9249c655852f789b03e5a27143d78799a485", 0x5b}, {&(0x7f0000002640)="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", 0x1000}], 0x5, 0x0, 0x0, 0xc000}], 0x2, 0x10000000) bind$inet(0xffffffffffffffff, 0x0, 0x0) r52 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r52, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r52, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r52, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r52, &(0x7f0000000080)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e11bf746b048e9a94b61db6b4c41bd5a5259e62506cda287b857aacc858a00a60f818b2292c594e6707bfab893045fca422a6c99f5f450f79c1d464019ba3855d48ab458d233ff1fe27afb17f", 0xffffffffffffff72, 0x2a0400d6, 0x0, 0xfffffecb) 09:34:34 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c288000000000000000086f16000140000303a0000000000000000000200000000000000ff0200000000000000000000000000010100907800090400600000000000f7ff00000000000000000000fffffffffffc00000000000000000000ffffffffffff"], 0x0) r0 = socket(0x10, 0x4000000000000002, 0xc) write(r0, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r1 = semget$private(0x0, 0x2000000010a, 0x0) semop(r1, &(0x7f0000000100)=[{0x0, 0xfffffffffffefffc}], 0x1) semop(r1, &(0x7f0000000040)=[{0x0, 0x316f}, {0x0, 0xff}], 0x2) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r3 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r4}}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r6 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r7 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r7, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r9}, 0x18, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r11 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r11) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r12, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r13, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r11, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r13}}, 0x18) r14 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r14) r15 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r15, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r15, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r16, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r14, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r16}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r11, @ANYRES32=r9, @ANYRES32=r14, @ANYRES32=r10, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r17 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r20, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r22}, 0x18, 0x0) r23 = getegid() r24 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r25 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r24, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r26}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r27}}) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r3, r4, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r9, r17}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r18, r19, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r22, r23, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r26, r27, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) r28 = socket$nl_xfrm(0x10, 0x3, 0x6) r29 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r28, 0x0, r30) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r31}}) r32 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r32, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r32, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r32, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r33 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r34 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r35 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r35, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r34, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r36}, 0x18, 0x0) getsockopt$sock_cred(r32, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r38 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r38) r39 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r39, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r39, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r40, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r38, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r40}}, 0x18) r41 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r41) r42 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r42, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r42, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r43, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r41, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r43}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r33, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r38, @ANYRES32=r36, @ANYRES32=r41, @ANYRES32=r37, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) getgid() [ 288.289262][T13192] fuse: Bad value for 'fd' 09:34:34 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xc8}, 0x1c) socket$inet6(0xa, 0x80003, 0x80) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ioctl(r1, 0xe0, &(0x7f0000000100)="0805b5055e0bcfe84740719309ce0b925e114f8cb4219c426b805658e95d78fc0dc7d9183f80c002f67c6b1ae086be4c8515331afb7ac9f072aa8a77f187e8df127929fed7637779de564b288cf8345da1640097f6c69d65d354f0601eb65ed7c56022030000006ef130d8c05e3324328c14e3440d6701c92abc148d84a386107cb4646011ac0507f30e9ff5d3c535f6d161f8218a4c042d9cbed79d16b28b7b04581328ff3e") bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81004e22a31b00000028925aa80020007b00090080000efffeffe809000000ff0000f03ac710c8000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x1, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x80010, r3, 0xa000) r4 = socket(0x10, 0x4000000000000002, 0xc) write(r4, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket(0x10, 0x4000000000000002, 0xc) write(r7, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f00000004c0)=0x8f) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000100)={0x4, 0x7, 0x2, 0x2000, &(0x7f0000018000/0x2000)=nil}) [ 288.342390][T13191] fuse: Bad value for 'fd' [ 288.350512][T13191] fuse: Bad value for 'fd' [ 288.396778][T13192] fuse: Bad value for 'fd' 09:34:34 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xc8}, 0x1c) socket$inet6(0xa, 0x80003, 0x80) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ioctl(r1, 0xe0, &(0x7f0000000100)="0805b5055e0bcfe84740719309ce0b925e114f8cb4219c426b805658e95d78fc0dc7d9183f80c002f67c6b1ae086be4c8515331afb7ac9f072aa8a77f187e8df127929fed7637779de564b288cf8345da1640097f6c69d65d354f0601eb65ed7c56022030000006ef130d8c05e3324328c14e3440d6701c92abc148d84a386107cb4646011ac0507f30e9ff5d3c535f6d161f8218a4c042d9cbed79d16b28b7b04581328ff3e") bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81004e22a31b00000028925aa80020007b00090080000efffeffe809000000ff0000f03ac710c8000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x1, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x80010, r3, 0xa000) r4 = socket(0x10, 0x4000000000000002, 0xc) write(r4, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) socket(0x10, 0x4000000000000002, 0xc) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000500)='/dev/dlm-monitor\x00', 0x0, 0x0) 09:34:34 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r4 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB="f6d040b04b59c1080420ce79a2e2b3994c97b85d4fa9b26a74821f722687526491cc51067444475b3fbd777463f6189dba679cec43bcdeb9a8321d07b76ce392a565aa1357587cffb5c0bc4e9f36ea4092a8e4ec4f4f3eede465e04d810c4eccfb42fe2485c5b828787fed2649086f276010068f6aa1d799ac9bd11bba04ce8e2de0d596a38c"]) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r7 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r12 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r12) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r13, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r14, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r12, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r14}}, 0x18) r15 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r15) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r16, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r16, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r17, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r15, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r17}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r12, @ANYRES32=r10, @ANYRES32=r15, @ANYRES32=r11, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r18 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r22 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r21, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r23}, 0x18, 0x0) r24 = getegid() r25 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r26 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r25, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r27}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r28}}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r4, r5, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r10, r18}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r19, r20, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r23, r24, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r27, r28, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r29 = socket(0x10, 0x4000000000000002, 0xc) write(r29, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000840)='/dev/rfkill\x00', 0x2000, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000880)='/dev/btrfs-control\x00', 0x541000, 0x0) r30 = socket(0x10, 0x4000000000000002, 0xc) write(r30, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r31 = socket(0x10, 0x4000000000000002, 0xc) write(r31, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) syz_open_dev$sndpcmc(&(0x7f00000008c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x800) r32 = getpid() sched_setattr(r32, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)) r33 = socket$nl_xfrm(0x10, 0x3, 0x6) r34 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r34, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r33, 0x0, r35) r36 = socket(0x10, 0x4000000000000002, 0xc) write(r36, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$md(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/md0\x00', 0x10002, 0x0) r37 = socket(0x10, 0x4000000000000002, 0xc) write(r37, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r39 = dup(r38) ioctl$PERF_EVENT_IOC_ENABLE(r39, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r39, 0xc0502100, &(0x7f0000000a00)) stat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)) r40 = socket$nl_xfrm(0x10, 0x3, 0x6) r41 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r41, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r40, 0x0, r42) r43 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r43, &(0x7f0000000300), 0x12) r44 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r44, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r44, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r44, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r44, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r44, &(0x7f0000000080)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e11bf746b048e9a94b61db6b4c41bd5a5259e62506cda287b857aacc858a00a60f818b2292c594e6707bfab893045fca422a6c99f5f450f79c1d464019ba3855d48ab458d233ff1fe27afb17f", 0xffffffffffffff72, 0x2a0400d6, 0x0, 0xfffffecb) 09:34:34 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c288000000000000000086f16000140000303a0000000000000000000200000000000000ff0200000000000000000000000000010100907800090400600000000000f7ff00000000000000000000fffffffffffc00000000000000000000ffffffffffff"], 0x0) r0 = socket(0x10, 0x4000000000000002, 0xc) write(r0, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r1 = semget$private(0x0, 0x2000000010a, 0x0) semop(r1, &(0x7f0000000100)=[{0x0, 0xfffffffffffefffc}], 0x1) semop(r1, &(0x7f0000000040)=[{0x0, 0x316f}, {0x0, 0xff}], 0x2) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r3 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r4}}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r6 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r7 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r7, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r9}, 0x18, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r11 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r11) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r12, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r13, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r11, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r13}}, 0x18) r14 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r14) r15 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r15, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r15, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r16, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r14, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r16}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r11, @ANYRES32=r9, @ANYRES32=r14, @ANYRES32=r10, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r17 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r20, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r22}, 0x18, 0x0) r23 = getegid() r24 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r25 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r24, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r26}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r27}}) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r3, r4, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r9, r17}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r18, r19, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r22, r23, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r26, r27, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) r28 = socket$nl_xfrm(0x10, 0x3, 0x6) r29 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r28, 0x0, r30) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r31}}) r32 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r32, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r32, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r32, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r33 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r34 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r35 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r35, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r34, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r36}, 0x18, 0x0) getsockopt$sock_cred(r32, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r38 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r38) r39 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r39, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r39, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r40, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r38, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r40}}, 0x18) r41 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r41) r42 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r42, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r42, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r43, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r41, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r43}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r33, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r38, @ANYRES32=r36, @ANYRES32=r41, @ANYRES32=r37, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) [ 288.638727][T13212] fuse: Bad value for 'fd' 09:34:34 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xc8}, 0x1c) socket$inet6(0xa, 0x80003, 0x80) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ioctl(r1, 0xe0, &(0x7f0000000100)="0805b5055e0bcfe84740719309ce0b925e114f8cb4219c426b805658e95d78fc0dc7d9183f80c002f67c6b1ae086be4c8515331afb7ac9f072aa8a77f187e8df127929fed7637779de564b288cf8345da1640097f6c69d65d354f0601eb65ed7c56022030000006ef130d8c05e3324328c14e3440d6701c92abc148d84a386107cb4646011ac0507f30e9ff5d3c535f6d161f8218a4c042d9cbed79d16b28b7b04581328ff3e") bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81004e22a31b00000028925aa80020007b00090080000efffeffe809000000ff0000f03ac710c8000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x1, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x80010, r3, 0xa000) r4 = socket(0x10, 0x4000000000000002, 0xc) write(r4, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket(0x10, 0x4000000000000002, 0xc) write(r7, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f00000004c0)=0x8f) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000100)={0x4, 0x7, 0x2, 0x2000, &(0x7f0000018000/0x2000)=nil}) [ 288.711562][T13212] fuse: Bad value for 'fd' 09:34:34 executing program 4: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r4 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB="f6d040b04b59c1080420ce79a2e2b3994c97b85d4fa9b26a74821f722687526491cc51067444475b3fbd777463f6189dba679cec43bcdeb9a8321d07b76ce392a565aa1357587cffb5c0bc4e9f36ea4092a8e4ec4f4f3eede465e04d810c4eccfb42fe2485c5b828787fed2649086f276010068f6aa1d799ac9bd11bba04ce8e2de0d596a38c"]) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r7 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r12 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r12) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r13, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r14, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r12, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r14}}, 0x18) r15 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r15) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r16, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r16, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r17, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r15, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r17}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r12, @ANYRES32=r10, @ANYRES32=r15, @ANYRES32=r11, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r18 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r22 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r21, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r23}, 0x18, 0x0) r24 = getegid() r25 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r26 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r25, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r27}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r28}}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r4, r5, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r10, r18}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r19, r20, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r23, r24, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r27, r28, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) r30 = socket(0x10, 0x4000000000000002, 0xc) write(r30, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r31 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000840)='/dev/rfkill\x00', 0x2000, 0x0) r32 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000880)='/dev/btrfs-control\x00', 0x541000, 0x0) r33 = socket(0x10, 0x4000000000000002, 0xc) write(r33, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r34 = socket(0x10, 0x4000000000000002, 0xc) write(r34, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r35 = syz_open_dev$sndpcmc(&(0x7f00000008c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x800) r36 = getpid() sched_setattr(r36, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) r38 = socket$nl_xfrm(0x10, 0x3, 0x6) r39 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r39, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r38, 0x0, r40) r41 = socket(0x10, 0x4000000000000002, 0xc) write(r41, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r42 = openat$md(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/md0\x00', 0x10002, 0x0) r43 = socket(0x10, 0x4000000000000002, 0xc) write(r43, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r45 = dup(r44) ioctl$PERF_EVENT_IOC_ENABLE(r45, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r45, 0xc0502100, &(0x7f0000000a00)={0x0, 0x0}) stat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0}) r48 = socket$nl_xfrm(0x10, 0x3, 0x6) r49 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r49, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r48, 0x0, r50) getgroups(0x4, &(0x7f0000000b40)=[0xee00, 0xee00, 0xffffffffffffffff, r50]) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000000)="b603c1cf0051a0236a3c50c17de61e1e031e8a", 0x13}, {&(0x7f0000000340)="1b6ee0f974de775cee2f764ec7e317aeb5e6f6693e86d9f329fa64f21554890d7b6182998aff4e632b326e65444faef870eda11613ddba72b41fd8383163cedf02b722380ee18176dbea770c2ad29d8732ab24cee0f9c2ed60e92627c0fa9ef9c46b2128e05fd7b0a6251415796c", 0x6e}, {&(0x7f00000001c0)="7ecfb3fd63b3c024fc3207cd80656b9f990874aaf307373621338e1219e2e8a2a79ed37cef7c8b", 0x27}, {&(0x7f00000004c0)="602b066a1354d536d83022181b5c29048cf8559801e39a11660f4c95dd52d614ae9ea65c50cb6cec9c59abfc3f8a22d48de13081e39ac0a472382d1989e83b1dad257538c14b6473e713b04f14c0d6260ee6f1017df7bda229eff464cf1fa2978bf5102d4548b59c68879eaf07fc0d8a7f49c688baa3220170eab1f5cc67e6e5141c1fe2ebc4f8349d63517a0cd585a71f73bc3ad233bd350c9b0d0aa988ecef1c3c01eac6a8269b571996d5", 0xac}, {&(0x7f0000000580)="a5247c36cfedc2279d295653e64a153526793d4f8593cb524e0f9b2ac73bb47db44a1f8d062ee3039e00a50b360259560dd267369b46df58da13c875dc927bc39b35c9f10c1dc08abf1568684b22ef199a62a14c0ff207e4b407386adb69bed2f52cc0ab39a0d7feb8ccb3c47a9c47df1f02df456350bab2bcf97a647851e9fe7794fd78593120c60187e6c0f32b732e7a6220fcad8bb693c6d6f9e9e7f140ceae08cace1739c02822a91f8959dbe9b7533d788ba2ed7b8c0d465ca84bc7763c", 0xc0}, {&(0x7f0000000640)="168df6d69f63a19a4fe4c9bfceebee28ecf14d7d39bcbea968996aa8f61db581ebeba1d305a1dbbbec5bc572203ee38a4a8b423c25acb1000b7310bc3fefb1ec3d538bea1362ec19967cf4ff01df30784fa4eb5ba2211208ceb0d57a8b84ed5c54fe3a79c2bc8d96741df035186fca9ea89b818f659d29fff46f6135c8bc5122162e0c34816eeef183e890b154fccd9998d10fd4e2c3cdf6e9de260c6726c5343ed4429d2bb39501fb583b53e5fab5275fa4fe0bf827992c8b7521c15cf5996eeba58bce8a65ba5c2e259d4d1c05441562e4f8cb293aac7aed", 0xd9}, {&(0x7f0000000740)="a6bc8d7c03e44f33546742c676745381ec2ed90e34e16b0ef70152cc37a5b605ed434b93118c85878df21d93f1869d9d8aebf3c436665862c23cbc4c978e6fec935ccd1eaacf8b0d22abf4eb", 0x4c}, {&(0x7f0000001640)="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", 0x1000}], 0x8, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=r19, @ANYRES32=r29, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r30, @ANYRES32=r31, @ANYRES32=r0, @ANYRES32=r32, @ANYRES32=r33, @ANYRES32=r0, @ANYBLOB="18fb070000000000010009000000000024000bae7e49ca4e2ec86c48dd9a6df6d976605edcc502eeb402a4be91eb42d2bd7900166d856f9f2ee0", @ANYRES32=r34, @ANYRES32=r35, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r36, @ANYRES32=r37, @ANYRES32=r40, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r41, @ANYRES32=r0, @ANYRES32=r42, @ANYRES32, @ANYRES32=r43, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r46, @ANYRES32=r47, @ANYRES32=r51, @ANYBLOB='\x00\x00\x00\x00'], 0xd0, 0x20018000}, {&(0x7f0000000c80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000f40)=[{&(0x7f0000000d00)="515302c5f0e90819e9c27ca92e170a0a6aad39c06aede00192db6c9cd2024e961e4cc0f8f0c84616a98254e7a1bd1a6181311c6cbcd4df7d8c320a7fe8a0f7a1dc6ec0a06f07b0328c6a731b8da9a6fa347b8ecf6a646a2ad0a5d59bee51d0ecc2190ebfbbb781f1bbfac168be36f9c93921f518f663bc5239c80820345e128eab910a628af54671581d3d14b42e12cfd3cbe9ce0c4d83d0a0ad3307872ec23ddda8f6fc1b9a3d2112d04102560a960b74223c8e3692e901339e6b58970ba003badcdb1a3bd90f349414fb38ca791d706fc4ba36d53a8a473dee8fc6e21568f4802a13dca2d93d0ea9701b5a102fadaaebbf28b329c387a073", 0xf9}, {&(0x7f0000000e00)="a20d819f74c10f70a85a03f6209550d423a9", 0x12}, {&(0x7f0000000e40)="d8767272835fefbfa6f4c5c18b23e994e2182b2105539c8626f2e231bcf1040b27ea33e703490f75011c9c04c46b0418a012d045acfc14acf3c1fab448c45a09ddc802a8000ecee22b5d", 0x4a}, {&(0x7f0000000ec0)="3463724f6308358234d8500c64b59c2901b459aaee90bb543758a871840d216bf722427b6610be84bdd5faf599db7cdd4d3178fb4d49b13021beff6d8e6d3dc3333d59655ee4a3469b9249c655852f789b03e5a27143d78799a485", 0x5b}, {&(0x7f0000002640)="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", 0x1000}], 0x5, 0x0, 0x0, 0xc000}], 0x2, 0x10000000) r52 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r52, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r52, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r52, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r52, &(0x7f0000000080)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e11bf746b048e9a94b61db6b4c41bd5a5259e62506cda287b857aacc858a00a60f818b2292c594e6707bfab893045fca422a6c99f5f450f79c1d464019ba3855d48ab458d233ff1fe27afb17f", 0xffffffffffffff72, 0x2a0400d6, 0x0, 0xfffffecb) 09:34:34 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xc8}, 0x1c) socket$inet6(0xa, 0x80003, 0x80) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ioctl(r1, 0xe0, &(0x7f0000000100)="0805b5055e0bcfe84740719309ce0b925e114f8cb4219c426b805658e95d78fc0dc7d9183f80c002f67c6b1ae086be4c8515331afb7ac9f072aa8a77f187e8df127929fed7637779de564b288cf8345da1640097f6c69d65d354f0601eb65ed7c56022030000006ef130d8c05e3324328c14e3440d6701c92abc148d84a386107cb4646011ac0507f30e9ff5d3c535f6d161f8218a4c042d9cbed79d16b28b7b04581328ff3e") bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81004e22a31b00000028925aa80020007b00090080000efffeffe809000000ff0000f03ac710c8000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x1, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x80010, r3, 0xa000) r4 = socket(0x10, 0x4000000000000002, 0xc) write(r4, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000500)='/dev/dlm-monitor\x00', 0x0, 0x0) [ 288.797390][T13217] fuse: Bad value for 'fd' [ 288.880488][T13220] fuse: Bad value for 'fd' 09:34:35 executing program 5: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r1, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r3 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYRESOCT=r4], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000000)={0x0}) 09:34:35 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xc8}, 0x1c) socket$inet6(0xa, 0x80003, 0x80) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ioctl(r1, 0xe0, &(0x7f0000000100)="0805b5055e0bcfe84740719309ce0b925e114f8cb4219c426b805658e95d78fc0dc7d9183f80c002f67c6b1ae086be4c8515331afb7ac9f072aa8a77f187e8df127929fed7637779de564b288cf8345da1640097f6c69d65d354f0601eb65ed7c56022030000006ef130d8c05e3324328c14e3440d6701c92abc148d84a386107cb4646011ac0507f30e9ff5d3c535f6d161f8218a4c042d9cbed79d16b28b7b04581328ff3e") bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81004e22a31b00000028925aa80020007b00090080000efffeffe809000000ff0000f03ac710c8000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x1, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x80010, r3, 0xa000) r4 = socket(0x10, 0x4000000000000002, 0xc) write(r4, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000500)='/dev/dlm-monitor\x00', 0x0, 0x0) 09:34:35 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xc8}, 0x1c) socket$inet6(0xa, 0x80003, 0x80) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ioctl(r1, 0xe0, &(0x7f0000000100)="0805b5055e0bcfe84740719309ce0b925e114f8cb4219c426b805658e95d78fc0dc7d9183f80c002f67c6b1ae086be4c8515331afb7ac9f072aa8a77f187e8df127929fed7637779de564b288cf8345da1640097f6c69d65d354f0601eb65ed7c56022030000006ef130d8c05e3324328c14e3440d6701c92abc148d84a386107cb4646011ac0507f30e9ff5d3c535f6d161f8218a4c042d9cbed79d16b28b7b04581328ff3e") bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81004e22a31b00000028925aa80020007b00090080000efffeffe809000000ff0000f03ac710c8000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x1, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x80010, r3, 0xa000) r4 = socket(0x10, 0x4000000000000002, 0xc) write(r4, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket(0x10, 0x4000000000000002, 0xc) write(r7, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000100)={0x4, 0x7, 0x2, 0x2000, &(0x7f0000018000/0x2000)=nil}) [ 289.012235][T13235] fuse: Bad value for 'fd' [ 289.109522][T13235] fuse: Bad value for 'fd' 09:34:35 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c288000000000000000086f16000140000303a0000000000000000000200000000000000ff0200000000000000000000000000010100907800090400600000000000f7ff00000000000000000000fffffffffffc00000000000000000000ffffffffffff"], 0x0) r0 = socket(0x10, 0x4000000000000002, 0xc) write(r0, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r1 = semget$private(0x0, 0x2000000010a, 0x0) semop(r1, &(0x7f0000000100)=[{0x0, 0xfffffffffffefffc}], 0x1) semop(r1, &(0x7f0000000040)=[{0x0, 0x316f}, {0x0, 0xff}], 0x2) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r3 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r4}}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r6 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r7 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r7, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r9}, 0x18, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r11 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r11) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r12, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r13, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r11, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r13}}, 0x18) r14 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r14) r15 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r15, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r15, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r16, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r14, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r16}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r11, @ANYRES32=r9, @ANYRES32=r14, @ANYRES32=r10, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r17 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r20, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r22}, 0x18, 0x0) r23 = getegid() r24 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r25 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r24, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r26}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r27}}) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r3, r4, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r9, r17}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r18, r19, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r22, r23, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r26, r27, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) r28 = socket$nl_xfrm(0x10, 0x3, 0x6) r29 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r28, 0x0, r30) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r31}}) r32 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r32, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r32, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r32, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r33 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r34 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r34, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r33, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r35}, 0x18, 0x0) getsockopt$sock_cred(r32, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r36 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r36) r37 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r37, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r37, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r38, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r36, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r38}}, 0x18) r39 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r39) r40 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r40, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r40, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r41, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r39, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r41}}, 0x18) 09:34:35 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xc8}, 0x1c) socket$inet6(0xa, 0x80003, 0x80) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ioctl(r1, 0xe0, &(0x7f0000000100)="0805b5055e0bcfe84740719309ce0b925e114f8cb4219c426b805658e95d78fc0dc7d9183f80c002f67c6b1ae086be4c8515331afb7ac9f072aa8a77f187e8df127929fed7637779de564b288cf8345da1640097f6c69d65d354f0601eb65ed7c56022030000006ef130d8c05e3324328c14e3440d6701c92abc148d84a386107cb4646011ac0507f30e9ff5d3c535f6d161f8218a4c042d9cbed79d16b28b7b04581328ff3e") bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81004e22a31b00000028925aa80020007b00090080000efffeffe809000000ff0000f03ac710c8000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x1, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x80010, r3, 0xa000) r4 = socket(0x10, 0x4000000000000002, 0xc) write(r4, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000500)='/dev/dlm-monitor\x00', 0x0, 0x0) 09:34:35 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xc8}, 0x1c) socket$inet6(0xa, 0x80003, 0x80) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ioctl(r1, 0xe0, &(0x7f0000000100)="0805b5055e0bcfe84740719309ce0b925e114f8cb4219c426b805658e95d78fc0dc7d9183f80c002f67c6b1ae086be4c8515331afb7ac9f072aa8a77f187e8df127929fed7637779de564b288cf8345da1640097f6c69d65d354f0601eb65ed7c56022030000006ef130d8c05e3324328c14e3440d6701c92abc148d84a386107cb4646011ac0507f30e9ff5d3c535f6d161f8218a4c042d9cbed79d16b28b7b04581328ff3e") bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81004e22a31b00000028925aa80020007b00090080000efffeffe809000000ff0000f03ac710c8000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x1, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x80010, r3, 0xa000) r4 = socket(0x10, 0x4000000000000002, 0xc) write(r4, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000500)='/dev/dlm-monitor\x00', 0x0, 0x0) 09:34:35 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r4 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB="f6d040b04b59c1080420ce79a2e2b3994c97b85d4fa9b26a74821f722687526491cc51067444475b3fbd777463f6189dba679cec43bcdeb9a8321d07b76ce392a565aa1357587cffb5c0bc4e9f36ea4092a8e4ec4f4f3eede465e04d810c4eccfb42fe2485c5b828787fed2649086f276010068f6aa1d799ac9bd11bba04ce8e2de0d596a38c"]) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r7 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r12 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r12) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r13, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r14, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r12, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r14}}, 0x18) r15 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r15) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r16, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r16, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r17, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r15, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r17}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r12, @ANYRES32=r10, @ANYRES32=r15, @ANYRES32=r11, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r18 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r22 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r21, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r23}, 0x18, 0x0) r24 = getegid() r25 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r26 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r25, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r27}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r28}}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r4, r5, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r10, r18}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r19, r20, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r23, r24, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r27, r28, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r29 = socket(0x10, 0x4000000000000002, 0xc) write(r29, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000840)='/dev/rfkill\x00', 0x2000, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000880)='/dev/btrfs-control\x00', 0x541000, 0x0) r30 = socket(0x10, 0x4000000000000002, 0xc) write(r30, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r31 = socket(0x10, 0x4000000000000002, 0xc) write(r31, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) syz_open_dev$sndpcmc(&(0x7f00000008c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x800) r32 = getpid() sched_setattr(r32, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)) r33 = socket$nl_xfrm(0x10, 0x3, 0x6) r34 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r34, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r33, 0x0, r35) r36 = socket(0x10, 0x4000000000000002, 0xc) write(r36, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$md(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/md0\x00', 0x10002, 0x0) r37 = socket(0x10, 0x4000000000000002, 0xc) write(r37, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r39 = dup(r38) ioctl$PERF_EVENT_IOC_ENABLE(r39, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r39, 0xc0502100, &(0x7f0000000a00)) stat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)) socket$nl_xfrm(0x10, 0x3, 0x6) r40 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r40, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r41 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r41, &(0x7f0000000300), 0x12) r42 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r42, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r42, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r42, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r42, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r42, &(0x7f0000000080)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e11bf746b048e9a94b61db6b4c41bd5a5259e62506cda287b857aacc858a00a60f818b2292c594e6707bfab893045fca422a6c99f5f450f79c1d464019ba3855d48ab458d233ff1fe27afb17f", 0xffffffffffffff72, 0x2a0400d6, 0x0, 0xfffffecb) 09:34:35 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xc8}, 0x1c) socket$inet6(0xa, 0x80003, 0x80) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ioctl(r1, 0xe0, &(0x7f0000000100)="0805b5055e0bcfe84740719309ce0b925e114f8cb4219c426b805658e95d78fc0dc7d9183f80c002f67c6b1ae086be4c8515331afb7ac9f072aa8a77f187e8df127929fed7637779de564b288cf8345da1640097f6c69d65d354f0601eb65ed7c56022030000006ef130d8c05e3324328c14e3440d6701c92abc148d84a386107cb4646011ac0507f30e9ff5d3c535f6d161f8218a4c042d9cbed79d16b28b7b04581328ff3e") bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81004e22a31b00000028925aa80020007b00090080000efffeffe809000000ff0000f03ac710c8000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x1, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x80010, r3, 0xa000) r4 = socket(0x10, 0x4000000000000002, 0xc) write(r4, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) socket(0x10, 0x4000000000000002, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000100)={0x4, 0x7, 0x2, 0x2000, &(0x7f0000018000/0x2000)=nil}) [ 289.459407][T13256] fuse: Bad value for 'fd' [ 289.480189][T13265] fuse: Bad value for 'fd' 09:34:35 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xc8}, 0x1c) socket$inet6(0xa, 0x80003, 0x80) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ioctl(r1, 0xe0, &(0x7f0000000100)="0805b5055e0bcfe84740719309ce0b925e114f8cb4219c426b805658e95d78fc0dc7d9183f80c002f67c6b1ae086be4c8515331afb7ac9f072aa8a77f187e8df127929fed7637779de564b288cf8345da1640097f6c69d65d354f0601eb65ed7c56022030000006ef130d8c05e3324328c14e3440d6701c92abc148d84a386107cb4646011ac0507f30e9ff5d3c535f6d161f8218a4c042d9cbed79d16b28b7b04581328ff3e") bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81004e22a31b00000028925aa80020007b00090080000efffeffe809000000ff0000f03ac710c8000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x1, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x80010, r3, 0xa000) r4 = socket(0x10, 0x4000000000000002, 0xc) write(r4, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000500)='/dev/dlm-monitor\x00', 0x0, 0x0) 09:34:35 executing program 4: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r4 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB="f6d040b04b59c1080420ce79a2e2b3994c97b85d4fa9b26a74821f722687526491cc51067444475b3fbd777463f6189dba679cec43bcdeb9a8321d07b76ce392a565aa1357587cffb5c0bc4e9f36ea4092a8e4ec4f4f3eede465e04d810c4eccfb42fe2485c5b828787fed2649086f276010068f6aa1d799ac9bd11bba04ce8e2de0d596a38c"]) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r7 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r12 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r12) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r13, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r14, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r12, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r14}}, 0x18) r15 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r15) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r16, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r16, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r17, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r15, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r17}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000009800f8000000000000000000000000000000000000000000000000006000534554000000000000000000000000000000000000000000000000000000001000000400000001000000ff000000f5f7feffffffffffffaf31000005f900000800000009000000040000000600000004000000000000800800000005000000e00000017f00000100000000ffffff0074756e6c300000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000020001100000000000000000000000000000d000f80000000000000000000000000000000000000000000000000038006f776e657200"/426, @ANYRES32=r12, @ANYRES32=r10, @ANYRES32=r15, @ANYRES32=r11, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r18 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r22 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r21, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r23}, 0x18, 0x0) r24 = getegid() r25 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r26 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r25, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r27}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r28}}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r4, r5, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r10, r18}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r19, r20, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r23, r24, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r27, r28, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r29 = socket(0x10, 0x4000000000000002, 0xc) write(r29, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000840)='/dev/rfkill\x00', 0x2000, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000880)='/dev/btrfs-control\x00', 0x541000, 0x0) r30 = socket(0x10, 0x4000000000000002, 0xc) write(r30, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r31 = socket(0x10, 0x4000000000000002, 0xc) write(r31, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) syz_open_dev$sndpcmc(&(0x7f00000008c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x800) r32 = getpid() sched_setattr(r32, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)) r33 = socket$nl_xfrm(0x10, 0x3, 0x6) r34 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r34, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r33, 0x0, r35) r36 = socket(0x10, 0x4000000000000002, 0xc) write(r36, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$md(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/md0\x00', 0x10002, 0x0) r37 = socket(0x10, 0x4000000000000002, 0xc) write(r37, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r39 = dup(r38) ioctl$PERF_EVENT_IOC_ENABLE(r39, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r39, 0xc0502100, &(0x7f0000000a00)) stat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)) r40 = socket$nl_xfrm(0x10, 0x3, 0x6) r41 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r41, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r40, 0x0, r42) getgroups(0x4, &(0x7f0000000b40)=[0xee00, 0xee00, 0xffffffffffffffff, r42]) r43 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r43, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r43, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r43, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r43, &(0x7f0000000080)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e11bf746b048e9a94b61db6b4c41bd5a5259e62506cda287b857aacc858a00a60f818b2292c594e6707bfab893045fca422a6c99f5f450f79c1d464019ba3855d48ab458d233ff1fe27afb17f", 0xffffffffffffff72, 0x2a0400d6, 0x0, 0xfffffecb) [ 289.516048][T13262] fuse: Bad value for 'fd' [ 289.578556][T13265] fuse: Bad value for 'fd' [ 289.772409][T13282] fuse: Bad value for 'fd' 09:34:35 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r4 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB="f6d040b04b59c1080420ce79a2e2b3994c97b85d4fa9b26a74821f722687526491cc51067444475b3fbd777463f6189dba679cec43bcdeb9a8321d07b76ce392a565aa1357587cffb5c0bc4e9f36ea4092a8e4ec4f4f3eede465e04d810c4eccfb42fe2485c5b828787fed2649086f276010068f6aa1d799ac9bd11bba04ce8e2de0d596a38c"]) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r7 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r12 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r12) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r13, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r14, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r12, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r14}}, 0x18) r15 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r15) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r16, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r16, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r17, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r15, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r17}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r12, @ANYRES32=r10, @ANYRES32=r15, @ANYRES32=r11, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r18 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r22 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r21, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r23}, 0x18, 0x0) r24 = getegid() r25 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r26 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r25, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r27}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r28}}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r4, r5, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r10, r18}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r19, r20, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r23, r24, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r27, r28, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r29 = socket(0x10, 0x4000000000000002, 0xc) write(r29, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000840)='/dev/rfkill\x00', 0x2000, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000880)='/dev/btrfs-control\x00', 0x541000, 0x0) r30 = socket(0x10, 0x4000000000000002, 0xc) write(r30, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r31 = socket(0x10, 0x4000000000000002, 0xc) write(r31, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) syz_open_dev$sndpcmc(&(0x7f00000008c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x800) r32 = getpid() sched_setattr(r32, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)) r33 = socket$nl_xfrm(0x10, 0x3, 0x6) r34 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r34, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r33, 0x0, r35) r36 = socket(0x10, 0x4000000000000002, 0xc) write(r36, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$md(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/md0\x00', 0x10002, 0x0) r37 = socket(0x10, 0x4000000000000002, 0xc) write(r37, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r39 = dup(r38) ioctl$PERF_EVENT_IOC_ENABLE(r39, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r39, 0xc0502100, &(0x7f0000000a00)) stat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r40 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r40, &(0x7f0000000300), 0x12) r41 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r41, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r41, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r41, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r41, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r41, &(0x7f0000000080)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e11bf746b048e9a94b61db6b4c41bd5a5259e62506cda287b857aacc858a00a60f818b2292c594e6707bfab893045fca422a6c99f5f450f79c1d464019ba3855d48ab458d233ff1fe27afb17f", 0xffffffffffffff72, 0x2a0400d6, 0x0, 0xfffffecb) 09:34:35 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c288000000000000000086f16000140000303a0000000000000000000200000000000000ff0200000000000000000000000000010100907800090400600000000000f7ff00000000000000000000fffffffffffc00000000000000000000ffffffffffff"], 0x0) r0 = socket(0x10, 0x4000000000000002, 0xc) write(r0, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r1 = semget$private(0x0, 0x2000000010a, 0x0) semop(r1, &(0x7f0000000100)=[{0x0, 0xfffffffffffefffc}], 0x1) semop(r1, &(0x7f0000000040)=[{0x0, 0x316f}, {0x0, 0xff}], 0x2) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r3 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r4}}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r6 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r7 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r7, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r9}, 0x18, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r11 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r11) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r12, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r13, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r11, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r13}}, 0x18) r14 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r14) r15 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r15, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r15, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r16, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r14, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r16}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r11, @ANYRES32=r9, @ANYRES32=r14, @ANYRES32=r10, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r17 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r20, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r22}, 0x18, 0x0) r23 = getegid() r24 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r25 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r24, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r26}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r27}}) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r3, r4, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r9, r17}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r18, r19, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r22, r23, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r26, r27, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) r28 = socket$nl_xfrm(0x10, 0x3, 0x6) r29 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r28, 0x0, r30) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r31}}) r32 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r32, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r32, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r32, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r33 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r34 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r34, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r33, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r35}, 0x18, 0x0) getsockopt$sock_cred(r32, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r36 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r36) r37 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r37, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r37, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r38, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r36, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r38}}, 0x18) r39 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r39) r40 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r40, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r40, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r41, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) 09:34:35 executing program 5: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r1, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r3 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYRESOCT=r4], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000000)={0x0}) 09:34:35 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xc8}, 0x1c) socket$inet6(0xa, 0x80003, 0x80) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ioctl(r1, 0xe0, &(0x7f0000000100)="0805b5055e0bcfe84740719309ce0b925e114f8cb4219c426b805658e95d78fc0dc7d9183f80c002f67c6b1ae086be4c8515331afb7ac9f072aa8a77f187e8df127929fed7637779de564b288cf8345da1640097f6c69d65d354f0601eb65ed7c56022030000006ef130d8c05e3324328c14e3440d6701c92abc148d84a386107cb4646011ac0507f30e9ff5d3c535f6d161f8218a4c042d9cbed79d16b28b7b04581328ff3e") bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81004e22a31b00000028925aa80020007b00090080000efffeffe809000000ff0000f03ac710c8000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x1, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x80010, r3, 0xa000) r4 = socket(0x10, 0x4000000000000002, 0xc) write(r4, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000500)='/dev/dlm-monitor\x00', 0x0, 0x0) [ 289.920921][T13282] fuse: Bad value for 'fd' 09:34:36 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xc8}, 0x1c) socket$inet6(0xa, 0x80003, 0x80) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ioctl(r1, 0xe0, &(0x7f0000000100)="0805b5055e0bcfe84740719309ce0b925e114f8cb4219c426b805658e95d78fc0dc7d9183f80c002f67c6b1ae086be4c8515331afb7ac9f072aa8a77f187e8df127929fed7637779de564b288cf8345da1640097f6c69d65d354f0601eb65ed7c56022030000006ef130d8c05e3324328c14e3440d6701c92abc148d84a386107cb4646011ac0507f30e9ff5d3c535f6d161f8218a4c042d9cbed79d16b28b7b04581328ff3e") bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81004e22a31b00000028925aa80020007b00090080000efffeffe809000000ff0000f03ac710c8000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x1, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x80010, r3, 0xa000) socket(0x10, 0x4000000000000002, 0xc) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000500)='/dev/dlm-monitor\x00', 0x0, 0x0) 09:34:36 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xc8}, 0x1c) socket$inet6(0xa, 0x80003, 0x80) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ioctl(r1, 0xe0, &(0x7f0000000100)="0805b5055e0bcfe84740719309ce0b925e114f8cb4219c426b805658e95d78fc0dc7d9183f80c002f67c6b1ae086be4c8515331afb7ac9f072aa8a77f187e8df127929fed7637779de564b288cf8345da1640097f6c69d65d354f0601eb65ed7c56022030000006ef130d8c05e3324328c14e3440d6701c92abc148d84a386107cb4646011ac0507f30e9ff5d3c535f6d161f8218a4c042d9cbed79d16b28b7b04581328ff3e") bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81004e22a31b00000028925aa80020007b00090080000efffeffe809000000ff0000f03ac710c8000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x1, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x80010, r3, 0xa000) r4 = socket(0x10, 0x4000000000000002, 0xc) write(r4, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000100)={0x4, 0x7, 0x2, 0x2000, &(0x7f0000018000/0x2000)=nil}) [ 289.977260][T13292] fuse: Bad value for 'fd' 09:34:36 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xc8}, 0x1c) socket$inet6(0xa, 0x80003, 0x80) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ioctl(r1, 0xe0, &(0x7f0000000100)="0805b5055e0bcfe84740719309ce0b925e114f8cb4219c426b805658e95d78fc0dc7d9183f80c002f67c6b1ae086be4c8515331afb7ac9f072aa8a77f187e8df127929fed7637779de564b288cf8345da1640097f6c69d65d354f0601eb65ed7c56022030000006ef130d8c05e3324328c14e3440d6701c92abc148d84a386107cb4646011ac0507f30e9ff5d3c535f6d161f8218a4c042d9cbed79d16b28b7b04581328ff3e") bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81004e22a31b00000028925aa80020007b00090080000efffeffe809000000ff0000f03ac710c8000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x1, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x80010, r3, 0xa000) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000500)='/dev/dlm-monitor\x00', 0x0, 0x0) [ 290.106639][T13292] fuse: Bad value for 'fd' [ 290.148069][T13305] fuse: Bad value for 'fd' [ 290.159769][T13305] fuse: Bad value for 'fd' 09:34:36 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xc8}, 0x1c) socket$inet6(0xa, 0x80003, 0x80) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ioctl(r1, 0xe0, &(0x7f0000000100)="0805b5055e0bcfe84740719309ce0b925e114f8cb4219c426b805658e95d78fc0dc7d9183f80c002f67c6b1ae086be4c8515331afb7ac9f072aa8a77f187e8df127929fed7637779de564b288cf8345da1640097f6c69d65d354f0601eb65ed7c56022030000006ef130d8c05e3324328c14e3440d6701c92abc148d84a386107cb4646011ac0507f30e9ff5d3c535f6d161f8218a4c042d9cbed79d16b28b7b04581328ff3e") bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81004e22a31b00000028925aa80020007b00090080000efffeffe809000000ff0000f03ac710c8000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x1, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x80010, r3, 0xa000) r4 = socket(0x10, 0x4000000000000002, 0xc) write(r4, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000100)={0x4, 0x7, 0x2, 0x2000, &(0x7f0000018000/0x2000)=nil}) 09:34:36 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xc8}, 0x1c) socket$inet6(0xa, 0x80003, 0x80) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ioctl(r1, 0xe0, &(0x7f0000000100)="0805b5055e0bcfe84740719309ce0b925e114f8cb4219c426b805658e95d78fc0dc7d9183f80c002f67c6b1ae086be4c8515331afb7ac9f072aa8a77f187e8df127929fed7637779de564b288cf8345da1640097f6c69d65d354f0601eb65ed7c56022030000006ef130d8c05e3324328c14e3440d6701c92abc148d84a386107cb4646011ac0507f30e9ff5d3c535f6d161f8218a4c042d9cbed79d16b28b7b04581328ff3e") bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81004e22a31b00000028925aa80020007b00090080000efffeffe809000000ff0000f03ac710c8000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x1, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000500)='/dev/dlm-monitor\x00', 0x0, 0x0) 09:34:36 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c288000000000000000086f16000140000303a0000000000000000000200000000000000ff0200000000000000000000000000010100907800090400600000000000f7ff00000000000000000000fffffffffffc00000000000000000000ffffffffffff"], 0x0) r0 = socket(0x10, 0x4000000000000002, 0xc) write(r0, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r1 = semget$private(0x0, 0x2000000010a, 0x0) semop(r1, &(0x7f0000000100)=[{0x0, 0xfffffffffffefffc}], 0x1) semop(r1, &(0x7f0000000040)=[{0x0, 0x316f}, {0x0, 0xff}], 0x2) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r3 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r4}}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r6 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r7 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r7, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r9}, 0x18, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r11 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r11) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r12, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r13, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r11, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r13}}, 0x18) r14 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r14) r15 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r15, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r15, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r16, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r14, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r16}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r11, @ANYRES32=r9, @ANYRES32=r14, @ANYRES32=r10, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r17 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r20, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r22}, 0x18, 0x0) r23 = getegid() r24 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r25 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r24, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r26}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r27}}) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r3, r4, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r9, r17}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r18, r19, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r22, r23, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r26, r27, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) r28 = socket$nl_xfrm(0x10, 0x3, 0x6) r29 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r28, 0x0, r30) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r31}}) r32 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r32, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r32, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r32, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r33 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r34 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r34, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r33, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r35}, 0x18, 0x0) getsockopt$sock_cred(r32, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r36 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r36) r37 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r37, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r37, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r38, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r36, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r38}}, 0x18) r39 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r39) r40 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r40, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 09:34:36 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xc8}, 0x1c) socket$inet6(0xa, 0x80003, 0x80) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ioctl(r1, 0xe0, &(0x7f0000000100)="0805b5055e0bcfe84740719309ce0b925e114f8cb4219c426b805658e95d78fc0dc7d9183f80c002f67c6b1ae086be4c8515331afb7ac9f072aa8a77f187e8df127929fed7637779de564b288cf8345da1640097f6c69d65d354f0601eb65ed7c56022030000006ef130d8c05e3324328c14e3440d6701c92abc148d84a386107cb4646011ac0507f30e9ff5d3c535f6d161f8218a4c042d9cbed79d16b28b7b04581328ff3e") bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81004e22a31b00000028925aa80020007b00090080000efffeffe809000000ff0000f03ac710c8000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000500)='/dev/dlm-monitor\x00', 0x0, 0x0) 09:34:36 executing program 4: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r4 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB="f6d040b04b59c1080420ce79a2e2b3994c97b85d4fa9b26a74821f722687526491cc51067444475b3fbd777463f6189dba679cec43bcdeb9a8321d07b76ce392a565aa1357587cffb5c0bc4e9f36ea4092a8e4ec4f4f3eede465e04d810c4eccfb42fe2485c5b828787fed2649086f276010068f6aa1d799ac9bd11bba04ce8e2de0d596a38c"]) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r7 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r12 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r12) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r13, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r14, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r12, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r14}}, 0x18) r15 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r15) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r16, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r16, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r17, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r15, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r17}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000009800f8000000000000000000000000000000000000000000000000006000534554000000000000000000000000000000000000000000000000000000001000000400000001000000ff000000f5f7feffffffffffffaf31000005f900000800000009000000040000000600000004000000000000800800000005000000e00000017f00000100000000ffffff0074756e6c300000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000020001100000000000000000000000000000d000f80000000000000000000000000000000000000000000000000038006f776e657200"/426, @ANYRES32=r12, @ANYRES32=r10, @ANYRES32=r15, @ANYRES32=r11, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r18 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r22 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r21, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r23}, 0x18, 0x0) r24 = getegid() r25 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r26 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r25, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r27}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r28}}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r4, r5, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r10, r18}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r19, r20, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r23, r24, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r27, r28, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r29 = socket(0x10, 0x4000000000000002, 0xc) write(r29, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000840)='/dev/rfkill\x00', 0x2000, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000880)='/dev/btrfs-control\x00', 0x541000, 0x0) r30 = socket(0x10, 0x4000000000000002, 0xc) write(r30, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r31 = socket(0x10, 0x4000000000000002, 0xc) write(r31, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) syz_open_dev$sndpcmc(&(0x7f00000008c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x800) r32 = getpid() sched_setattr(r32, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)) r33 = socket$nl_xfrm(0x10, 0x3, 0x6) r34 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r34, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r33, 0x0, r35) r36 = socket(0x10, 0x4000000000000002, 0xc) write(r36, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$md(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/md0\x00', 0x10002, 0x0) r37 = socket(0x10, 0x4000000000000002, 0xc) write(r37, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r39 = dup(r38) ioctl$PERF_EVENT_IOC_ENABLE(r39, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r39, 0xc0502100, &(0x7f0000000a00)) stat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)) r40 = socket$nl_xfrm(0x10, 0x3, 0x6) r41 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r41, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r40, 0x0, r42) r43 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r43, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r43, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r43, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r43, &(0x7f0000000080)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e11bf746b048e9a94b61db6b4c41bd5a5259e62506cda287b857aacc858a00a60f818b2292c594e6707bfab893045fca422a6c99f5f450f79c1d464019ba3855d48ab458d233ff1fe27afb17f", 0xffffffffffffff72, 0x2a0400d6, 0x0, 0xfffffecb) [ 290.603406][T13333] fuse: Bad value for 'fd' 09:34:36 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r4 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB="f6d040b04b59c1080420ce79a2e2b3994c97b85d4fa9b26a74821f722687526491cc51067444475b3fbd777463f6189dba679cec43bcdeb9a8321d07b76ce392a565aa1357587cffb5c0bc4e9f36ea4092a8e4ec4f4f3eede465e04d810c4eccfb42fe2485c5b828787fed2649086f276010068f6aa1d799ac9bd11bba04ce8e2de0d596a38c"]) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r7 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r12 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r12) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r13, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r14, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r12, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r14}}, 0x18) r15 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r15) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r16, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r16, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r17, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r15, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r17}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r12, @ANYRES32=r10, @ANYRES32=r15, @ANYRES32=r11, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r18 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r22 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r21, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r23}, 0x18, 0x0) r24 = getegid() r25 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r26 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r25, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r27}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r28}}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r4, r5, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r10, r18}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r19, r20, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r23, r24, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r27, r28, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r29 = socket(0x10, 0x4000000000000002, 0xc) write(r29, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000840)='/dev/rfkill\x00', 0x2000, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000880)='/dev/btrfs-control\x00', 0x541000, 0x0) r30 = socket(0x10, 0x4000000000000002, 0xc) write(r30, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r31 = socket(0x10, 0x4000000000000002, 0xc) write(r31, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) syz_open_dev$sndpcmc(&(0x7f00000008c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x800) r32 = getpid() sched_setattr(r32, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)) r33 = socket$nl_xfrm(0x10, 0x3, 0x6) r34 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r34, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r33, 0x0, r35) r36 = socket(0x10, 0x4000000000000002, 0xc) write(r36, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$md(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/md0\x00', 0x10002, 0x0) r37 = socket(0x10, 0x4000000000000002, 0xc) write(r37, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r39 = dup(r38) ioctl$PERF_EVENT_IOC_ENABLE(r39, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r39, 0xc0502100, &(0x7f0000000a00)) stat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r40 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r40, &(0x7f0000000300), 0x12) r41 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r41, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r41, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r41, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r41, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r41, &(0x7f0000000080)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e11bf746b048e9a94b61db6b4c41bd5a5259e62506cda287b857aacc858a00a60f818b2292c594e6707bfab893045fca422a6c99f5f450f79c1d464019ba3855d48ab458d233ff1fe27afb17f", 0xffffffffffffff72, 0x2a0400d6, 0x0, 0xfffffecb) 09:34:36 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xc8}, 0x1c) socket$inet6(0xa, 0x80003, 0x80) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ioctl(r1, 0xe0, &(0x7f0000000100)="0805b5055e0bcfe84740719309ce0b925e114f8cb4219c426b805658e95d78fc0dc7d9183f80c002f67c6b1ae086be4c8515331afb7ac9f072aa8a77f187e8df127929fed7637779de564b288cf8345da1640097f6c69d65d354f0601eb65ed7c56022030000006ef130d8c05e3324328c14e3440d6701c92abc148d84a386107cb4646011ac0507f30e9ff5d3c535f6d161f8218a4c042d9cbed79d16b28b7b04581328ff3e") bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81004e22a31b00000028925aa80020007b00090080000efffeffe809000000ff0000f03ac710c8000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x1, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x80010, r3, 0xa000) r4 = socket(0x10, 0x4000000000000002, 0xc) write(r4, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x4, 0x7, 0x2, 0x2000, &(0x7f0000018000/0x2000)=nil}) [ 290.668158][T13330] fuse: Bad value for 'fd' [ 290.681355][T13333] fuse: Bad value for 'fd' [ 290.707063][T13330] fuse: Bad value for 'fd' [ 290.809934][T13347] fuse: Bad value for 'fd' 09:34:36 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xc8}, 0x1c) socket$inet6(0xa, 0x80003, 0x80) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ioctl(r1, 0xe0, &(0x7f0000000100)="0805b5055e0bcfe84740719309ce0b925e114f8cb4219c426b805658e95d78fc0dc7d9183f80c002f67c6b1ae086be4c8515331afb7ac9f072aa8a77f187e8df127929fed7637779de564b288cf8345da1640097f6c69d65d354f0601eb65ed7c56022030000006ef130d8c05e3324328c14e3440d6701c92abc148d84a386107cb4646011ac0507f30e9ff5d3c535f6d161f8218a4c042d9cbed79d16b28b7b04581328ff3e") bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000500)='/dev/dlm-monitor\x00', 0x0, 0x0) 09:34:36 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c288000000000000000086f16000140000303a0000000000000000000200000000000000ff0200000000000000000000000000010100907800090400600000000000f7ff00000000000000000000fffffffffffc00000000000000000000ffffffffffff"], 0x0) r0 = socket(0x10, 0x4000000000000002, 0xc) write(r0, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r1 = semget$private(0x0, 0x2000000010a, 0x0) semop(r1, &(0x7f0000000100)=[{0x0, 0xfffffffffffefffc}], 0x1) semop(r1, &(0x7f0000000040)=[{0x0, 0x316f}, {0x0, 0xff}], 0x2) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r3 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r4}}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r6 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r7 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r7, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r9}, 0x18, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r11 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r11) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r12, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r13, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r11, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r13}}, 0x18) r14 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r14) r15 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r15, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r15, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r16, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r14, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r16}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r11, @ANYRES32=r9, @ANYRES32=r14, @ANYRES32=r10, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r17 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r20, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r22}, 0x18, 0x0) r23 = getegid() r24 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r25 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r24, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r26}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r27}}) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r3, r4, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r9, r17}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r18, r19, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r22, r23, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r26, r27, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) r28 = socket$nl_xfrm(0x10, 0x3, 0x6) r29 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r28, 0x0, r30) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r31}}) r32 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r32, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r32, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r32, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r33 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r34 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r34, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r33, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r35}, 0x18, 0x0) getsockopt$sock_cred(r32, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r36 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r36) r37 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r37, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r37, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r38, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r36, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r38}}, 0x18) r39 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r39) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 09:34:36 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xc8}, 0x1c) socket$inet6(0xa, 0x80003, 0x80) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ioctl(r1, 0xe0, &(0x7f0000000100)="0805b5055e0bcfe84740719309ce0b925e114f8cb4219c426b805658e95d78fc0dc7d9183f80c002f67c6b1ae086be4c8515331afb7ac9f072aa8a77f187e8df127929fed7637779de564b288cf8345da1640097f6c69d65d354f0601eb65ed7c56022030000006ef130d8c05e3324328c14e3440d6701c92abc148d84a386107cb4646011ac0507f30e9ff5d3c535f6d161f8218a4c042d9cbed79d16b28b7b04581328ff3e") bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81004e22a31b00000028925aa80020007b00090080000efffeffe809000000ff0000f03ac710c8000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x1, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x80010, r3, 0xa000) r4 = socket(0x10, 0x4000000000000002, 0xc) write(r4, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x4, 0x7, 0x2, 0x2000, &(0x7f0000018000/0x2000)=nil}) 09:34:36 executing program 5: r0 = socket$inet(0x2, 0x80a, 0x0) r1 = socket$inet(0x2, 0x80a, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) sendto$inet6(r3, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = dup2(r3, r3) dup2(r4, r5) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000080)) [ 290.889614][T13347] fuse: Bad value for 'fd' 09:34:37 executing program 4: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r4 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB="f6d040b04b59c1080420ce79a2e2b3994c97b85d4fa9b26a74821f722687526491cc51067444475b3fbd777463f6189dba679cec43bcdeb9a8321d07b76ce392a565aa1357587cffb5c0bc4e9f36ea4092a8e4ec4f4f3eede465e04d810c4eccfb42fe2485c5b828787fed2649086f276010068f6aa1d799ac9bd11bba04ce8e2de0d596a38c"]) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r7 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r12 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r12) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r13, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r14, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r12, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r14}}, 0x18) r15 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r15) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r16, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r16, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r17, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r15, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r17}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000009800f8000000000000000000000000000000000000000000000000006000534554000000000000000000000000000000000000000000000000000000001000000400000001000000ff000000f5f7feffffffffffffaf31000005f900000800000009000000040000000600000004000000000000800800000005000000e00000017f00000100000000ffffff0074756e6c300000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000020001100000000000000000000000000000d000f80000000000000000000000000000000000000000000000000038006f776e657200"/426, @ANYRES32=r12, @ANYRES32=r10, @ANYRES32=r15, @ANYRES32=r11, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r18 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r22 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r21, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r23}, 0x18, 0x0) r24 = getegid() r25 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r26 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r25, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r27}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r28}}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r4, r5, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r10, r18}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r19, r20, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r23, r24, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r27, r28, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r29 = socket(0x10, 0x4000000000000002, 0xc) write(r29, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000840)='/dev/rfkill\x00', 0x2000, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000880)='/dev/btrfs-control\x00', 0x541000, 0x0) r30 = socket(0x10, 0x4000000000000002, 0xc) write(r30, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r31 = socket(0x10, 0x4000000000000002, 0xc) write(r31, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) syz_open_dev$sndpcmc(&(0x7f00000008c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x800) r32 = getpid() sched_setattr(r32, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)) r33 = socket$nl_xfrm(0x10, 0x3, 0x6) r34 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r34, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r33, 0x0, r35) r36 = socket(0x10, 0x4000000000000002, 0xc) write(r36, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$md(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/md0\x00', 0x10002, 0x0) r37 = socket(0x10, 0x4000000000000002, 0xc) write(r37, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r39 = dup(r38) ioctl$PERF_EVENT_IOC_ENABLE(r39, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r39, 0xc0502100, &(0x7f0000000a00)) stat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)) socket$nl_xfrm(0x10, 0x3, 0x6) r40 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r40, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r41 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r41, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r41, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r41, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r41, &(0x7f0000000080)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e11bf746b048e9a94b61db6b4c41bd5a5259e62506cda287b857aacc858a00a60f818b2292c594e6707bfab893045fca422a6c99f5f450f79c1d464019ba3855d48ab458d233ff1fe27afb17f", 0xffffffffffffff72, 0x2a0400d6, 0x0, 0xfffffecb) [ 291.010845][T13358] fuse: Bad value for 'fd' [ 291.027737][T13358] fuse: Bad value for 'fd' [ 291.039312][T13360] syz-executor.5 uses obsolete (PF_INET,SOCK_PACKET) [ 291.166347][T13366] fuse: Bad value for 'fd' 09:34:37 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xc8}, 0x1c) socket$inet6(0xa, 0x80003, 0x80) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ioctl(r1, 0xe0, &(0x7f0000000100)="0805b5055e0bcfe84740719309ce0b925e114f8cb4219c426b805658e95d78fc0dc7d9183f80c002f67c6b1ae086be4c8515331afb7ac9f072aa8a77f187e8df127929fed7637779de564b288cf8345da1640097f6c69d65d354f0601eb65ed7c56022030000006ef130d8c05e3324328c14e3440d6701c92abc148d84a386107cb4646011ac0507f30e9ff5d3c535f6d161f8218a4c042d9cbed79d16b28b7b04581328ff3e") bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000500)='/dev/dlm-monitor\x00', 0x0, 0x0) [ 291.210378][T13354] fuse: Bad value for 'fd' 09:34:37 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r4 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB="f6d040b04b59c1080420ce79a2e2b3994c97b85d4fa9b26a74821f722687526491cc51067444475b3fbd777463f6189dba679cec43bcdeb9a8321d07b76ce392a565aa1357587cffb5c0bc4e9f36ea4092a8e4ec4f4f3eede465e04d810c4eccfb42fe2485c5b828787fed2649086f276010068f6aa1d799ac9bd11bba04ce8e2de0d596a38c"]) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r7 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r12 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r12) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r13, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r14, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r12, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r14}}, 0x18) r15 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r15) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r16, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r16, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r17, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r15, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r17}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000009800f8000000000000000000000000000000000000000000000000006000534554000000000000000000000000000000000000000000000000000000001000000400000001000000ff000000f5f7feffffffffffffaf31000005f900000800000009000000040000000600000004000000000000800800000005000000e00000017f00000100000000ffffff0074756e6c300000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000020001100000000000000000000000000000d000f80000000000000000000000000000000000000000000000000038006f776e657200"/426, @ANYRES32=r12, @ANYRES32=r10, @ANYRES32=r15, @ANYRES32=r11, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r18 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r22 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r21, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r23}, 0x18, 0x0) r24 = getegid() r25 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r26 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r25, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r27}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r28}}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r4, r5, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r10, r18}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r19, r20, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r23, r24, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r27, r28, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r29 = socket(0x10, 0x4000000000000002, 0xc) write(r29, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000840)='/dev/rfkill\x00', 0x2000, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000880)='/dev/btrfs-control\x00', 0x541000, 0x0) r30 = socket(0x10, 0x4000000000000002, 0xc) write(r30, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r31 = socket(0x10, 0x4000000000000002, 0xc) write(r31, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) syz_open_dev$sndpcmc(&(0x7f00000008c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x800) r32 = getpid() sched_setattr(r32, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)) r33 = socket$nl_xfrm(0x10, 0x3, 0x6) r34 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r34, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r33, 0x0, r35) r36 = socket(0x10, 0x4000000000000002, 0xc) write(r36, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$md(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/md0\x00', 0x10002, 0x0) r37 = socket(0x10, 0x4000000000000002, 0xc) write(r37, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r39 = dup(r38) ioctl$PERF_EVENT_IOC_ENABLE(r39, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r39, 0xc0502100, &(0x7f0000000a00)) stat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)) socket$nl_xfrm(0x10, 0x3, 0x6) r40 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r40, &(0x7f0000000300), 0x12) r41 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r41, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r41, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r41, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r41, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r41, &(0x7f0000000080)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e11bf746b048e9a94b61db6b4c41bd5a5259e62506cda287b857aacc858a00a60f818b2292c594e6707bfab893045fca422a6c99f5f450f79c1d464019ba3855d48ab458d233ff1fe27afb17f", 0xffffffffffffff72, 0x2a0400d6, 0x0, 0xfffffecb) 09:34:37 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xc8}, 0x1c) socket$inet6(0xa, 0x80003, 0x80) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ioctl(r1, 0xe0, &(0x7f0000000100)="0805b5055e0bcfe84740719309ce0b925e114f8cb4219c426b805658e95d78fc0dc7d9183f80c002f67c6b1ae086be4c8515331afb7ac9f072aa8a77f187e8df127929fed7637779de564b288cf8345da1640097f6c69d65d354f0601eb65ed7c56022030000006ef130d8c05e3324328c14e3440d6701c92abc148d84a386107cb4646011ac0507f30e9ff5d3c535f6d161f8218a4c042d9cbed79d16b28b7b04581328ff3e") openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000500)='/dev/dlm-monitor\x00', 0x0, 0x0) 09:34:37 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xc8}, 0x1c) socket$inet6(0xa, 0x80003, 0x80) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ioctl(r1, 0xe0, &(0x7f0000000100)="0805b5055e0bcfe84740719309ce0b925e114f8cb4219c426b805658e95d78fc0dc7d9183f80c002f67c6b1ae086be4c8515331afb7ac9f072aa8a77f187e8df127929fed7637779de564b288cf8345da1640097f6c69d65d354f0601eb65ed7c56022030000006ef130d8c05e3324328c14e3440d6701c92abc148d84a386107cb4646011ac0507f30e9ff5d3c535f6d161f8218a4c042d9cbed79d16b28b7b04581328ff3e") bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81004e22a31b00000028925aa80020007b00090080000efffeffe809000000ff0000f03ac710c8000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x1, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x80010, r3, 0xa000) r4 = socket(0x10, 0x4000000000000002, 0xc) write(r4, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x4, 0x7, 0x2, 0x2000, &(0x7f0000018000/0x2000)=nil}) 09:34:37 executing program 4: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r4 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB="f6d040b04b59c1080420ce79a2e2b3994c97b85d4fa9b26a74821f722687526491cc51067444475b3fbd777463f6189dba679cec43bcdeb9a8321d07b76ce392a565aa1357587cffb5c0bc4e9f36ea4092a8e4ec4f4f3eede465e04d810c4eccfb42fe2485c5b828787fed2649086f276010068f6aa1d799ac9bd11bba04ce8e2de0d596a38c"]) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r7 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r12 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r12) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r13, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r14, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r12, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r14}}, 0x18) r15 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r15) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r16, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r16, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r17, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r15, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r17}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r12, @ANYRES32=r10, @ANYRES32=r15, @ANYRES32=r11, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r18 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r22 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r21, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r23}, 0x18, 0x0) r24 = getegid() r25 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r26 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r25, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r27}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r28}}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r4, r5, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r10, r18}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r19, r20, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r23, r24, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r27, r28, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r29 = socket(0x10, 0x4000000000000002, 0xc) write(r29, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000840)='/dev/rfkill\x00', 0x2000, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000880)='/dev/btrfs-control\x00', 0x541000, 0x0) r30 = socket(0x10, 0x4000000000000002, 0xc) write(r30, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r31 = socket(0x10, 0x4000000000000002, 0xc) write(r31, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) syz_open_dev$sndpcmc(&(0x7f00000008c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x800) r32 = getpid() sched_setattr(r32, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)) r33 = socket$nl_xfrm(0x10, 0x3, 0x6) r34 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r34, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r33, 0x0, r35) r36 = socket(0x10, 0x4000000000000002, 0xc) write(r36, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$md(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/md0\x00', 0x10002, 0x0) r37 = socket(0x10, 0x4000000000000002, 0xc) write(r37, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r39 = dup(r38) ioctl$PERF_EVENT_IOC_ENABLE(r39, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r39, 0xc0502100, &(0x7f0000000a00)) stat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r40 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r40, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r40, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r40, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r40, &(0x7f0000000080)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e11bf746b048e9a94b61db6b4c41bd5a5259e62506cda287b857aacc858a00a60f818b2292c594e6707bfab893045fca422a6c99f5f450f79c1d464019ba3855d48ab458d233ff1fe27afb17f", 0xffffffffffffff72, 0x2a0400d6, 0x0, 0xfffffecb) 09:34:37 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xc8}, 0x1c) socket$inet6(0xa, 0x80003, 0x80) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000500)='/dev/dlm-monitor\x00', 0x0, 0x0) 09:34:37 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xc8}, 0x1c) socket$inet6(0xa, 0x80003, 0x80) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ioctl(r1, 0xe0, &(0x7f0000000100)="0805b5055e0bcfe84740719309ce0b925e114f8cb4219c426b805658e95d78fc0dc7d9183f80c002f67c6b1ae086be4c8515331afb7ac9f072aa8a77f187e8df127929fed7637779de564b288cf8345da1640097f6c69d65d354f0601eb65ed7c56022030000006ef130d8c05e3324328c14e3440d6701c92abc148d84a386107cb4646011ac0507f30e9ff5d3c535f6d161f8218a4c042d9cbed79d16b28b7b04581328ff3e") bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81004e22a31b00000028925aa80020007b00090080000efffeffe809000000ff0000f03ac710c8000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x1, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x80010, r3, 0xa000) r4 = socket(0x10, 0x4000000000000002, 0xc) write(r4, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000100)={0x4, 0x7, 0x2, 0x2000, &(0x7f0000018000/0x2000)=nil}) [ 291.541547][T13386] fuse: Bad value for 'fd' [ 291.566395][T13388] fuse: Bad value for 'fd' 09:34:37 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xc8}, 0x1c) socket$inet6(0xa, 0x80003, 0x80) socket(0x10, 0x4000000000000002, 0xc) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000500)='/dev/dlm-monitor\x00', 0x0, 0x0) 09:34:37 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c288000000000000000086f16000140000303a0000000000000000000200000000000000ff0200000000000000000000000000010100907800090400600000000000f7ff00000000000000000000fffffffffffc00000000000000000000ffffffffffff"], 0x0) r0 = socket(0x10, 0x4000000000000002, 0xc) write(r0, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r1 = semget$private(0x0, 0x2000000010a, 0x0) semop(r1, &(0x7f0000000100)=[{0x0, 0xfffffffffffefffc}], 0x1) semop(r1, &(0x7f0000000040)=[{0x0, 0x316f}, {0x0, 0xff}], 0x2) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r3 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r4}}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r6 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r7 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r7, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r9}, 0x18, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r11 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r11) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r12, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r13, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r11, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r13}}, 0x18) r14 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r14) r15 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r15, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r15, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r16, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r14, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r16}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r11, @ANYRES32=r9, @ANYRES32=r14, @ANYRES32=r10, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r17 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r20, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r22}, 0x18, 0x0) r23 = getegid() r24 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r25 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r24, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r26}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r27}}) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r3, r4, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r9, r17}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r18, r19, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r22, r23, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r26, r27, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) r28 = socket$nl_xfrm(0x10, 0x3, 0x6) r29 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r28, 0x0, r30) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r31}}) r32 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r32, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r32, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r32, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r33 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r34 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r34, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r33, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r35}, 0x18, 0x0) getsockopt$sock_cred(r32, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r36 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r36) r37 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r37, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r37, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r38, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r36, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r38}}, 0x18) r39 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r39) [ 291.647803][T13388] fuse: Bad value for 'fd' [ 291.712271][T13386] fuse: Bad value for 'fd' 09:34:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x7ffffff9, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x14, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8}, @IFLA_GRE_OFLAGS={0x8}]]}}}]}, 0x48}}, 0x0) [ 291.789520][T13402] fuse: Bad value for 'fd' 09:34:37 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xc8}, 0x1c) socket$inet6(0xa, 0x80003, 0x80) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000500)='/dev/dlm-monitor\x00', 0x0, 0x0) [ 291.814411][T13402] fuse: Bad value for 'fd' 09:34:38 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xc8}, 0x1c) socket$inet6(0xa, 0x80003, 0x80) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ioctl(r1, 0xe0, &(0x7f0000000100)="0805b5055e0bcfe84740719309ce0b925e114f8cb4219c426b805658e95d78fc0dc7d9183f80c002f67c6b1ae086be4c8515331afb7ac9f072aa8a77f187e8df127929fed7637779de564b288cf8345da1640097f6c69d65d354f0601eb65ed7c56022030000006ef130d8c05e3324328c14e3440d6701c92abc148d84a386107cb4646011ac0507f30e9ff5d3c535f6d161f8218a4c042d9cbed79d16b28b7b04581328ff3e") bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81004e22a31b00000028925aa80020007b00090080000efffeffe809000000ff0000f03ac710c8000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x1, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x80010, r3, 0xa000) r4 = socket(0x10, 0x4000000000000002, 0xc) write(r4, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000100)={0x4, 0x7, 0x2, 0x2000, &(0x7f0000018000/0x2000)=nil}) [ 291.906698][T13411] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 291.915094][T13411] netlink: 'syz-executor.5': attribute type 3 has an invalid length. 09:34:38 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xc8}, 0x1c) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000500)='/dev/dlm-monitor\x00', 0x0, 0x0) 09:34:38 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r4 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB="f6d040b04b59c1080420ce79a2e2b3994c97b85d4fa9b26a74821f722687526491cc51067444475b3fbd777463f6189dba679cec43bcdeb9a8321d07b76ce392a565aa1357587cffb5c0bc4e9f36ea4092a8e4ec4f4f3eede465e04d810c4eccfb42fe2485c5b828787fed2649086f276010068f6aa1d799ac9bd11bba04ce8e2de0d596a38c"]) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r7 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r12 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r12) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r13, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r14, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r12, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r14}}, 0x18) r15 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r15) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r16, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r16, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r17, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r15, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r17}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r12, @ANYRES32=r10, @ANYRES32=r15, @ANYRES32=r11, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r18 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r22 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r21, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r23}, 0x18, 0x0) r24 = getegid() r25 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r26 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r25, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r27}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r28}}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r4, r5, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r10, r18}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r19, r20, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r23, r24, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r27, r28, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r29 = socket(0x10, 0x4000000000000002, 0xc) write(r29, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000840)='/dev/rfkill\x00', 0x2000, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000880)='/dev/btrfs-control\x00', 0x541000, 0x0) r30 = socket(0x10, 0x4000000000000002, 0xc) write(r30, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r31 = socket(0x10, 0x4000000000000002, 0xc) write(r31, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) syz_open_dev$sndpcmc(&(0x7f00000008c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x800) r32 = getpid() sched_setattr(r32, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)) r33 = socket$nl_xfrm(0x10, 0x3, 0x6) r34 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r34, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r33, 0x0, r35) r36 = socket(0x10, 0x4000000000000002, 0xc) write(r36, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$md(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/md0\x00', 0x10002, 0x0) r37 = socket(0x10, 0x4000000000000002, 0xc) write(r37, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r39 = dup(r38) ioctl$PERF_EVENT_IOC_ENABLE(r39, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r39, 0xc0502100, &(0x7f0000000a00)) stat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)) r40 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r40, &(0x7f0000000300), 0x12) r41 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r41, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r41, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r41, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r41, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r41, &(0x7f0000000080)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e11bf746b048e9a94b61db6b4c41bd5a5259e62506cda287b857aacc858a00a60f818b2292c594e6707bfab893045fca422a6c99f5f450f79c1d464019ba3855d48ab458d233ff1fe27afb17f", 0xffffffffffffff72, 0x2a0400d6, 0x0, 0xfffffecb) 09:34:38 executing program 5: r0 = socket$inet(0x10, 0x3, 0x20000000006) r1 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@ipv4={[], [], @empty}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in=@empty}}, 0xe8) r2 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@ipv4={[], [], @empty}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in=@empty}}, 0xe8) r3 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@ipv4={[], [], @empty}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in=@empty}}, 0xe8) r4 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@ipv4={[], [], @empty}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in=@empty}}, 0xe8) r5 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@ipv4={[], [], @empty}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in=@empty}}, 0xe8) r6 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@ipv4={[], [], @empty}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in=@empty}}, 0xe8) r7 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@ipv4={[], [], @empty}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in=@empty}}, 0xe8) r8 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@ipv4={[], [], @empty}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in=@empty}}, 0xe8) r9 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@ipv4={[], [], @empty}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in=@empty}}, 0xe8) r10 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@ipv4={[], [], @empty}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in=@empty}}, 0xe8) r11 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@ipv4={[], [], @empty}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in=@empty}}, 0xe8) r12 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@ipv4={[], [], @empty}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in=@empty}}, 0xe8) r13 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r13, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@ipv4={[], [], @empty}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in=@empty}}, 0xe8) r14 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r14, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@ipv4={[], [], @empty}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in=@empty}}, 0xe8) sendmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="24000000150007031dfffd946fa2830002200a0009000000741d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 09:34:38 executing program 4: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r4 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB="f6d040b04b59c1080420ce79a2e2b3994c97b85d4fa9b26a74821f722687526491cc51067444475b3fbd777463f6189dba679cec43bcdeb9a8321d07b76ce392a565aa1357587cffb5c0bc4e9f36ea4092a8e4ec4f4f3eede465e04d810c4eccfb42fe2485c5b828787fed2649086f276010068f6aa1d799ac9bd11bba04ce8e2de0d596a38c"]) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r7 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r12 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r12) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r13, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r14, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r12, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r14}}, 0x18) r15 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r15) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r16, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r16, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r17, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r15, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r17}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r12, @ANYRES32=r10, @ANYRES32=r15, @ANYRES32=r11, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r18 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r22 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r21, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r23}, 0x18, 0x0) r24 = getegid() r25 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r26 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r25, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r27}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r28}}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r4, r5, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r10, r18}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r19, r20, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r23, r24, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r27, r28, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r29 = socket(0x10, 0x4000000000000002, 0xc) write(r29, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000840)='/dev/rfkill\x00', 0x2000, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000880)='/dev/btrfs-control\x00', 0x541000, 0x0) r30 = socket(0x10, 0x4000000000000002, 0xc) write(r30, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r31 = socket(0x10, 0x4000000000000002, 0xc) write(r31, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) syz_open_dev$sndpcmc(&(0x7f00000008c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x800) r32 = getpid() sched_setattr(r32, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)) r33 = socket$nl_xfrm(0x10, 0x3, 0x6) r34 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r34, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r33, 0x0, r35) r36 = socket(0x10, 0x4000000000000002, 0xc) write(r36, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$md(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/md0\x00', 0x10002, 0x0) r37 = socket(0x10, 0x4000000000000002, 0xc) write(r37, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r39 = dup(r38) ioctl$PERF_EVENT_IOC_ENABLE(r39, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r39, 0xc0502100, &(0x7f0000000a00)) stat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)) socket$nl_xfrm(0x10, 0x3, 0x6) r40 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r40, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r40, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r40, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r40, &(0x7f0000000080)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e11bf746b048e9a94b61db6b4c41bd5a5259e62506cda287b857aacc858a00a60f818b2292c594e6707bfab893045fca422a6c99f5f450f79c1d464019ba3855d48ab458d233ff1fe27afb17f", 0xffffffffffffff72, 0x2a0400d6, 0x0, 0xfffffecb) 09:34:38 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c288000000000000000086f16000140000303a0000000000000000000200000000000000ff0200000000000000000000000000010100907800090400600000000000f7ff00000000000000000000fffffffffffc00000000000000000000ffffffffffff"], 0x0) r0 = socket(0x10, 0x4000000000000002, 0xc) write(r0, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r1 = semget$private(0x0, 0x2000000010a, 0x0) semop(r1, &(0x7f0000000100)=[{0x0, 0xfffffffffffefffc}], 0x1) semop(r1, &(0x7f0000000040)=[{0x0, 0x316f}, {0x0, 0xff}], 0x2) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r3 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r4}}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r6 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r7 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r7, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r9}, 0x18, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r11 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r11) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r12, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r13, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r11, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r13}}, 0x18) r14 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r14) r15 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r15, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r15, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r16, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r14, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r16}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r11, @ANYRES32=r9, @ANYRES32=r14, @ANYRES32=r10, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r17 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r20, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r22}, 0x18, 0x0) r23 = getegid() r24 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r25 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r24, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r26}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r27}}) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r3, r4, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r9, r17}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r18, r19, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r22, r23, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r26, r27, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) r28 = socket$nl_xfrm(0x10, 0x3, 0x6) r29 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r28, 0x0, r30) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r31}}) r32 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r32, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r32, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r32, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r33 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r34 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r34, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r33, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r35}, 0x18, 0x0) getsockopt$sock_cred(r32, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r36 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r36) r37 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r37, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r37, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r38, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r36, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r38}}, 0x18) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 292.207564][T13426] fuse: Bad value for 'fd' 09:34:38 executing program 2: socket$inet6(0xa, 0x2, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000500)='/dev/dlm-monitor\x00', 0x0, 0x0) [ 292.270800][T13430] fuse: Bad value for 'fd' [ 292.288280][T13426] fuse: Bad value for 'fd' 09:34:38 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xc8}, 0x1c) socket$inet6(0xa, 0x80003, 0x80) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ioctl(r1, 0xe0, &(0x7f0000000100)="0805b5055e0bcfe84740719309ce0b925e114f8cb4219c426b805658e95d78fc0dc7d9183f80c002f67c6b1ae086be4c8515331afb7ac9f072aa8a77f187e8df127929fed7637779de564b288cf8345da1640097f6c69d65d354f0601eb65ed7c56022030000006ef130d8c05e3324328c14e3440d6701c92abc148d84a386107cb4646011ac0507f30e9ff5d3c535f6d161f8218a4c042d9cbed79d16b28b7b04581328ff3e") bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81004e22a31b00000028925aa80020007b00090080000efffeffe809000000ff0000f03ac710c8000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x1, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x80010, r3, 0xa000) r4 = socket(0x10, 0x4000000000000002, 0xc) write(r4, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000100)={0x4, 0x7, 0x2, 0x2000, &(0x7f0000018000/0x2000)=nil}) [ 292.325237][T13430] fuse: Bad value for 'fd' 09:34:38 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='GPL\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs_stats\x00') [ 292.449049][T13438] fuse: Bad value for 'fd' 09:34:38 executing program 2: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000500)='/dev/dlm-monitor\x00', 0x0, 0x0) [ 292.488851][T13438] fuse: Bad value for 'fd' 09:34:38 executing program 4: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r4 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB="f6d040b04b59c1080420ce79a2e2b3994c97b85d4fa9b26a74821f722687526491cc51067444475b3fbd777463f6189dba679cec43bcdeb9a8321d07b76ce392a565aa1357587cffb5c0bc4e9f36ea4092a8e4ec4f4f3eede465e04d810c4eccfb42fe2485c5b828787fed2649086f276010068f6aa1d799ac9bd11bba04ce8e2de0d596a38c"]) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r7 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r12 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r12) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r13, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r14, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r12, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r14}}, 0x18) r15 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r15) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r16, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r16, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r17, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r15, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r17}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r12, @ANYRES32=r10, @ANYRES32=r15, @ANYRES32=r11, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r18 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r22 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r21, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r23}, 0x18, 0x0) r24 = getegid() r25 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r26 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r25, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r27}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r28}}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r4, r5, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r10, r18}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r19, r20, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r23, r24, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r27, r28, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r29 = socket(0x10, 0x4000000000000002, 0xc) write(r29, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000840)='/dev/rfkill\x00', 0x2000, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000880)='/dev/btrfs-control\x00', 0x541000, 0x0) r30 = socket(0x10, 0x4000000000000002, 0xc) write(r30, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r31 = socket(0x10, 0x4000000000000002, 0xc) write(r31, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) syz_open_dev$sndpcmc(&(0x7f00000008c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x800) r32 = getpid() sched_setattr(r32, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)) r33 = socket$nl_xfrm(0x10, 0x3, 0x6) r34 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r34, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r33, 0x0, r35) r36 = socket(0x10, 0x4000000000000002, 0xc) write(r36, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$md(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/md0\x00', 0x10002, 0x0) r37 = socket(0x10, 0x4000000000000002, 0xc) write(r37, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r39 = dup(r38) ioctl$PERF_EVENT_IOC_ENABLE(r39, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r39, 0xc0502100, &(0x7f0000000a00)) stat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)) r40 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r40, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r40, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r40, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r40, &(0x7f0000000080)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e11bf746b048e9a94b61db6b4c41bd5a5259e62506cda287b857aacc858a00a60f818b2292c594e6707bfab893045fca422a6c99f5f450f79c1d464019ba3855d48ab458d233ff1fe27afb17f", 0xffffffffffffff72, 0x2a0400d6, 0x0, 0xfffffecb) 09:34:38 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='GPL\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs_stats\x00') 09:34:38 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r4 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB="f6d040b04b59c1080420ce79a2e2b3994c97b85d4fa9b26a74821f722687526491cc51067444475b3fbd777463f6189dba679cec43bcdeb9a8321d07b76ce392a565aa1357587cffb5c0bc4e9f36ea4092a8e4ec4f4f3eede465e04d810c4eccfb42fe2485c5b828787fed2649086f276010068f6aa1d799ac9bd11bba04ce8e2de0d596a38c"]) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r7 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r12 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r12) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r13, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r14, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r12, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r14}}, 0x18) r15 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r15) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r16, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r16, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r17, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r15, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r17}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r12, @ANYRES32=r10, @ANYRES32=r15, @ANYRES32=r11, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r18 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r22 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r21, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r23}, 0x18, 0x0) r24 = getegid() r25 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r26 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r25, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r27}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r28}}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r4, r5, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r10, r18}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r19, r20, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r23, r24, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r27, r28, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r29 = socket(0x10, 0x4000000000000002, 0xc) write(r29, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000840)='/dev/rfkill\x00', 0x2000, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000880)='/dev/btrfs-control\x00', 0x541000, 0x0) r30 = socket(0x10, 0x4000000000000002, 0xc) write(r30, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r31 = socket(0x10, 0x4000000000000002, 0xc) write(r31, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) syz_open_dev$sndpcmc(&(0x7f00000008c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x800) r32 = getpid() sched_setattr(r32, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)) r33 = socket$nl_xfrm(0x10, 0x3, 0x6) r34 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r34, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r33, 0x0, r35) r36 = socket(0x10, 0x4000000000000002, 0xc) write(r36, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$md(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/md0\x00', 0x10002, 0x0) r37 = socket(0x10, 0x4000000000000002, 0xc) write(r37, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r39 = dup(r38) ioctl$PERF_EVENT_IOC_ENABLE(r39, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r39, 0xc0502100, &(0x7f0000000a00)) r40 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r40, &(0x7f0000000300), 0x12) r41 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r41, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r41, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r41, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r41, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r41, &(0x7f0000000080)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e11bf746b048e9a94b61db6b4c41bd5a5259e62506cda287b857aacc858a00a60f818b2292c594e6707bfab893045fca422a6c99f5f450f79c1d464019ba3855d48ab458d233ff1fe27afb17f", 0xffffffffffffff72, 0x2a0400d6, 0x0, 0xfffffecb) 09:34:38 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xc8}, 0x1c) socket$inet6(0xa, 0x80003, 0x80) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ioctl(r1, 0xe0, &(0x7f0000000100)="0805b5055e0bcfe84740719309ce0b925e114f8cb4219c426b805658e95d78fc0dc7d9183f80c002f67c6b1ae086be4c8515331afb7ac9f072aa8a77f187e8df127929fed7637779de564b288cf8345da1640097f6c69d65d354f0601eb65ed7c56022030000006ef130d8c05e3324328c14e3440d6701c92abc148d84a386107cb4646011ac0507f30e9ff5d3c535f6d161f8218a4c042d9cbed79d16b28b7b04581328ff3e") bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81004e22a31b00000028925aa80020007b00090080000efffeffe809000000ff0000f03ac710c8000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x1, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x80010, r3, 0xa000) r4 = socket(0x10, 0x4000000000000002, 0xc) write(r4, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000100)={0x4, 0x7, 0x2, 0x2000, &(0x7f0000018000/0x2000)=nil}) [ 292.676682][T13458] fuse: Bad value for 'fd' [ 292.720039][T13461] fuse: Bad value for 'fd' [ 292.762159][T13458] fuse: Bad value for 'fd' 09:34:38 executing program 2: openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 292.798626][T13461] fuse: Bad value for 'fd' 09:34:38 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c288000000000000000086f16000140000303a0000000000000000000200000000000000ff0200000000000000000000000000010100907800090400600000000000f7ff00000000000000000000fffffffffffc00000000000000000000ffffffffffff"], 0x0) r0 = socket(0x10, 0x4000000000000002, 0xc) write(r0, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r1 = semget$private(0x0, 0x2000000010a, 0x0) semop(r1, &(0x7f0000000100)=[{0x0, 0xfffffffffffefffc}], 0x1) semop(r1, &(0x7f0000000040)=[{0x0, 0x316f}, {0x0, 0xff}], 0x2) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r3 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r4}}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r6 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r7 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r7, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r9}, 0x18, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r11 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r11) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r12, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r13, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r11, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r13}}, 0x18) r14 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r14) r15 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r15, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r15, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r16, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r14, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r16}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r11, @ANYRES32=r9, @ANYRES32=r14, @ANYRES32=r10, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r17 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r20, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r22}, 0x18, 0x0) r23 = getegid() r24 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r25 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r24, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r26}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r27}}) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r3, r4, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r9, r17}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r18, r19, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r22, r23, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r26, r27, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) r28 = socket$nl_xfrm(0x10, 0x3, 0x6) r29 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r28, 0x0, r30) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r31}}) r32 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r32, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r32, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r32, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r33 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r34 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r34, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r33, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r35}, 0x18, 0x0) getsockopt$sock_cred(r32, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r36 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r36) r37 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r37, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r37, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r38, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r36, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r38}}, 0x18) 09:34:39 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r4 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB="f6d040b04b59c1080420ce79a2e2b3994c97b85d4fa9b26a74821f722687526491cc51067444475b3fbd777463f6189dba679cec43bcdeb9a8321d07b76ce392a565aa1357587cffb5c0bc4e9f36ea4092a8e4ec4f4f3eede465e04d810c4eccfb42fe2485c5b828787fed2649086f276010068f6aa1d799ac9bd11bba04ce8e2de0d596a38c"]) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r7 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r12 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r12) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r13, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r14, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r12, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r14}}, 0x18) r15 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r15) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r16, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r16, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r17, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r15, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r17}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r12, @ANYRES32=r10, @ANYRES32=r15, @ANYRES32=r11, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r18 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r22 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r21, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r23}, 0x18, 0x0) r24 = getegid() r25 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r26 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r25, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r27}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r28}}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r4, r5, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r10, r18}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r19, r20, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r23, r24, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r27, r28, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r29 = socket(0x10, 0x4000000000000002, 0xc) write(r29, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000840)='/dev/rfkill\x00', 0x2000, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000880)='/dev/btrfs-control\x00', 0x541000, 0x0) r30 = socket(0x10, 0x4000000000000002, 0xc) write(r30, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r31 = socket(0x10, 0x4000000000000002, 0xc) write(r31, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) syz_open_dev$sndpcmc(&(0x7f00000008c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x800) r32 = getpid() sched_setattr(r32, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)) r33 = socket$nl_xfrm(0x10, 0x3, 0x6) r34 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r34, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r33, 0x0, r35) r36 = socket(0x10, 0x4000000000000002, 0xc) write(r36, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$md(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/md0\x00', 0x10002, 0x0) r37 = socket(0x10, 0x4000000000000002, 0xc) write(r37, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r39 = dup(r38) ioctl$PERF_EVENT_IOC_ENABLE(r39, 0x8912, 0x400200) r40 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r40, &(0x7f0000000300), 0x12) r41 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r41, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r41, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r41, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r41, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r41, &(0x7f0000000080)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e11bf746b048e9a94b61db6b4c41bd5a5259e62506cda287b857aacc858a00a60f818b2292c594e6707bfab893045fca422a6c99f5f450f79c1d464019ba3855d48ab458d233ff1fe27afb17f", 0xffffffffffffff72, 0x2a0400d6, 0x0, 0xfffffecb) 09:34:39 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='GPL\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs_stats\x00') 09:34:39 executing program 4: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r4 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB="f6d040b04b59c1080420ce79a2e2b3994c97b85d4fa9b26a74821f722687526491cc51067444475b3fbd777463f6189dba679cec43bcdeb9a8321d07b76ce392a565aa1357587cffb5c0bc4e9f36ea4092a8e4ec4f4f3eede465e04d810c4eccfb42fe2485c5b828787fed2649086f276010068f6aa1d799ac9bd11bba04ce8e2de0d596a38c"]) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r7 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r12 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r12) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r13, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r14, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r12, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r14}}, 0x18) r15 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r15) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r16, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r16, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r17, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r15, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r17}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r12, @ANYRES32=r10, @ANYRES32=r15, @ANYRES32=r11, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r18 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r22 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r21, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r23}, 0x18, 0x0) r24 = getegid() r25 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r26 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r25, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r27}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r28}}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r4, r5, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r10, r18}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r19, r20, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r23, r24, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r27, r28, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r29 = socket(0x10, 0x4000000000000002, 0xc) write(r29, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000840)='/dev/rfkill\x00', 0x2000, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000880)='/dev/btrfs-control\x00', 0x541000, 0x0) r30 = socket(0x10, 0x4000000000000002, 0xc) write(r30, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r31 = socket(0x10, 0x4000000000000002, 0xc) write(r31, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) syz_open_dev$sndpcmc(&(0x7f00000008c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x800) r32 = getpid() sched_setattr(r32, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)) r33 = socket$nl_xfrm(0x10, 0x3, 0x6) r34 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r34, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r33, 0x0, r35) r36 = socket(0x10, 0x4000000000000002, 0xc) write(r36, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$md(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/md0\x00', 0x10002, 0x0) r37 = socket(0x10, 0x4000000000000002, 0xc) write(r37, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r39 = dup(r38) ioctl$PERF_EVENT_IOC_ENABLE(r39, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r39, 0xc0502100, &(0x7f0000000a00)) r40 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r40, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r40, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r40, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r40, &(0x7f0000000080)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e11bf746b048e9a94b61db6b4c41bd5a5259e62506cda287b857aacc858a00a60f818b2292c594e6707bfab893045fca422a6c99f5f450f79c1d464019ba3855d48ab458d233ff1fe27afb17f", 0xffffffffffffff72, 0x2a0400d6, 0x0, 0xfffffecb) 09:34:39 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='GPL\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs_stats\x00') [ 293.104861][T13484] fuse: Bad value for 'fd' [ 293.157072][T13474] fuse: Bad value for 'fd' [ 293.170245][T13484] fuse: Bad value for 'fd' 09:34:39 executing program 2: openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 293.232813][T13474] fuse: Bad value for 'fd' [ 293.266621][T13494] fuse: Bad value for 'fd' [ 293.299887][T13494] fuse: Bad value for 'fd' 09:34:39 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xc8}, 0x1c) socket$inet6(0xa, 0x80003, 0x80) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ioctl(r1, 0xe0, &(0x7f0000000100)="0805b5055e0bcfe84740719309ce0b925e114f8cb4219c426b805658e95d78fc0dc7d9183f80c002f67c6b1ae086be4c8515331afb7ac9f072aa8a77f187e8df127929fed7637779de564b288cf8345da1640097f6c69d65d354f0601eb65ed7c56022030000006ef130d8c05e3324328c14e3440d6701c92abc148d84a386107cb4646011ac0507f30e9ff5d3c535f6d161f8218a4c042d9cbed79d16b28b7b04581328ff3e") bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81004e22a31b00000028925aa80020007b00090080000efffeffe809000000ff0000f03ac710c8000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x1, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x80010, r3, 0xa000) r4 = socket(0x10, 0x4000000000000002, 0xc) write(r4, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000100)={0x4, 0x7, 0x2, 0x2000, &(0x7f0000018000/0x2000)=nil}) 09:34:39 executing program 2: openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:34:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x80000080045017, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000040)) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000071, 0x4) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x104fc5) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x80000080045017, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000000)=0x7) uname(0x0) ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000000580)={0x0, 0x0, 0x2080}) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007bd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f0000000300)='\f', 0xc3f2, 0x11, 0x0, 0x0) 09:34:39 executing program 2: creat(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 09:34:39 executing program 4: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r4 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB="f6d040b04b59c1080420ce79a2e2b3994c97b85d4fa9b26a74821f722687526491cc51067444475b3fbd777463f6189dba679cec43bcdeb9a8321d07b76ce392a565aa1357587cffb5c0bc4e9f36ea4092a8e4ec4f4f3eede465e04d810c4eccfb42fe2485c5b828787fed2649086f276010068f6aa1d799ac9bd11bba04ce8e2de0d596a38c"]) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r7 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r12 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r12) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r13, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r14, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r12, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r14}}, 0x18) r15 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r15) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r16, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r16, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r17, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r15, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r17}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r12, @ANYRES32=r10, @ANYRES32=r15, @ANYRES32=r11, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r18 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r22 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r21, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r23}, 0x18, 0x0) r24 = getegid() r25 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r26 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r25, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r27}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r28}}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r4, r5, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r10, r18}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r19, r20, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r23, r24, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r27, r28, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r29 = socket(0x10, 0x4000000000000002, 0xc) write(r29, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000840)='/dev/rfkill\x00', 0x2000, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000880)='/dev/btrfs-control\x00', 0x541000, 0x0) r30 = socket(0x10, 0x4000000000000002, 0xc) write(r30, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r31 = socket(0x10, 0x4000000000000002, 0xc) write(r31, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) syz_open_dev$sndpcmc(&(0x7f00000008c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x800) r32 = getpid() sched_setattr(r32, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)) r33 = socket$nl_xfrm(0x10, 0x3, 0x6) r34 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r34, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r33, 0x0, r35) r36 = socket(0x10, 0x4000000000000002, 0xc) write(r36, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$md(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/md0\x00', 0x10002, 0x0) r37 = socket(0x10, 0x4000000000000002, 0xc) write(r37, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r39 = dup(r38) ioctl$PERF_EVENT_IOC_ENABLE(r39, 0x8912, 0x400200) r40 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r40, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r40, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r40, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r40, &(0x7f0000000080)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e11bf746b048e9a94b61db6b4c41bd5a5259e62506cda287b857aacc858a00a60f818b2292c594e6707bfab893045fca422a6c99f5f450f79c1d464019ba3855d48ab458d233ff1fe27afb17f", 0xffffffffffffff72, 0x2a0400d6, 0x0, 0xfffffecb) 09:34:39 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r4 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB="f6d040b04b59c1080420ce79a2e2b3994c97b85d4fa9b26a74821f722687526491cc51067444475b3fbd777463f6189dba679cec43bcdeb9a8321d07b76ce392a565aa1357587cffb5c0bc4e9f36ea4092a8e4ec4f4f3eede465e04d810c4eccfb42fe2485c5b828787fed2649086f276010068f6aa1d799ac9bd11bba04ce8e2de0d596a38c"]) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r7 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r12 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r12) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r13, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r14, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r12, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r14}}, 0x18) r15 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r15) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r16, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r16, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r17, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r15, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r17}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r12, @ANYRES32=r10, @ANYRES32=r15, @ANYRES32=r11, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r18 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r22 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r21, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r23}, 0x18, 0x0) r24 = getegid() r25 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r26 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r25, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r27}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r28}}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r4, r5, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r10, r18}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r19, r20, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r23, r24, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r27, r28, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r29 = socket(0x10, 0x4000000000000002, 0xc) write(r29, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000840)='/dev/rfkill\x00', 0x2000, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000880)='/dev/btrfs-control\x00', 0x541000, 0x0) r30 = socket(0x10, 0x4000000000000002, 0xc) write(r30, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r31 = socket(0x10, 0x4000000000000002, 0xc) write(r31, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) syz_open_dev$sndpcmc(&(0x7f00000008c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x800) r32 = getpid() sched_setattr(r32, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)) r33 = socket$nl_xfrm(0x10, 0x3, 0x6) r34 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r34, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r33, 0x0, r35) r36 = socket(0x10, 0x4000000000000002, 0xc) write(r36, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$md(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/md0\x00', 0x10002, 0x0) r37 = socket(0x10, 0x4000000000000002, 0xc) write(r37, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r38) r39 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r39, &(0x7f0000000300), 0x12) r40 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r40, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r40, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r40, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r40, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r40, &(0x7f0000000080)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e11bf746b048e9a94b61db6b4c41bd5a5259e62506cda287b857aacc858a00a60f818b2292c594e6707bfab893045fca422a6c99f5f450f79c1d464019ba3855d48ab458d233ff1fe27afb17f", 0xffffffffffffff72, 0x2a0400d6, 0x0, 0xfffffecb) 09:34:39 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c288000000000000000086f16000140000303a0000000000000000000200000000000000ff0200000000000000000000000000010100907800090400600000000000f7ff00000000000000000000fffffffffffc00000000000000000000ffffffffffff"], 0x0) r0 = socket(0x10, 0x4000000000000002, 0xc) write(r0, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r1 = semget$private(0x0, 0x2000000010a, 0x0) semop(r1, &(0x7f0000000100)=[{0x0, 0xfffffffffffefffc}], 0x1) semop(r1, &(0x7f0000000040)=[{0x0, 0x316f}, {0x0, 0xff}], 0x2) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r3 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r4}}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r6 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r7 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r7, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r9}, 0x18, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r11 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r11) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r12, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r13, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r11, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r13}}, 0x18) r14 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r14) r15 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r15, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r15, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r16, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r14, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r16}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r11, @ANYRES32=r9, @ANYRES32=r14, @ANYRES32=r10, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r17 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r20, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r22}, 0x18, 0x0) r23 = getegid() r24 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r25 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r24, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r26}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r27}}) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r3, r4, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r9, r17}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r18, r19, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r22, r23, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r26, r27, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) r28 = socket$nl_xfrm(0x10, 0x3, 0x6) r29 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r28, 0x0, r30) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r31}}) r32 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r32, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r32, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r32, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r33 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r34 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r34, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r33, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r35}, 0x18, 0x0) getsockopt$sock_cred(r32, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r36 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r36) r37 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r37, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r37, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r38, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) [ 293.822676][T13521] fuse: Bad value for 'fd' [ 293.835786][T13522] fuse: Bad value for 'fd' 09:34:39 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xc8}, 0x1c) socket$inet6(0xa, 0x80003, 0x80) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ioctl(r1, 0xe0, &(0x7f0000000100)="0805b5055e0bcfe84740719309ce0b925e114f8cb4219c426b805658e95d78fc0dc7d9183f80c002f67c6b1ae086be4c8515331afb7ac9f072aa8a77f187e8df127929fed7637779de564b288cf8345da1640097f6c69d65d354f0601eb65ed7c56022030000006ef130d8c05e3324328c14e3440d6701c92abc148d84a386107cb4646011ac0507f30e9ff5d3c535f6d161f8218a4c042d9cbed79d16b28b7b04581328ff3e") bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81004e22a31b00000028925aa80020007b00090080000efffeffe809000000ff0000f03ac710c8000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x1, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x80010, r3, 0xa000) r4 = socket(0x10, 0x4000000000000002, 0xc) write(r4, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000100)={0x4, 0x7, 0x2, 0x2000, &(0x7f0000018000/0x2000)=nil}) [ 293.905322][T13522] fuse: Bad value for 'fd' [ 293.967192][T13529] fuse: Bad value for 'fd' [ 294.125039][T13523] fuse: Bad value for 'fd' [ 294.140769][T13523] fuse: Bad value for 'fd' 09:34:40 executing program 5: mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3, 0x1b071, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000000c0)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\x8b\xaa\xffIb\x9e\xc1\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x1fffff, 0x0, 0x11, r0, 0x0) 09:34:40 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r4 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB="f6d040b04b59c1080420ce79a2e2b3994c97b85d4fa9b26a74821f722687526491cc51067444475b3fbd777463f6189dba679cec43bcdeb9a8321d07b76ce392a565aa1357587cffb5c0bc4e9f36ea4092a8e4ec4f4f3eede465e04d810c4eccfb42fe2485c5b828787fed2649086f276010068f6aa1d799ac9bd11bba04ce8e2de0d596a38c"]) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r7 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r12 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r12) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r13, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r14, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r12, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r14}}, 0x18) r15 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r15) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r16, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r16, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r17, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r15, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r17}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000009800f8000000000000000000000000000000000000000000000000006000534554000000000000000000000000000000000000000000000000000000001000000400000001000000ff000000f5f7feffffffffffffaf31000005f900000800000009000000040000000600000004000000000000800800000005000000e00000017f00000100000000ffffff0074756e6c300000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000020001100000000000000000000000000000d000f80000000000000000000000000000000000000000000000000038006f776e657200"/426, @ANYRES32=r12, @ANYRES32=r10, @ANYRES32=r15, @ANYRES32=r11, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r18 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r22 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r21, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r23}, 0x18, 0x0) r24 = getegid() r25 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r26 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r25, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r27}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r28}}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r4, r5, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r10, r18}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r19, r20, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r23, r24, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r27, r28, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r29 = socket(0x10, 0x4000000000000002, 0xc) write(r29, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000840)='/dev/rfkill\x00', 0x2000, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000880)='/dev/btrfs-control\x00', 0x541000, 0x0) r30 = socket(0x10, 0x4000000000000002, 0xc) write(r30, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r31 = socket(0x10, 0x4000000000000002, 0xc) write(r31, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) syz_open_dev$sndpcmc(&(0x7f00000008c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x800) r32 = getpid() sched_setattr(r32, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)) r33 = socket$nl_xfrm(0x10, 0x3, 0x6) r34 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r34, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r33, 0x0, r35) r36 = socket(0x10, 0x4000000000000002, 0xc) write(r36, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$md(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/md0\x00', 0x10002, 0x0) r37 = socket(0x10, 0x4000000000000002, 0xc) write(r37, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r38) r39 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r39, &(0x7f0000000300), 0x12) r40 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r40, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r40, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r40, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r40, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r40, &(0x7f0000000080)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e11bf746b048e9a94b61db6b4c41bd5a5259e62506cda287b857aacc858a00a60f818b2292c594e6707bfab893045fca422a6c99f5f450f79c1d464019ba3855d48ab458d233ff1fe27afb17f", 0xffffffffffffff72, 0x2a0400d6, 0x0, 0xfffffecb) 09:34:40 executing program 4: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r4 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB="f6d040b04b59c1080420ce79a2e2b3994c97b85d4fa9b26a74821f722687526491cc51067444475b3fbd777463f6189dba679cec43bcdeb9a8321d07b76ce392a565aa1357587cffb5c0bc4e9f36ea4092a8e4ec4f4f3eede465e04d810c4eccfb42fe2485c5b828787fed2649086f276010068f6aa1d799ac9bd11bba04ce8e2de0d596a38c"]) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r7 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r12 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r12) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r13, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r14, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r12, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r14}}, 0x18) r15 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r15) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r16, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r16, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r17, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r15, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r17}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r12, @ANYRES32=r10, @ANYRES32=r15, @ANYRES32=r11, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r18 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r22 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r21, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r23}, 0x18, 0x0) r24 = getegid() r25 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r26 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r25, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r27}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r28}}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r4, r5, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r10, r18}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r19, r20, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r23, r24, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r27, r28, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r29 = socket(0x10, 0x4000000000000002, 0xc) write(r29, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000840)='/dev/rfkill\x00', 0x2000, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000880)='/dev/btrfs-control\x00', 0x541000, 0x0) r30 = socket(0x10, 0x4000000000000002, 0xc) write(r30, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r31 = socket(0x10, 0x4000000000000002, 0xc) write(r31, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) syz_open_dev$sndpcmc(&(0x7f00000008c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x800) r32 = getpid() sched_setattr(r32, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)) r33 = socket$nl_xfrm(0x10, 0x3, 0x6) r34 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r34, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r33, 0x0, r35) r36 = socket(0x10, 0x4000000000000002, 0xc) write(r36, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$md(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/md0\x00', 0x10002, 0x0) r37 = socket(0x10, 0x4000000000000002, 0xc) write(r37, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r38) r39 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r39, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r39, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r39, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r39, &(0x7f0000000080)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e11bf746b048e9a94b61db6b4c41bd5a5259e62506cda287b857aacc858a00a60f818b2292c594e6707bfab893045fca422a6c99f5f450f79c1d464019ba3855d48ab458d233ff1fe27afb17f", 0xffffffffffffff72, 0x2a0400d6, 0x0, 0xfffffecb) 09:34:40 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xc8}, 0x1c) socket$inet6(0xa, 0x80003, 0x80) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ioctl(r1, 0xe0, &(0x7f0000000100)="0805b5055e0bcfe84740719309ce0b925e114f8cb4219c426b805658e95d78fc0dc7d9183f80c002f67c6b1ae086be4c8515331afb7ac9f072aa8a77f187e8df127929fed7637779de564b288cf8345da1640097f6c69d65d354f0601eb65ed7c56022030000006ef130d8c05e3324328c14e3440d6701c92abc148d84a386107cb4646011ac0507f30e9ff5d3c535f6d161f8218a4c042d9cbed79d16b28b7b04581328ff3e") bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81004e22a31b00000028925aa80020007b00090080000efffeffe809000000ff0000f03ac710c8000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x1, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x80010, r3, 0xa000) r4 = socket(0x10, 0x4000000000000002, 0xc) write(r4, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000100)={0x4, 0x7, 0x2, 0x2000, &(0x7f0000018000/0x2000)=nil}) 09:34:40 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c288000000000000000086f16000140000303a0000000000000000000200000000000000ff0200000000000000000000000000010100907800090400600000000000f7ff00000000000000000000fffffffffffc00000000000000000000ffffffffffff"], 0x0) r0 = socket(0x10, 0x4000000000000002, 0xc) write(r0, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r1 = semget$private(0x0, 0x2000000010a, 0x0) semop(r1, &(0x7f0000000100)=[{0x0, 0xfffffffffffefffc}], 0x1) semop(r1, &(0x7f0000000040)=[{0x0, 0x316f}, {0x0, 0xff}], 0x2) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r3 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r4}}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r6 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r7 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r7, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r9}, 0x18, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r11 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r11) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r12, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r13, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r11, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r13}}, 0x18) r14 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r14) r15 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r15, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r15, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r16, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r14, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r16}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r11, @ANYRES32=r9, @ANYRES32=r14, @ANYRES32=r10, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r17 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r20, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r22}, 0x18, 0x0) r23 = getegid() r24 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r25 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r24, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r26}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r27}}) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r3, r4, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r9, r17}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r18, r19, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r22, r23, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r26, r27, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) r28 = socket$nl_xfrm(0x10, 0x3, 0x6) r29 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r28, 0x0, r30) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r31}}) r32 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r32, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r32, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r32, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r33 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r34 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r34, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r33, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r35}, 0x18, 0x0) getsockopt$sock_cred(r32, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r36 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r36) r37 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r37, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) [ 294.666636][T13548] fuse: Bad value for 'fd' [ 294.718757][T13552] fuse: Bad value for 'fd' 09:34:40 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}}, @in={0x2, 0x0, @remote}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) [ 294.740347][T13548] fuse: Bad value for 'fd' 09:34:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xffffffffffffff77, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000002c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 294.846438][T13552] fuse: Bad value for 'fd' 09:34:40 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}}, @in={0x2, 0x0, @remote}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) 09:34:41 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}}, @in={0x2, 0x0, @remote}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) [ 295.036523][T13578] fuse: Bad value for 'fd' 09:34:41 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xc8}, 0x1c) socket$inet6(0xa, 0x80003, 0x80) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ioctl(r1, 0xe0, &(0x7f0000000100)="0805b5055e0bcfe84740719309ce0b925e114f8cb4219c426b805658e95d78fc0dc7d9183f80c002f67c6b1ae086be4c8515331afb7ac9f072aa8a77f187e8df127929fed7637779de564b288cf8345da1640097f6c69d65d354f0601eb65ed7c56022030000006ef130d8c05e3324328c14e3440d6701c92abc148d84a386107cb4646011ac0507f30e9ff5d3c535f6d161f8218a4c042d9cbed79d16b28b7b04581328ff3e") bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81004e22a31b00000028925aa80020007b00090080000efffeffe809000000ff0000f03ac710c8000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x1, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x80010, r3, 0xa000) r4 = socket(0x10, 0x4000000000000002, 0xc) write(r4, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000100)={0x4, 0x7, 0x2, 0x2000, &(0x7f0000018000/0x2000)=nil}) [ 295.068681][T13565] fuse: Bad value for 'fd' 09:34:41 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r4 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB="f6d040b04b59c1080420ce79a2e2b3994c97b85d4fa9b26a74821f722687526491cc51067444475b3fbd777463f6189dba679cec43bcdeb9a8321d07b76ce392a565aa1357587cffb5c0bc4e9f36ea4092a8e4ec4f4f3eede465e04d810c4eccfb42fe2485c5b828787fed2649086f276010068f6aa1d799ac9bd11bba04ce8e2de0d596a38c"]) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r7 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r12 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r12) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r13, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r14, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r12, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r14}}, 0x18) r15 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r15) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r16, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r16, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r17, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r15, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r17}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r12, @ANYRES32=r10, @ANYRES32=r15, @ANYRES32=r11, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r18 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r22 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r21, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r23}, 0x18, 0x0) r24 = getegid() r25 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r26 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r25, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r27}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r28}}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r4, r5, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r10, r18}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r19, r20, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r23, r24, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r27, r28, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r29 = socket(0x10, 0x4000000000000002, 0xc) write(r29, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000840)='/dev/rfkill\x00', 0x2000, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000880)='/dev/btrfs-control\x00', 0x541000, 0x0) r30 = socket(0x10, 0x4000000000000002, 0xc) write(r30, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r31 = socket(0x10, 0x4000000000000002, 0xc) write(r31, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) syz_open_dev$sndpcmc(&(0x7f00000008c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x800) r32 = getpid() sched_setattr(r32, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)) r33 = socket$nl_xfrm(0x10, 0x3, 0x6) r34 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r34, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r33, 0x0, r35) r36 = socket(0x10, 0x4000000000000002, 0xc) write(r36, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$md(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/md0\x00', 0x10002, 0x0) r37 = socket(0x10, 0x4000000000000002, 0xc) write(r37, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r38) r39 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r39, &(0x7f0000000300), 0x12) r40 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r40, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r40, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r40, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r40, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r40, &(0x7f0000000080)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e11bf746b048e9a94b61db6b4c41bd5a5259e62506cda287b857aacc858a00a60f818b2292c594e6707bfab893045fca422a6c99f5f450f79c1d464019ba3855d48ab458d233ff1fe27afb17f", 0xffffffffffffff72, 0x2a0400d6, 0x0, 0xfffffecb) 09:34:41 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}}, @in={0x2, 0x0, @remote}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) [ 295.260826][T13594] fuse: Bad value for 'fd' 09:34:41 executing program 4: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r4 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB="f6d040b04b59c1080420ce79a2e2b3994c97b85d4fa9b26a74821f722687526491cc51067444475b3fbd777463f6189dba679cec43bcdeb9a8321d07b76ce392a565aa1357587cffb5c0bc4e9f36ea4092a8e4ec4f4f3eede465e04d810c4eccfb42fe2485c5b828787fed2649086f276010068f6aa1d799ac9bd11bba04ce8e2de0d596a38c"]) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r7 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r12 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r12) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r13, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r14, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r12, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r14}}, 0x18) r15 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r15) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r16, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r16, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r17, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r15, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r17}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r12, @ANYRES32=r10, @ANYRES32=r15, @ANYRES32=r11, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r18 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r22 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r21, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r23}, 0x18, 0x0) r24 = getegid() r25 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r26 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r25, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r27}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r28}}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r4, r5, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r10, r18}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r19, r20, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r23, r24, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r27, r28, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r29 = socket(0x10, 0x4000000000000002, 0xc) write(r29, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000840)='/dev/rfkill\x00', 0x2000, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000880)='/dev/btrfs-control\x00', 0x541000, 0x0) r30 = socket(0x10, 0x4000000000000002, 0xc) write(r30, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r31 = socket(0x10, 0x4000000000000002, 0xc) write(r31, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) syz_open_dev$sndpcmc(&(0x7f00000008c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x800) r32 = getpid() sched_setattr(r32, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)) r33 = socket$nl_xfrm(0x10, 0x3, 0x6) r34 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r34, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r33, 0x0, r35) r36 = socket(0x10, 0x4000000000000002, 0xc) write(r36, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$md(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/md0\x00', 0x10002, 0x0) r37 = socket(0x10, 0x4000000000000002, 0xc) write(r37, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r38) r39 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r39, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r39, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r39, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r39, &(0x7f0000000080)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e11bf746b048e9a94b61db6b4c41bd5a5259e62506cda287b857aacc858a00a60f818b2292c594e6707bfab893045fca422a6c99f5f450f79c1d464019ba3855d48ab458d233ff1fe27afb17f", 0xffffffffffffff72, 0x2a0400d6, 0x0, 0xfffffecb) 09:34:41 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c288000000000000000086f16000140000303a0000000000000000000200000000000000ff0200000000000000000000000000010100907800090400600000000000f7ff00000000000000000000fffffffffffc00000000000000000000ffffffffffff"], 0x0) r0 = socket(0x10, 0x4000000000000002, 0xc) write(r0, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r1 = semget$private(0x0, 0x2000000010a, 0x0) semop(r1, &(0x7f0000000100)=[{0x0, 0xfffffffffffefffc}], 0x1) semop(r1, &(0x7f0000000040)=[{0x0, 0x316f}, {0x0, 0xff}], 0x2) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r3 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r4}}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r6 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r7 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r7, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r9}, 0x18, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r11 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r11) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r12, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r13, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r11, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r13}}, 0x18) r14 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r14) r15 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r15, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r15, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r16, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r14, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r16}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r11, @ANYRES32=r9, @ANYRES32=r14, @ANYRES32=r10, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r17 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r20, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r22}, 0x18, 0x0) r23 = getegid() r24 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r25 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r24, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r26}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r27}}) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r3, r4, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r9, r17}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r18, r19, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r22, r23, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r26, r27, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) r28 = socket$nl_xfrm(0x10, 0x3, 0x6) r29 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r28, 0x0, r30) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r31}}) r32 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r32, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r32, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r32, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r33 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r34 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r34, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r33, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r35}, 0x18, 0x0) getsockopt$sock_cred(r32, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r36 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r36) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 09:34:41 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xdc, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff085a4a0c3bc30001800000000a01fe8800000000a2cd9700"/40], 0x2c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000080)="2400000022001f02", 0xffffff6d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) [ 295.399735][T13594] fuse: Bad value for 'fd' 09:34:41 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x0, 0xfeedcafe]}}) [ 295.479982][T13602] fuse: Bad value for 'fd' 09:34:41 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xc8}, 0x1c) socket$inet6(0xa, 0x80003, 0x80) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ioctl(r1, 0xe0, &(0x7f0000000100)="0805b5055e0bcfe84740719309ce0b925e114f8cb4219c426b805658e95d78fc0dc7d9183f80c002f67c6b1ae086be4c8515331afb7ac9f072aa8a77f187e8df127929fed7637779de564b288cf8345da1640097f6c69d65d354f0601eb65ed7c56022030000006ef130d8c05e3324328c14e3440d6701c92abc148d84a386107cb4646011ac0507f30e9ff5d3c535f6d161f8218a4c042d9cbed79d16b28b7b04581328ff3e") bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81004e22a31b00000028925aa80020007b00090080000efffeffe809000000ff0000f03ac710c8000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x1, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x80010, r3, 0xa000) r4 = socket(0x10, 0x4000000000000002, 0xc) write(r4, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000100)={0x4, 0x7, 0x2, 0x2000, &(0x7f0000018000/0x2000)=nil}) [ 295.613884][T13602] fuse: Bad value for 'fd' [ 295.679445][T13608] fuse: Bad value for 'fd' [ 295.709926][T13608] fuse: Bad value for 'fd' 09:34:41 executing program 5: syz_emit_ethernet(0x60, &(0x7f0000001040)={@link_local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x2a, 0x3a, 0x86ddffff, @remote={0xfe, 0x80, [0x3, 0x543, 0x700, 0x5, 0x50000000000000d, 0x8848000000f0ffff], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@ndisc_redir={0x89, 0x0, 0x0, [], @empty, @empty, [{}]}}}}}}, 0x0) 09:34:41 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r4 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB="f6d040b04b59c1080420ce79a2e2b3994c97b85d4fa9b26a74821f722687526491cc51067444475b3fbd777463f6189dba679cec43bcdeb9a8321d07b76ce392a565aa1357587cffb5c0bc4e9f36ea4092a8e4ec4f4f3eede465e04d810c4eccfb42fe2485c5b828787fed2649086f276010068f6aa1d799ac9bd11bba04ce8e2de0d596a38c"]) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r7 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r12 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r12) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r13, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r14, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r12, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r14}}, 0x18) r15 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r15) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r16, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r16, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r17, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r15, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r17}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r12, @ANYRES32=r10, @ANYRES32=r15, @ANYRES32=r11, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r18 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r22 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r21, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r23}, 0x18, 0x0) r24 = getegid() r25 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r26 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r25, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r27}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r28}}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r4, r5, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r10, r18}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r19, r20, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r23, r24, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r27, r28, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r29 = socket(0x10, 0x4000000000000002, 0xc) write(r29, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000840)='/dev/rfkill\x00', 0x2000, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000880)='/dev/btrfs-control\x00', 0x541000, 0x0) r30 = socket(0x10, 0x4000000000000002, 0xc) write(r30, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r31 = socket(0x10, 0x4000000000000002, 0xc) write(r31, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) syz_open_dev$sndpcmc(&(0x7f00000008c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x800) r32 = getpid() sched_setattr(r32, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)) r33 = socket$nl_xfrm(0x10, 0x3, 0x6) r34 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r34, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r33, 0x0, r35) r36 = socket(0x10, 0x4000000000000002, 0xc) write(r36, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$md(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/md0\x00', 0x10002, 0x0) r37 = socket(0x10, 0x4000000000000002, 0xc) write(r37, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r38 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r38, &(0x7f0000000300), 0x12) r39 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r39, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r39, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r39, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r39, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r39, &(0x7f0000000080)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e11bf746b048e9a94b61db6b4c41bd5a5259e62506cda287b857aacc858a00a60f818b2292c594e6707bfab893045fca422a6c99f5f450f79c1d464019ba3855d48ab458d233ff1fe27afb17f", 0xffffffffffffff72, 0x2a0400d6, 0x0, 0xfffffecb) 09:34:41 executing program 4: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r4 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB="f6d040b04b59c1080420ce79a2e2b3994c97b85d4fa9b26a74821f722687526491cc51067444475b3fbd777463f6189dba679cec43bcdeb9a8321d07b76ce392a565aa1357587cffb5c0bc4e9f36ea4092a8e4ec4f4f3eede465e04d810c4eccfb42fe2485c5b828787fed2649086f276010068f6aa1d799ac9bd11bba04ce8e2de0d596a38c"]) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r7 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r12 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r12) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r13, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r14, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r12, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r14}}, 0x18) r15 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r15) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r16, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r16, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r17, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r15, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r17}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r12, @ANYRES32=r10, @ANYRES32=r15, @ANYRES32=r11, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r18 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r22 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r21, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r23}, 0x18, 0x0) r24 = getegid() r25 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r26 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r25, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r27}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r28}}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r4, r5, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r10, r18}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r19, r20, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r23, r24, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r27, r28, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r29 = socket(0x10, 0x4000000000000002, 0xc) write(r29, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000840)='/dev/rfkill\x00', 0x2000, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000880)='/dev/btrfs-control\x00', 0x541000, 0x0) r30 = socket(0x10, 0x4000000000000002, 0xc) write(r30, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r31 = socket(0x10, 0x4000000000000002, 0xc) write(r31, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) syz_open_dev$sndpcmc(&(0x7f00000008c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x800) r32 = getpid() sched_setattr(r32, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)) r33 = socket$nl_xfrm(0x10, 0x3, 0x6) r34 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r34, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r33, 0x0, r35) r36 = socket(0x10, 0x4000000000000002, 0xc) write(r36, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$md(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/md0\x00', 0x10002, 0x0) r37 = socket(0x10, 0x4000000000000002, 0xc) write(r37, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r38) r39 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r39, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r39, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r39, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r39, &(0x7f0000000080)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e11bf746b048e9a94b61db6b4c41bd5a5259e62506cda287b857aacc858a00a60f818b2292c594e6707bfab893045fca422a6c99f5f450f79c1d464019ba3855d48ab458d233ff1fe27afb17f", 0xffffffffffffff72, 0x2a0400d6, 0x0, 0xfffffecb) 09:34:42 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c288000000000000000086f16000140000303a0000000000000000000200000000000000ff0200000000000000000000000000010100907800090400600000000000f7ff00000000000000000000fffffffffffc00000000000000000000ffffffffffff"], 0x0) r0 = socket(0x10, 0x4000000000000002, 0xc) write(r0, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r1 = semget$private(0x0, 0x2000000010a, 0x0) semop(r1, &(0x7f0000000100)=[{0x0, 0xfffffffffffefffc}], 0x1) semop(r1, &(0x7f0000000040)=[{0x0, 0x316f}, {0x0, 0xff}], 0x2) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r3 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r4}}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r6 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r7 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r7, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r9}, 0x18, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r11 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r11) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r12, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r13, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r11, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r13}}, 0x18) r14 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r14) r15 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r15, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r15, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r16, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r14, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r16}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r11, @ANYRES32=r9, @ANYRES32=r14, @ANYRES32=r10, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r17 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r20, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r22}, 0x18, 0x0) r23 = getegid() r24 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r25 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r24, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r26}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r27}}) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r3, r4, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r9, r17}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r18, r19, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r22, r23, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r26, r27, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) r28 = socket$nl_xfrm(0x10, 0x3, 0x6) r29 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r28, 0x0, r30) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r31}}) r32 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r32, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r32, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r32, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r33 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r34 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r34, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r33, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r35}, 0x18, 0x0) getsockopt$sock_cred(r32, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r36 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r36) [ 296.039210][T13631] fuse: Bad value for 'fd' 09:34:42 executing program 5: eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff800000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 09:34:42 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xc8}, 0x1c) socket$inet6(0xa, 0x80003, 0x80) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ioctl(r1, 0xe0, &(0x7f0000000100)="0805b5055e0bcfe84740719309ce0b925e114f8cb4219c426b805658e95d78fc0dc7d9183f80c002f67c6b1ae086be4c8515331afb7ac9f072aa8a77f187e8df127929fed7637779de564b288cf8345da1640097f6c69d65d354f0601eb65ed7c56022030000006ef130d8c05e3324328c14e3440d6701c92abc148d84a386107cb4646011ac0507f30e9ff5d3c535f6d161f8218a4c042d9cbed79d16b28b7b04581328ff3e") bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81004e22a31b00000028925aa80020007b00090080000efffeffe809000000ff0000f03ac710c8000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x1, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x80010, r3, 0xa000) r4 = socket(0x10, 0x4000000000000002, 0xc) write(r4, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000100)={0x4, 0x7, 0x2, 0x2000, &(0x7f0000018000/0x2000)=nil}) [ 296.090901][T13634] fuse: Bad value for 'fd' [ 296.198626][T13634] fuse: Bad value for 'fd' [ 296.234896][T13631] fuse: Bad value for 'fd' [ 296.255976][T13641] fuse: Bad value for 'fd' [ 296.263928][T13641] fuse: Bad value for 'fd' 09:34:42 executing program 5: eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff800000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 09:34:42 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c288000000000000000086f16000140000303a0000000000000000000200000000000000ff0200000000000000000000000000010100907800090400600000000000f7ff00000000000000000000fffffffffffc00000000000000000000ffffffffffff"], 0x0) r0 = socket(0x10, 0x4000000000000002, 0xc) write(r0, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r1 = semget$private(0x0, 0x2000000010a, 0x0) semop(r1, &(0x7f0000000100)=[{0x0, 0xfffffffffffefffc}], 0x1) semop(r1, &(0x7f0000000040)=[{0x0, 0x316f}, {0x0, 0xff}], 0x2) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r3 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r4}}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r6 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r7 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r7, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r9}, 0x18, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r11 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r11) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r12, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r13, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r11, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r13}}, 0x18) r14 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r14) r15 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r15, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r15, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r16, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r14, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r16}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r11, @ANYRES32=r9, @ANYRES32=r14, @ANYRES32=r10, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r17 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r20, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r22}, 0x18, 0x0) r23 = getegid() r24 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r25 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r24, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r26}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r27}}) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r3, r4, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r9, r17}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r18, r19, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r22, r23, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r26, r27, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) r28 = socket$nl_xfrm(0x10, 0x3, 0x6) r29 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r28, 0x0, r30) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r31}}) r32 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r32, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r32, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r32, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r33 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r34 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r34, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r33, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r35}, 0x18, 0x0) getsockopt$sock_cred(r32, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) creat(&(0x7f0000000280)='./file0\x00', 0x0) 09:34:42 executing program 5: eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff800000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 09:34:42 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xdc, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff085a4a0c3bc30001800000000a01fe8800000000a2cd9700"/40], 0x2c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000080)="2400000022001f02", 0xffffff6d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) 09:34:42 executing program 4: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r4 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB="f6d040b04b59c1080420ce79a2e2b3994c97b85d4fa9b26a74821f722687526491cc51067444475b3fbd777463f6189dba679cec43bcdeb9a8321d07b76ce392a565aa1357587cffb5c0bc4e9f36ea4092a8e4ec4f4f3eede465e04d810c4eccfb42fe2485c5b828787fed2649086f276010068f6aa1d799ac9bd11bba04ce8e2de0d596a38c"]) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r7 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r12 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r12) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r13, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r14, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r12, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r14}}, 0x18) r15 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r15) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r16, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r16, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r17, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r15, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r17}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r12, @ANYRES32=r10, @ANYRES32=r15, @ANYRES32=r11, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r18 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r22 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r21, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r23}, 0x18, 0x0) r24 = getegid() r25 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r26 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r25, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r27}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r28}}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r4, r5, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r10, r18}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r19, r20, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r23, r24, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r27, r28, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r29 = socket(0x10, 0x4000000000000002, 0xc) write(r29, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000840)='/dev/rfkill\x00', 0x2000, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000880)='/dev/btrfs-control\x00', 0x541000, 0x0) r30 = socket(0x10, 0x4000000000000002, 0xc) write(r30, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r31 = socket(0x10, 0x4000000000000002, 0xc) write(r31, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) syz_open_dev$sndpcmc(&(0x7f00000008c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x800) r32 = getpid() sched_setattr(r32, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)) r33 = socket$nl_xfrm(0x10, 0x3, 0x6) r34 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r34, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r33, 0x0, r35) r36 = socket(0x10, 0x4000000000000002, 0xc) write(r36, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$md(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/md0\x00', 0x10002, 0x0) r37 = socket(0x10, 0x4000000000000002, 0xc) write(r37, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r38 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r38, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r38, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r38, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r38, &(0x7f0000000080)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e11bf746b048e9a94b61db6b4c41bd5a5259e62506cda287b857aacc858a00a60f818b2292c594e6707bfab893045fca422a6c99f5f450f79c1d464019ba3855d48ab458d233ff1fe27afb17f", 0xffffffffffffff72, 0x2a0400d6, 0x0, 0xfffffecb) [ 296.700810][T13664] fuse: Bad value for 'fd' [ 296.714173][T13664] fuse: Bad value for 'fd' 09:34:42 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r4 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB="f6d040b04b59c1080420ce79a2e2b3994c97b85d4fa9b26a74821f722687526491cc51067444475b3fbd777463f6189dba679cec43bcdeb9a8321d07b76ce392a565aa1357587cffb5c0bc4e9f36ea4092a8e4ec4f4f3eede465e04d810c4eccfb42fe2485c5b828787fed2649086f276010068f6aa1d799ac9bd11bba04ce8e2de0d596a38c"]) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r7 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r12 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r12) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r13, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r14, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r12, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r14}}, 0x18) r15 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r15) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r16, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r16, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r17, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r15, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r17}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r12, @ANYRES32=r10, @ANYRES32=r15, @ANYRES32=r11, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r18 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r22 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r21, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r23}, 0x18, 0x0) r24 = getegid() r25 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r26 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r25, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r27}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r28}}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r4, r5, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r10, r18}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r19, r20, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r23, r24, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r27, r28, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r29 = socket(0x10, 0x4000000000000002, 0xc) write(r29, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000840)='/dev/rfkill\x00', 0x2000, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000880)='/dev/btrfs-control\x00', 0x541000, 0x0) r30 = socket(0x10, 0x4000000000000002, 0xc) write(r30, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r31 = socket(0x10, 0x4000000000000002, 0xc) write(r31, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) syz_open_dev$sndpcmc(&(0x7f00000008c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x800) r32 = getpid() sched_setattr(r32, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)) r33 = socket$nl_xfrm(0x10, 0x3, 0x6) r34 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r34, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r33, 0x0, r35) r36 = socket(0x10, 0x4000000000000002, 0xc) write(r36, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$md(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/md0\x00', 0x10002, 0x0) r37 = socket(0x10, 0x4000000000000002, 0xc) write(r37, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r38 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r38, &(0x7f0000000300), 0x12) r39 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r39, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r39, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r39, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r39, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r39, &(0x7f0000000080)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e11bf746b048e9a94b61db6b4c41bd5a5259e62506cda287b857aacc858a00a60f818b2292c594e6707bfab893045fca422a6c99f5f450f79c1d464019ba3855d48ab458d233ff1fe27afb17f", 0xffffffffffffff72, 0x2a0400d6, 0x0, 0xfffffecb) 09:34:42 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xc8}, 0x1c) socket$inet6(0xa, 0x80003, 0x80) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ioctl(r1, 0xe0, &(0x7f0000000100)="0805b5055e0bcfe84740719309ce0b925e114f8cb4219c426b805658e95d78fc0dc7d9183f80c002f67c6b1ae086be4c8515331afb7ac9f072aa8a77f187e8df127929fed7637779de564b288cf8345da1640097f6c69d65d354f0601eb65ed7c56022030000006ef130d8c05e3324328c14e3440d6701c92abc148d84a386107cb4646011ac0507f30e9ff5d3c535f6d161f8218a4c042d9cbed79d16b28b7b04581328ff3e") bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81004e22a31b00000028925aa80020007b00090080000efffeffe809000000ff0000f03ac710c8000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x1, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x80010, r3, 0xa000) socket(0x10, 0x4000000000000002, 0xc) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000100)={0x4, 0x7, 0x2, 0x2000, &(0x7f0000018000/0x2000)=nil}) 09:34:42 executing program 5: eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff800000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) [ 296.821841][T13676] fuse: Bad value for 'fd' [ 296.830289][T13677] fuse: Bad value for 'fd' [ 296.861050][T13676] fuse: Bad value for 'fd' 09:34:42 executing program 5: sysinfo(&(0x7f0000000000)=""/22) openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) timerfd_create(0x6, 0x800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x6, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f00000016c0)=0x6) r0 = syz_open_dev$sndpcmp(&(0x7f0000000300)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001580)=[{0x0}, {&(0x7f00000001c0)=""/5, 0x5}, {&(0x7f0000000380)=""/180, 0xb4}, {&(0x7f0000000440)=""/121, 0x79}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000002c0)}, {0x0}], 0x7}, 0x20) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000340)) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\xff\xff', @ifru_flags}) [ 296.893678][T13677] fuse: Bad value for 'fd' 09:34:43 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c288000000000000000086f16000140000303a0000000000000000000200000000000000ff0200000000000000000000000000010100907800090400600000000000f7ff00000000000000000000fffffffffffc00000000000000000000ffffffffffff"], 0x0) r0 = socket(0x10, 0x4000000000000002, 0xc) write(r0, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r1 = semget$private(0x0, 0x2000000010a, 0x0) semop(r1, &(0x7f0000000100)=[{0x0, 0xfffffffffffefffc}], 0x1) semop(r1, &(0x7f0000000040)=[{0x0, 0x316f}, {0x0, 0xff}], 0x2) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r3 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r4}}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r6 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r7 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r7, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r9}, 0x18, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r11 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r11) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r12, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r13, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r11, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r13}}, 0x18) r14 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r14) r15 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r15, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r15, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r16, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r14, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r16}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000009800f8000000000000000000000000000000000000000000000000006000534554000000000000000000000000000000000000000000000000000000001000000400000001000000ff000000f5f7feffffffffffffaf31000005f900000800000009000000040000000600000004000000000000800800000005000000e00000017f00000100000000ffffff0074756e6c300000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000020001100000000000000000000000000000d000f80000000000000000000000000000000000000000000000000038006f776e657200"/426, @ANYRES32=r11, @ANYRES32=r9, @ANYRES32=r14, @ANYRES32=r10, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r17 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r20, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r22}, 0x18, 0x0) r23 = getegid() r24 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r25 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r24, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r26}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r27}}) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r3, r4, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r9, r17}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r18, r19, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r22, r23, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r26, r27, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) r28 = socket$nl_xfrm(0x10, 0x3, 0x6) r29 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r28, 0x0, r30) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r31}}) r32 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r32, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r32, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r32, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r33 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r34 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r34, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r33, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r35}, 0x18, 0x0) getsockopt$sock_cred(r32, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) 09:34:43 executing program 4: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r4 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB="f6d040b04b59c1080420ce79a2e2b3994c97b85d4fa9b26a74821f722687526491cc51067444475b3fbd777463f6189dba679cec43bcdeb9a8321d07b76ce392a565aa1357587cffb5c0bc4e9f36ea4092a8e4ec4f4f3eede465e04d810c4eccfb42fe2485c5b828787fed2649086f276010068f6aa1d799ac9bd11bba04ce8e2de0d596a38c"]) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r7 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r12 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r12) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r13, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r14, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r12, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r14}}, 0x18) r15 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r15) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r16, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r16, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r17, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r15, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r17}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r12, @ANYRES32=r10, @ANYRES32=r15, @ANYRES32=r11, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r18 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r22 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r21, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r23}, 0x18, 0x0) r24 = getegid() r25 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r26 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r25, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r27}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r28}}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r4, r5, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r10, r18}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r19, r20, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r23, r24, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r27, r28, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r29 = socket(0x10, 0x4000000000000002, 0xc) write(r29, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000840)='/dev/rfkill\x00', 0x2000, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000880)='/dev/btrfs-control\x00', 0x541000, 0x0) r30 = socket(0x10, 0x4000000000000002, 0xc) write(r30, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r31 = socket(0x10, 0x4000000000000002, 0xc) write(r31, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) syz_open_dev$sndpcmc(&(0x7f00000008c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x800) r32 = getpid() sched_setattr(r32, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)) r33 = socket$nl_xfrm(0x10, 0x3, 0x6) r34 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r34, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r33, 0x0, r35) r36 = socket(0x10, 0x4000000000000002, 0xc) write(r36, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$md(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/md0\x00', 0x10002, 0x0) r37 = socket(0x10, 0x4000000000000002, 0xc) write(r37, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r38 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r38, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r38, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r38, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r38, &(0x7f0000000080)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e11bf746b048e9a94b61db6b4c41bd5a5259e62506cda287b857aacc858a00a60f818b2292c594e6707bfab893045fca422a6c99f5f450f79c1d464019ba3855d48ab458d233ff1fe27afb17f", 0xffffffffffffff72, 0x2a0400d6, 0x0, 0xfffffecb) 09:34:43 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xc8}, 0x1c) socket$inet6(0xa, 0x80003, 0x80) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ioctl(r1, 0xe0, &(0x7f0000000100)="0805b5055e0bcfe84740719309ce0b925e114f8cb4219c426b805658e95d78fc0dc7d9183f80c002f67c6b1ae086be4c8515331afb7ac9f072aa8a77f187e8df127929fed7637779de564b288cf8345da1640097f6c69d65d354f0601eb65ed7c56022030000006ef130d8c05e3324328c14e3440d6701c92abc148d84a386107cb4646011ac0507f30e9ff5d3c535f6d161f8218a4c042d9cbed79d16b28b7b04581328ff3e") bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81004e22a31b00000028925aa80020007b00090080000efffeffe809000000ff0000f03ac710c8000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x1, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x80010, r3, 0xa000) socket(0x10, 0x4000000000000002, 0xc) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000100)={0x4, 0x7, 0x2, 0x2000, &(0x7f0000018000/0x2000)=nil}) 09:34:43 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000015008104e00f80ecdb4cb92e0268022c14a002070400010050bb168e7948f328995a017c7b7351060000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 297.286541][T13692] fuse: Bad value for 'fd' 09:34:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r4}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000014000100000000000000000002000000", @ANYRES32=r4, @ANYBLOB="08000200e000000238489d4aff2c2461bf01a07ca92469a363a3ccfb6bdc43fcb38a5380c97b272039b15228849bd9545eaf370aa01a6c184a"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@ipv4_deladdr={0x34, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_LABEL={0x14, 0x3, 'veth1_to_team\x00'}]}, 0x34}}, 0x0) [ 297.308060][T13704] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 297.308991][T13702] fuse: Bad value for 'fd' [ 297.336814][T13693] fuse: Bad value for 'fd' [ 297.432149][T13702] fuse: Bad value for 'fd' 09:34:43 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r4 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB="f6d040b04b59c1080420ce79a2e2b3994c97b85d4fa9b26a74821f722687526491cc51067444475b3fbd777463f6189dba679cec43bcdeb9a8321d07b76ce392a565aa1357587cffb5c0bc4e9f36ea4092a8e4ec4f4f3eede465e04d810c4eccfb42fe2485c5b828787fed2649086f276010068f6aa1d799ac9bd11bba04ce8e2de0d596a38c"]) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r7 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r12 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r12) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r13, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r14, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r12, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r14}}, 0x18) r15 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r15) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r16, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r16, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r17, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r15, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r17}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r12, @ANYRES32=r10, @ANYRES32=r15, @ANYRES32=r11, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r18 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r22 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r21, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r23}, 0x18, 0x0) r24 = getegid() r25 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r26 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r25, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r27}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r28}}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r4, r5, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r10, r18}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r19, r20, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r23, r24, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r27, r28, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r29 = socket(0x10, 0x4000000000000002, 0xc) write(r29, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000840)='/dev/rfkill\x00', 0x2000, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000880)='/dev/btrfs-control\x00', 0x541000, 0x0) r30 = socket(0x10, 0x4000000000000002, 0xc) write(r30, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r31 = socket(0x10, 0x4000000000000002, 0xc) write(r31, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) syz_open_dev$sndpcmc(&(0x7f00000008c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x800) r32 = getpid() sched_setattr(r32, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)) r33 = socket$nl_xfrm(0x10, 0x3, 0x6) r34 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r34, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r33, 0x0, r35) r36 = socket(0x10, 0x4000000000000002, 0xc) write(r36, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$md(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/md0\x00', 0x10002, 0x0) r37 = socket(0x10, 0x4000000000000002, 0xc) write(r37, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r38 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r38, &(0x7f0000000300), 0x12) r39 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r39, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r39, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r39, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r39, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r39, &(0x7f0000000080)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e11bf746b048e9a94b61db6b4c41bd5a5259e62506cda287b857aacc858a00a60f818b2292c594e6707bfab893045fca422a6c99f5f450f79c1d464019ba3855d48ab458d233ff1fe27afb17f", 0xffffffffffffff72, 0x2a0400d6, 0x0, 0xfffffecb) [ 297.614635][T13717] fuse: Bad value for 'fd' [ 297.672494][T13717] fuse: Bad value for 'fd' 09:34:43 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xdc, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff085a4a0c3bc30001800000000a01fe8800000000a2cd9700"/40], 0x2c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000080)="2400000022001f02", 0xffffff6d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) 09:34:43 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c288000000000000000086f16000140000303a0000000000000000000200000000000000ff0200000000000000000000000000010100907800090400600000000000f7ff00000000000000000000fffffffffffc00000000000000000000ffffffffffff"], 0x0) r0 = socket(0x10, 0x4000000000000002, 0xc) write(r0, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r1 = semget$private(0x0, 0x2000000010a, 0x0) semop(r1, &(0x7f0000000100)=[{0x0, 0xfffffffffffefffc}], 0x1) semop(r1, &(0x7f0000000040)=[{0x0, 0x316f}, {0x0, 0xff}], 0x2) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r3 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r4}}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r6 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r7 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r7, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r9}, 0x18, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r11 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r11) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r12, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r13, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r11, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r13}}, 0x18) r14 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r14) r15 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r15, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r15, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r16, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r14, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r16}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r11, @ANYRES32=r9, @ANYRES32=r14, @ANYRES32=r10, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r17 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r20, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r22}, 0x18, 0x0) r23 = getegid() r24 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r25 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r24, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r26}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r27}}) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r3, r4, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r9, r17}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r18, r19, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r22, r23, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r26, r27, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) r28 = socket$nl_xfrm(0x10, 0x3, 0x6) r29 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r28, 0x0, r30) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r31}}) r32 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r32, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r32, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r32, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r33 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r34 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r34, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r33, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r35}, 0x18, 0x0) 09:34:43 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xc8}, 0x1c) socket$inet6(0xa, 0x80003, 0x80) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ioctl(r1, 0xe0, &(0x7f0000000100)="0805b5055e0bcfe84740719309ce0b925e114f8cb4219c426b805658e95d78fc0dc7d9183f80c002f67c6b1ae086be4c8515331afb7ac9f072aa8a77f187e8df127929fed7637779de564b288cf8345da1640097f6c69d65d354f0601eb65ed7c56022030000006ef130d8c05e3324328c14e3440d6701c92abc148d84a386107cb4646011ac0507f30e9ff5d3c535f6d161f8218a4c042d9cbed79d16b28b7b04581328ff3e") bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81004e22a31b00000028925aa80020007b00090080000efffeffe809000000ff0000f03ac710c8000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x1, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x80010, r3, 0xa000) socket(0x10, 0x4000000000000002, 0xc) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000100)={0x4, 0x7, 0x2, 0x2000, &(0x7f0000018000/0x2000)=nil}) 09:34:43 executing program 5: arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000000)) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 09:34:43 executing program 4: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r4 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB="f6d040b04b59c1080420ce79a2e2b3994c97b85d4fa9b26a74821f722687526491cc51067444475b3fbd777463f6189dba679cec43bcdeb9a8321d07b76ce392a565aa1357587cffb5c0bc4e9f36ea4092a8e4ec4f4f3eede465e04d810c4eccfb42fe2485c5b828787fed2649086f276010068f6aa1d799ac9bd11bba04ce8e2de0d596a38c"]) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r7 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r12 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r12) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r13, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r14, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r12, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r14}}, 0x18) r15 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r15) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r16, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r16, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r17, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r15, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r17}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r12, @ANYRES32=r10, @ANYRES32=r15, @ANYRES32=r11, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r18 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r22 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r21, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r23}, 0x18, 0x0) r24 = getegid() r25 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r26 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r25, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r27}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r28}}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r4, r5, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r10, r18}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r19, r20, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r23, r24, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r27, r28, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r29 = socket(0x10, 0x4000000000000002, 0xc) write(r29, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000840)='/dev/rfkill\x00', 0x2000, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000880)='/dev/btrfs-control\x00', 0x541000, 0x0) r30 = socket(0x10, 0x4000000000000002, 0xc) write(r30, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r31 = socket(0x10, 0x4000000000000002, 0xc) write(r31, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) syz_open_dev$sndpcmc(&(0x7f00000008c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x800) r32 = getpid() sched_setattr(r32, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)) r33 = socket$nl_xfrm(0x10, 0x3, 0x6) r34 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r34, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r33, 0x0, r35) r36 = socket(0x10, 0x4000000000000002, 0xc) write(r36, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$md(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/md0\x00', 0x10002, 0x0) r37 = socket(0x10, 0x4000000000000002, 0xc) write(r37, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r38 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r38, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r38, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r38, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r38, &(0x7f0000000080)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e11bf746b048e9a94b61db6b4c41bd5a5259e62506cda287b857aacc858a00a60f818b2292c594e6707bfab893045fca422a6c99f5f450f79c1d464019ba3855d48ab458d233ff1fe27afb17f", 0xffffffffffffff72, 0x2a0400d6, 0x0, 0xfffffecb) 09:34:43 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r4 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB="f6d040b04b59c1080420ce79a2e2b3994c97b85d4fa9b26a74821f722687526491cc51067444475b3fbd777463f6189dba679cec43bcdeb9a8321d07b76ce392a565aa1357587cffb5c0bc4e9f36ea4092a8e4ec4f4f3eede465e04d810c4eccfb42fe2485c5b828787fed2649086f276010068f6aa1d799ac9bd11bba04ce8e2de0d596a38c"]) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r7 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r12 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r12) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r13, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r14, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r12, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r14}}, 0x18) r15 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r15) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r16, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r16, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r17, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r15, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r17}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r12, @ANYRES32=r10, @ANYRES32=r15, @ANYRES32=r11, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r18 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r22 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r21, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r23}, 0x18, 0x0) r24 = getegid() r25 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r26 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r25, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r27}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r28}}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r4, r5, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r10, r18}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r19, r20, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r23, r24, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r27, r28, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r29 = socket(0x10, 0x4000000000000002, 0xc) write(r29, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000840)='/dev/rfkill\x00', 0x2000, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000880)='/dev/btrfs-control\x00', 0x541000, 0x0) r30 = socket(0x10, 0x4000000000000002, 0xc) write(r30, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r31 = socket(0x10, 0x4000000000000002, 0xc) write(r31, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) syz_open_dev$sndpcmc(&(0x7f00000008c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x800) r32 = getpid() sched_setattr(r32, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)) r33 = socket$nl_xfrm(0x10, 0x3, 0x6) r34 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r34, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r33, 0x0, r35) r36 = socket(0x10, 0x4000000000000002, 0xc) write(r36, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$md(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/md0\x00', 0x10002, 0x0) r37 = socket(0x10, 0x4000000000000002, 0xc) write(r37, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r38 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r38, 0x8912, 0x400200) r39 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r39, &(0x7f0000000300), 0x12) r40 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r40, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r40, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r40, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r40, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r40, &(0x7f0000000080)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e11bf746b048e9a94b61db6b4c41bd5a5259e62506cda287b857aacc858a00a60f818b2292c594e6707bfab893045fca422a6c99f5f450f79c1d464019ba3855d48ab458d233ff1fe27afb17f", 0xffffffffffffff72, 0x2a0400d6, 0x0, 0xfffffecb) [ 298.009821][T13734] fuse: Bad value for 'fd' [ 298.081027][T13737] fuse: Bad value for 'fd' 09:34:44 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xc8}, 0x1c) socket$inet6(0xa, 0x80003, 0x80) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ioctl(r1, 0xe0, &(0x7f0000000100)="0805b5055e0bcfe84740719309ce0b925e114f8cb4219c426b805658e95d78fc0dc7d9183f80c002f67c6b1ae086be4c8515331afb7ac9f072aa8a77f187e8df127929fed7637779de564b288cf8345da1640097f6c69d65d354f0601eb65ed7c56022030000006ef130d8c05e3324328c14e3440d6701c92abc148d84a386107cb4646011ac0507f30e9ff5d3c535f6d161f8218a4c042d9cbed79d16b28b7b04581328ff3e") bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81004e22a31b00000028925aa80020007b00090080000efffeffe809000000ff0000f03ac710c8000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x1, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x80010, r3, 0xa000) write(0xffffffffffffffff, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000100)={0x4, 0x7, 0x2, 0x2000, &(0x7f0000018000/0x2000)=nil}) [ 298.151362][T13734] fuse: Bad value for 'fd' [ 298.163802][T13737] fuse: Bad value for 'fd' [ 298.189208][T13735] fuse: Bad value for 'fd' [ 298.262136][T13735] fuse: Bad value for 'fd' 09:34:44 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xc8}, 0x1c) socket$inet6(0xa, 0x80003, 0x80) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ioctl(r1, 0xe0, &(0x7f0000000100)="0805b5055e0bcfe84740719309ce0b925e114f8cb4219c426b805658e95d78fc0dc7d9183f80c002f67c6b1ae086be4c8515331afb7ac9f072aa8a77f187e8df127929fed7637779de564b288cf8345da1640097f6c69d65d354f0601eb65ed7c56022030000006ef130d8c05e3324328c14e3440d6701c92abc148d84a386107cb4646011ac0507f30e9ff5d3c535f6d161f8218a4c042d9cbed79d16b28b7b04581328ff3e") bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81004e22a31b00000028925aa80020007b00090080000efffeffe809000000ff0000f03ac710c8000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x1, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x80010, r3, 0xa000) write(0xffffffffffffffff, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000100)={0x4, 0x7, 0x2, 0x2000, &(0x7f0000018000/0x2000)=nil}) 09:34:44 executing program 4: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r4 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB="f6d040b04b59c1080420ce79a2e2b3994c97b85d4fa9b26a74821f722687526491cc51067444475b3fbd777463f6189dba679cec43bcdeb9a8321d07b76ce392a565aa1357587cffb5c0bc4e9f36ea4092a8e4ec4f4f3eede465e04d810c4eccfb42fe2485c5b828787fed2649086f276010068f6aa1d799ac9bd11bba04ce8e2de0d596a38c"]) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r7 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r12 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r12) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r13, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r14, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r12, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r14}}, 0x18) r15 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r15) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r16, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r16, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r17, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r15, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r17}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000009800f8000000000000000000000000000000000000000000000000006000534554000000000000000000000000000000000000000000000000000000001000000400000001000000ff000000f5f7feffffffffffffaf31000005f900000800000009000000040000000600000004000000000000800800000005000000e00000017f00000100000000ffffff0074756e6c300000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000020001100000000000000000000000000000d000f80000000000000000000000000000000000000000000000000038006f776e657200"/426, @ANYRES32=r12, @ANYRES32=r10, @ANYRES32=r15, @ANYRES32=r11, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r18 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r22 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r21, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r23}, 0x18, 0x0) r24 = getegid() r25 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r26 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r25, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r27}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r28}}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r4, r5, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r10, r18}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r19, r20, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r23, r24, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r27, r28, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r29 = socket(0x10, 0x4000000000000002, 0xc) write(r29, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000840)='/dev/rfkill\x00', 0x2000, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000880)='/dev/btrfs-control\x00', 0x541000, 0x0) r30 = socket(0x10, 0x4000000000000002, 0xc) write(r30, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r31 = socket(0x10, 0x4000000000000002, 0xc) write(r31, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) syz_open_dev$sndpcmc(&(0x7f00000008c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x800) r32 = getpid() sched_setattr(r32, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)) r33 = socket$nl_xfrm(0x10, 0x3, 0x6) r34 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r34, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r33, 0x0, r35) r36 = socket(0x10, 0x4000000000000002, 0xc) write(r36, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$md(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/md0\x00', 0x10002, 0x0) r37 = socket(0x10, 0x4000000000000002, 0xc) write(r37, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r38 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r38, 0x8912, 0x400200) r39 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r39, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r39, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r39, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r39, &(0x7f0000000080)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e11bf746b048e9a94b61db6b4c41bd5a5259e62506cda287b857aacc858a00a60f818b2292c594e6707bfab893045fca422a6c99f5f450f79c1d464019ba3855d48ab458d233ff1fe27afb17f", 0xffffffffffffff72, 0x2a0400d6, 0x0, 0xfffffecb) 09:34:44 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r4 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB="f6d040b04b59c1080420ce79a2e2b3994c97b85d4fa9b26a74821f722687526491cc51067444475b3fbd777463f6189dba679cec43bcdeb9a8321d07b76ce392a565aa1357587cffb5c0bc4e9f36ea4092a8e4ec4f4f3eede465e04d810c4eccfb42fe2485c5b828787fed2649086f276010068f6aa1d799ac9bd11bba04ce8e2de0d596a38c"]) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r7 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r12 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r12) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r13, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r14, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r12, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r14}}, 0x18) r15 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r15) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r16, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r16, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r17, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r15, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r17}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000009800f8000000000000000000000000000000000000000000000000006000534554000000000000000000000000000000000000000000000000000000001000000400000001000000ff000000f5f7feffffffffffffaf31000005f900000800000009000000040000000600000004000000000000800800000005000000e00000017f00000100000000ffffff0074756e6c300000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000020001100000000000000000000000000000d000f80000000000000000000000000000000000000000000000000038006f776e657200"/426, @ANYRES32=r12, @ANYRES32=r10, @ANYRES32=r15, @ANYRES32=r11, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r18 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r22 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r21, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r23}, 0x18, 0x0) r24 = getegid() r25 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r26 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r25, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r27}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r28}}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r4, r5, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r10, r18}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r19, r20, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r23, r24, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r27, r28, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r29 = socket(0x10, 0x4000000000000002, 0xc) write(r29, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000840)='/dev/rfkill\x00', 0x2000, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000880)='/dev/btrfs-control\x00', 0x541000, 0x0) r30 = socket(0x10, 0x4000000000000002, 0xc) write(r30, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r31 = socket(0x10, 0x4000000000000002, 0xc) write(r31, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) syz_open_dev$sndpcmc(&(0x7f00000008c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x800) r32 = getpid() sched_setattr(r32, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)) r33 = socket$nl_xfrm(0x10, 0x3, 0x6) r34 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r34, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r33, 0x0, r35) r36 = socket(0x10, 0x4000000000000002, 0xc) write(r36, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$md(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/md0\x00', 0x10002, 0x0) r37 = socket(0x10, 0x4000000000000002, 0xc) write(r37, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r38 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r38, 0x8912, 0x400200) r39 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r39, &(0x7f0000000300), 0x12) r40 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r40, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r40, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r40, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r40, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r40, &(0x7f0000000080)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e11bf746b048e9a94b61db6b4c41bd5a5259e62506cda287b857aacc858a00a60f818b2292c594e6707bfab893045fca422a6c99f5f450f79c1d464019ba3855d48ab458d233ff1fe27afb17f", 0xffffffffffffff72, 0x2a0400d6, 0x0, 0xfffffecb) 09:34:44 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c288000000000000000086f16000140000303a0000000000000000000200000000000000ff0200000000000000000000000000010100907800090400600000000000f7ff00000000000000000000fffffffffffc00000000000000000000ffffffffffff"], 0x0) r0 = socket(0x10, 0x4000000000000002, 0xc) write(r0, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r1 = semget$private(0x0, 0x2000000010a, 0x0) semop(r1, &(0x7f0000000100)=[{0x0, 0xfffffffffffefffc}], 0x1) semop(r1, &(0x7f0000000040)=[{0x0, 0x316f}, {0x0, 0xff}], 0x2) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r3 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r4}}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r6 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r7 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r7, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r9}, 0x18, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r11 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r11) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r12, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r13, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r11, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r13}}, 0x18) r14 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r14) r15 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r15, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r15, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r16, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r14, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r16}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r11, @ANYRES32=r9, @ANYRES32=r14, @ANYRES32=r10, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r17 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r20, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r22}, 0x18, 0x0) r23 = getegid() r24 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r25 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r24, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r26}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r27}}) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r3, r4, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r9, r17}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r18, r19, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r22, r23, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r26, r27, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) r28 = socket$nl_xfrm(0x10, 0x3, 0x6) r29 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r28, 0x0, r30) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r31}}) r32 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r32, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r32, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r32, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r33 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r33, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) 09:34:44 executing program 5: arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000000)) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) [ 298.714199][T13766] fuse: Bad value for 'fd' [ 298.721900][T13765] fuse: Bad value for 'fd' [ 298.807359][T13766] fuse: Bad value for 'fd' [ 298.850492][T13765] fuse: Bad value for 'fd' [ 298.948899][T13770] fuse: Bad value for 'fd' [ 299.011414][T13777] fuse: Bad value for 'fd' 09:34:45 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xdc, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff085a4a0c3bc30001800000000a01fe8800000000a2cd9700"/40], 0x2c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000080)="2400000022001f02", 0xffffff6d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) 09:34:45 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xc8}, 0x1c) socket$inet6(0xa, 0x80003, 0x80) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ioctl(r1, 0xe0, &(0x7f0000000100)="0805b5055e0bcfe84740719309ce0b925e114f8cb4219c426b805658e95d78fc0dc7d9183f80c002f67c6b1ae086be4c8515331afb7ac9f072aa8a77f187e8df127929fed7637779de564b288cf8345da1640097f6c69d65d354f0601eb65ed7c56022030000006ef130d8c05e3324328c14e3440d6701c92abc148d84a386107cb4646011ac0507f30e9ff5d3c535f6d161f8218a4c042d9cbed79d16b28b7b04581328ff3e") bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81004e22a31b00000028925aa80020007b00090080000efffeffe809000000ff0000f03ac710c8000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000100)={0x4, 0x7, 0x2, 0x2000, &(0x7f0000018000/0x2000)=nil}) 09:34:45 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r4 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB="f6d040b04b59c1080420ce79a2e2b3994c97b85d4fa9b26a74821f722687526491cc51067444475b3fbd777463f6189dba679cec43bcdeb9a8321d07b76ce392a565aa1357587cffb5c0bc4e9f36ea4092a8e4ec4f4f3eede465e04d810c4eccfb42fe2485c5b828787fed2649086f276010068f6aa1d799ac9bd11bba04ce8e2de0d596a38c"]) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r7 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r12 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r12) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r13, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r14, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r12, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r14}}, 0x18) r15 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r15) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r16, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r16, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r17, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r15, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r17}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r12, @ANYRES32=r10, @ANYRES32=r15, @ANYRES32=r11, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r18 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r22 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r21, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r23}, 0x18, 0x0) r24 = getegid() r25 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r26 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r25, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r27}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r28}}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r4, r5, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r10, r18}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r19, r20, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r23, r24, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r27, r28, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r29 = socket(0x10, 0x4000000000000002, 0xc) write(r29, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000840)='/dev/rfkill\x00', 0x2000, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000880)='/dev/btrfs-control\x00', 0x541000, 0x0) r30 = socket(0x10, 0x4000000000000002, 0xc) write(r30, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r31 = socket(0x10, 0x4000000000000002, 0xc) write(r31, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) syz_open_dev$sndpcmc(&(0x7f00000008c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x800) r32 = getpid() sched_setattr(r32, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)) r33 = socket$nl_xfrm(0x10, 0x3, 0x6) r34 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r34, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r33, 0x0, r35) r36 = socket(0x10, 0x4000000000000002, 0xc) write(r36, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$md(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/md0\x00', 0x10002, 0x0) r37 = socket(0x10, 0x4000000000000002, 0xc) write(r37, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r38 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r38, 0x8912, 0x400200) r39 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r39, &(0x7f0000000300), 0x12) r40 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r40, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r40, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r40, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r40, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r40, &(0x7f0000000080)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e11bf746b048e9a94b61db6b4c41bd5a5259e62506cda287b857aacc858a00a60f818b2292c594e6707bfab893045fca422a6c99f5f450f79c1d464019ba3855d48ab458d233ff1fe27afb17f", 0xffffffffffffff72, 0x2a0400d6, 0x0, 0xfffffecb) 09:34:45 executing program 4: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r4 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB="f6d040b04b59c1080420ce79a2e2b3994c97b85d4fa9b26a74821f722687526491cc51067444475b3fbd777463f6189dba679cec43bcdeb9a8321d07b76ce392a565aa1357587cffb5c0bc4e9f36ea4092a8e4ec4f4f3eede465e04d810c4eccfb42fe2485c5b828787fed2649086f276010068f6aa1d799ac9bd11bba04ce8e2de0d596a38c"]) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r7 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r12 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r12) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r13, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r14, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r12, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r14}}, 0x18) r15 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r15) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r16, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r16, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r17, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r15, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r17}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r12, @ANYRES32=r10, @ANYRES32=r15, @ANYRES32=r11, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r18 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r22 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r21, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r23}, 0x18, 0x0) r24 = getegid() r25 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r26 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r25, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r27}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r28}}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r4, r5, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r10, r18}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r19, r20, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r23, r24, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r27, r28, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r29 = socket(0x10, 0x4000000000000002, 0xc) write(r29, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000840)='/dev/rfkill\x00', 0x2000, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000880)='/dev/btrfs-control\x00', 0x541000, 0x0) r30 = socket(0x10, 0x4000000000000002, 0xc) write(r30, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r31 = socket(0x10, 0x4000000000000002, 0xc) write(r31, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) syz_open_dev$sndpcmc(&(0x7f00000008c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x800) r32 = getpid() sched_setattr(r32, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)) r33 = socket$nl_xfrm(0x10, 0x3, 0x6) r34 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r34, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r33, 0x0, r35) r36 = socket(0x10, 0x4000000000000002, 0xc) write(r36, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$md(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/md0\x00', 0x10002, 0x0) r37 = socket(0x10, 0x4000000000000002, 0xc) write(r37, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r38 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r38, 0x8912, 0x400200) r39 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r39, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r39, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r39, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r39, &(0x7f0000000080)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e11bf746b048e9a94b61db6b4c41bd5a5259e62506cda287b857aacc858a00a60f818b2292c594e6707bfab893045fca422a6c99f5f450f79c1d464019ba3855d48ab458d233ff1fe27afb17f", 0xffffffffffffff72, 0x2a0400d6, 0x0, 0xfffffecb) 09:34:45 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c288000000000000000086f16000140000303a0000000000000000000200000000000000ff0200000000000000000000000000010100907800090400600000000000f7ff00000000000000000000fffffffffffc00000000000000000000ffffffffffff"], 0x0) r0 = socket(0x10, 0x4000000000000002, 0xc) write(r0, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r1 = semget$private(0x0, 0x2000000010a, 0x0) semop(r1, &(0x7f0000000100)=[{0x0, 0xfffffffffffefffc}], 0x1) semop(r1, &(0x7f0000000040)=[{0x0, 0x316f}, {0x0, 0xff}], 0x2) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r3 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r4}}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r6 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r7 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r7, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r9}, 0x18, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r11 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r11) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r12, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r13, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r11, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r13}}, 0x18) r14 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r14) r15 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r15, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r15, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r16, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r14, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r16}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000009800f8000000000000000000000000000000000000000000000000006000534554000000000000000000000000000000000000000000000000000000001000000400000001000000ff000000f5f7feffffffffffffaf31000005f900000800000009000000040000000600000004000000000000800800000005000000e00000017f00000100000000ffffff0074756e6c300000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000020001100000000000000000000000000000d000f80000000000000000000000000000000000000000000000000038006f776e657200"/426, @ANYRES32=r11, @ANYRES32=r9, @ANYRES32=r14, @ANYRES32=r10, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r17 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r20, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r22}, 0x18, 0x0) r23 = getegid() r24 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r25 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r24, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r26}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r27}}) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r3, r4, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r9, r17}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r18, r19, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r22, r23, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r26, r27, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) r28 = socket$nl_xfrm(0x10, 0x3, 0x6) r29 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r28, 0x0, r30) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r31}}) r32 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r32, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r32, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r32, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) [ 299.432362][T13795] fuse: Bad value for 'fd' [ 299.455900][T13792] fuse: Bad value for 'fd' [ 299.515499][T13800] fuse: Bad value for 'fd' [ 299.548214][T13789] fuse: Bad value for 'fd' 09:34:45 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xc8}, 0x1c) socket$inet6(0xa, 0x80003, 0x80) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ioctl(r1, 0xe0, &(0x7f0000000100)="0805b5055e0bcfe84740719309ce0b925e114f8cb4219c426b805658e95d78fc0dc7d9183f80c002f67c6b1ae086be4c8515331afb7ac9f072aa8a77f187e8df127929fed7637779de564b288cf8345da1640097f6c69d65d354f0601eb65ed7c56022030000006ef130d8c05e3324328c14e3440d6701c92abc148d84a386107cb4646011ac0507f30e9ff5d3c535f6d161f8218a4c042d9cbed79d16b28b7b04581328ff3e") bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81004e22a31b00000028925aa80020007b00090080000efffeffe809000000ff0000f03ac710c8000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000100)={0x4, 0x7, 0x2, 0x2000, &(0x7f0000018000/0x2000)=nil}) 09:34:45 executing program 5: arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000000)) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) [ 299.580225][T13792] fuse: Bad value for 'fd' [ 299.589380][T13789] fuse: Bad value for 'fd' 09:34:45 executing program 4: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r4 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB="f6d040b04b59c1080420ce79a2e2b3994c97b85d4fa9b26a74821f722687526491cc51067444475b3fbd777463f6189dba679cec43bcdeb9a8321d07b76ce392a565aa1357587cffb5c0bc4e9f36ea4092a8e4ec4f4f3eede465e04d810c4eccfb42fe2485c5b828787fed2649086f276010068f6aa1d799ac9bd11bba04ce8e2de0d596a38c"]) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r7 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r12 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r12) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r13, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r14, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r12, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r14}}, 0x18) r15 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r15) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r16, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r16, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r17, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r15, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r17}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r12, @ANYRES32=r10, @ANYRES32=r15, @ANYRES32=r11, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r18 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r22 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r21, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r23}, 0x18, 0x0) r24 = getegid() r25 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r26 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r25, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r27}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r28}}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r4, r5, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r10, r18}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r19, r20, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r23, r24, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r27, r28, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r29 = socket(0x10, 0x4000000000000002, 0xc) write(r29, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000840)='/dev/rfkill\x00', 0x2000, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000880)='/dev/btrfs-control\x00', 0x541000, 0x0) r30 = socket(0x10, 0x4000000000000002, 0xc) write(r30, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r31 = socket(0x10, 0x4000000000000002, 0xc) write(r31, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) syz_open_dev$sndpcmc(&(0x7f00000008c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x800) r32 = getpid() sched_setattr(r32, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)) r33 = socket$nl_xfrm(0x10, 0x3, 0x6) r34 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r34, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r33, 0x0, r35) r36 = socket(0x10, 0x4000000000000002, 0xc) write(r36, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$md(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/md0\x00', 0x10002, 0x0) r37 = socket(0x10, 0x4000000000000002, 0xc) write(r37, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r38 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r38, 0x8912, 0x400200) r39 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r39, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r39, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r39, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r39, &(0x7f0000000080)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e11bf746b048e9a94b61db6b4c41bd5a5259e62506cda287b857aacc858a00a60f818b2292c594e6707bfab893045fca422a6c99f5f450f79c1d464019ba3855d48ab458d233ff1fe27afb17f", 0xffffffffffffff72, 0x2a0400d6, 0x0, 0xfffffecb) 09:34:45 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r4 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB="f6d040b04b59c1080420ce79a2e2b3994c97b85d4fa9b26a74821f722687526491cc51067444475b3fbd777463f6189dba679cec43bcdeb9a8321d07b76ce392a565aa1357587cffb5c0bc4e9f36ea4092a8e4ec4f4f3eede465e04d810c4eccfb42fe2485c5b828787fed2649086f276010068f6aa1d799ac9bd11bba04ce8e2de0d596a38c"]) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r7 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r12 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r12) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r13, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r14, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r12, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r14}}, 0x18) r15 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r15) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r16, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r16, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r17, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r15, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r17}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r12, @ANYRES32=r10, @ANYRES32=r15, @ANYRES32=r11, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r18 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r22 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r21, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r23}, 0x18, 0x0) r24 = getegid() r25 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r26 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r25, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r27}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r28}}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r4, r5, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r10, r18}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r19, r20, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r23, r24, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r27, r28, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r29 = socket(0x10, 0x4000000000000002, 0xc) write(r29, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000840)='/dev/rfkill\x00', 0x2000, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000880)='/dev/btrfs-control\x00', 0x541000, 0x0) r30 = socket(0x10, 0x4000000000000002, 0xc) write(r30, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r31 = socket(0x10, 0x4000000000000002, 0xc) write(r31, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) syz_open_dev$sndpcmc(&(0x7f00000008c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x800) r32 = getpid() sched_setattr(r32, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)) r33 = socket$nl_xfrm(0x10, 0x3, 0x6) r34 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r34, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r33, 0x0, r35) r36 = socket(0x10, 0x4000000000000002, 0xc) write(r36, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$md(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/md0\x00', 0x10002, 0x0) socket(0x10, 0x4000000000000002, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r38 = dup(r37) ioctl$PERF_EVENT_IOC_ENABLE(r38, 0x8912, 0x400200) r39 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r39, &(0x7f0000000300), 0x12) r40 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r40, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r40, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r40, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r40, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r40, &(0x7f0000000080)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e11bf746b048e9a94b61db6b4c41bd5a5259e62506cda287b857aacc858a00a60f818b2292c594e6707bfab893045fca422a6c99f5f450f79c1d464019ba3855d48ab458d233ff1fe27afb17f", 0xffffffffffffff72, 0x2a0400d6, 0x0, 0xfffffecb) 09:34:45 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c288000000000000000086f16000140000303a0000000000000000000200000000000000ff0200000000000000000000000000010100907800090400600000000000f7ff00000000000000000000fffffffffffc00000000000000000000ffffffffffff"], 0x0) r0 = socket(0x10, 0x4000000000000002, 0xc) write(r0, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r1 = semget$private(0x0, 0x2000000010a, 0x0) semop(r1, &(0x7f0000000100)=[{0x0, 0xfffffffffffefffc}], 0x1) semop(r1, &(0x7f0000000040)=[{0x0, 0x316f}, {0x0, 0xff}], 0x2) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r3 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r4}}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r6 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r7 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r7, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r9}, 0x18, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r11 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r11) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r12, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r13, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r11, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r13}}, 0x18) r14 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r14) r15 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r15, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r15, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r16, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r14, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r16}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r11, @ANYRES32=r9, @ANYRES32=r14, @ANYRES32=r10, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r17 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r20, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r22}, 0x18, 0x0) r23 = getegid() r24 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r25 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r24, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r26}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r27}}) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r3, r4, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r9, r17}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r18, r19, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r22, r23, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r26, r27, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) r28 = socket$nl_xfrm(0x10, 0x3, 0x6) r29 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r28, 0x0, r30) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r31}}) r32 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r32, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r32, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r32, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) 09:34:46 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xc8}, 0x1c) socket$inet6(0xa, 0x80003, 0x80) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ioctl(r1, 0xe0, &(0x7f0000000100)="0805b5055e0bcfe84740719309ce0b925e114f8cb4219c426b805658e95d78fc0dc7d9183f80c002f67c6b1ae086be4c8515331afb7ac9f072aa8a77f187e8df127929fed7637779de564b288cf8345da1640097f6c69d65d354f0601eb65ed7c56022030000006ef130d8c05e3324328c14e3440d6701c92abc148d84a386107cb4646011ac0507f30e9ff5d3c535f6d161f8218a4c042d9cbed79d16b28b7b04581328ff3e") bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81004e22a31b00000028925aa80020007b00090080000efffeffe809000000ff0000f03ac710c8000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000100)={0x4, 0x7, 0x2, 0x2000, &(0x7f0000018000/0x2000)=nil}) [ 300.041314][T13820] fuse: Bad value for 'fd' [ 300.086577][T13825] fuse: Bad value for 'fd' [ 300.164182][T13825] fuse: Bad value for 'fd' [ 300.173200][T13820] fuse: Bad value for 'fd' 09:34:46 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f00000001c0)={0x0, @bt={0x0, 0xbd2}}) [ 300.217824][T13823] fuse: Bad value for 'fd' [ 300.260793][T13823] fuse: Bad value for 'fd' 09:34:46 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x2c}, [@ldst={0x0, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 09:34:46 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r4 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB="f6d040b04b59c1080420ce79a2e2b3994c97b85d4fa9b26a74821f722687526491cc51067444475b3fbd777463f6189dba679cec43bcdeb9a8321d07b76ce392a565aa1357587cffb5c0bc4e9f36ea4092a8e4ec4f4f3eede465e04d810c4eccfb42fe2485c5b828787fed2649086f276010068f6aa1d799ac9bd11bba04ce8e2de0d596a38c"]) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r7 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r12 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r12) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r13, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r14, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r12, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r14}}, 0x18) r15 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r15) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r16, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r16, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r17, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r15, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r17}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000009800f8000000000000000000000000000000000000000000000000006000534554000000000000000000000000000000000000000000000000000000001000000400000001000000ff000000f5f7feffffffffffffaf31000005f900000800000009000000040000000600000004000000000000800800000005000000e00000017f00000100000000ffffff0074756e6c300000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000020001100000000000000000000000000000d000f80000000000000000000000000000000000000000000000000038006f776e657200"/426, @ANYRES32=r12, @ANYRES32=r10, @ANYRES32=r15, @ANYRES32=r11, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r18 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r22 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r21, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r23}, 0x18, 0x0) r24 = getegid() r25 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r26 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r25, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r27}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r28}}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r4, r5, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r10, r18}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r19, r20, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r23, r24, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r27, r28, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r29 = socket(0x10, 0x4000000000000002, 0xc) write(r29, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000840)='/dev/rfkill\x00', 0x2000, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000880)='/dev/btrfs-control\x00', 0x541000, 0x0) r30 = socket(0x10, 0x4000000000000002, 0xc) write(r30, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r31 = socket(0x10, 0x4000000000000002, 0xc) write(r31, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) syz_open_dev$sndpcmc(&(0x7f00000008c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x800) r32 = getpid() sched_setattr(r32, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)) r33 = socket$nl_xfrm(0x10, 0x3, 0x6) r34 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r34, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r33, 0x0, r35) r36 = socket(0x10, 0x4000000000000002, 0xc) write(r36, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$md(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/md0\x00', 0x10002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r38 = dup(r37) ioctl$PERF_EVENT_IOC_ENABLE(r38, 0x8912, 0x400200) r39 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r39, &(0x7f0000000300), 0x12) r40 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r40, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r40, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r40, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r40, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r40, &(0x7f0000000080)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e11bf746b048e9a94b61db6b4c41bd5a5259e62506cda287b857aacc858a00a60f818b2292c594e6707bfab893045fca422a6c99f5f450f79c1d464019ba3855d48ab458d233ff1fe27afb17f", 0xffffffffffffff72, 0x2a0400d6, 0x0, 0xfffffecb) 09:34:46 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xc8}, 0x1c) socket$inet6(0xa, 0x80003, 0x80) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ioctl(r1, 0xe0, &(0x7f0000000100)="0805b5055e0bcfe84740719309ce0b925e114f8cb4219c426b805658e95d78fc0dc7d9183f80c002f67c6b1ae086be4c8515331afb7ac9f072aa8a77f187e8df127929fed7637779de564b288cf8345da1640097f6c69d65d354f0601eb65ed7c56022030000006ef130d8c05e3324328c14e3440d6701c92abc148d84a386107cb4646011ac0507f30e9ff5d3c535f6d161f8218a4c042d9cbed79d16b28b7b04581328ff3e") bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) write(0xffffffffffffffff, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x4, 0x7, 0x2, 0x2000, &(0x7f0000018000/0x2000)=nil}) 09:34:46 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c288000000000000000086f16000140000303a0000000000000000000200000000000000ff0200000000000000000000000000010100907800090400600000000000f7ff00000000000000000000fffffffffffc00000000000000000000ffffffffffff"], 0x0) r0 = socket(0x10, 0x4000000000000002, 0xc) write(r0, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r1 = semget$private(0x0, 0x2000000010a, 0x0) semop(r1, &(0x7f0000000100)=[{0x0, 0xfffffffffffefffc}], 0x1) semop(r1, &(0x7f0000000040)=[{0x0, 0x316f}, {0x0, 0xff}], 0x2) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r3 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r4}}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r6 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r7 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r7, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r9}, 0x18, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r11 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r11) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r12, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r13, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r11, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r13}}, 0x18) r14 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r14) r15 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r15, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r15, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r16, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r14, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r16}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r11, @ANYRES32=r9, @ANYRES32=r14, @ANYRES32=r10, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r17 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r20, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r22}, 0x18, 0x0) r23 = getegid() r24 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r25 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r24, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r26}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r27}}) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r3, r4, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r9, r17}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r18, r19, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r22, r23, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r26, r27, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) r28 = socket$nl_xfrm(0x10, 0x3, 0x6) r29 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r28, 0x0, r30) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r31}}) r32 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r32, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r32, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r32, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) 09:34:46 executing program 4: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r4 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB="f6d040b04b59c1080420ce79a2e2b3994c97b85d4fa9b26a74821f722687526491cc51067444475b3fbd777463f6189dba679cec43bcdeb9a8321d07b76ce392a565aa1357587cffb5c0bc4e9f36ea4092a8e4ec4f4f3eede465e04d810c4eccfb42fe2485c5b828787fed2649086f276010068f6aa1d799ac9bd11bba04ce8e2de0d596a38c"]) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r7 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r12 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r12) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r13, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r14, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r12, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r14}}, 0x18) r15 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r15) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r16, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r16, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r17, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r15, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r17}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r12, @ANYRES32=r10, @ANYRES32=r15, @ANYRES32=r11, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r18 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r22 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r21, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r23}, 0x18, 0x0) r24 = getegid() r25 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r26 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r25, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r27}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r28}}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r4, r5, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r10, r18}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r19, r20, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r23, r24, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r27, r28, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r29 = socket(0x10, 0x4000000000000002, 0xc) write(r29, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000840)='/dev/rfkill\x00', 0x2000, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000880)='/dev/btrfs-control\x00', 0x541000, 0x0) r30 = socket(0x10, 0x4000000000000002, 0xc) write(r30, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r31 = socket(0x10, 0x4000000000000002, 0xc) write(r31, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) syz_open_dev$sndpcmc(&(0x7f00000008c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x800) r32 = getpid() sched_setattr(r32, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)) r33 = socket$nl_xfrm(0x10, 0x3, 0x6) r34 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r34, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r33, 0x0, r35) r36 = socket(0x10, 0x4000000000000002, 0xc) write(r36, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$md(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/md0\x00', 0x10002, 0x0) socket(0x10, 0x4000000000000002, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r38 = dup(r37) ioctl$PERF_EVENT_IOC_ENABLE(r38, 0x8912, 0x400200) r39 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r39, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r39, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r39, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r39, &(0x7f0000000080)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e11bf746b048e9a94b61db6b4c41bd5a5259e62506cda287b857aacc858a00a60f818b2292c594e6707bfab893045fca422a6c99f5f450f79c1d464019ba3855d48ab458d233ff1fe27afb17f", 0xffffffffffffff72, 0x2a0400d6, 0x0, 0xfffffecb) [ 300.631980][T13849] fuse: Bad value for 'fd' 09:34:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x8, 0x11, 0x1}]}}}]}, 0x3c}}, 0x0) [ 300.688103][T13849] fuse: Bad value for 'fd' 09:34:46 executing program 5: arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000000)) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) [ 300.780623][T13859] fuse: Bad value for 'fd' [ 300.788241][T13865] netlink: 'syz-executor.2': attribute type 17 has an invalid length. [ 300.817067][T13852] fuse: Bad value for 'fd' [ 300.860039][T13852] fuse: Bad value for 'fd' 09:34:46 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xc8}, 0x1c) socket$inet6(0xa, 0x80003, 0x80) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ioctl(r1, 0xe0, &(0x7f0000000100)="0805b5055e0bcfe84740719309ce0b925e114f8cb4219c426b805658e95d78fc0dc7d9183f80c002f67c6b1ae086be4c8515331afb7ac9f072aa8a77f187e8df127929fed7637779de564b288cf8345da1640097f6c69d65d354f0601eb65ed7c56022030000006ef130d8c05e3324328c14e3440d6701c92abc148d84a386107cb4646011ac0507f30e9ff5d3c535f6d161f8218a4c042d9cbed79d16b28b7b04581328ff3e") bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) write(0xffffffffffffffff, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x4, 0x7, 0x2, 0x2000, &(0x7f0000018000/0x2000)=nil}) [ 300.929705][T13865] netlink: 'syz-executor.2': attribute type 17 has an invalid length. [ 300.996024][T13859] fuse: Bad value for 'fd' 09:34:47 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r4 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB="f6d040b04b59c1080420ce79a2e2b3994c97b85d4fa9b26a74821f722687526491cc51067444475b3fbd777463f6189dba679cec43bcdeb9a8321d07b76ce392a565aa1357587cffb5c0bc4e9f36ea4092a8e4ec4f4f3eede465e04d810c4eccfb42fe2485c5b828787fed2649086f276010068f6aa1d799ac9bd11bba04ce8e2de0d596a38c"]) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r7 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r12 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r12) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r13, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r14, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r12, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r14}}, 0x18) r15 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r15) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r16, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r16, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r17, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r15, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r17}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000009800f8000000000000000000000000000000000000000000000000006000534554000000000000000000000000000000000000000000000000000000001000000400000001000000ff000000f5f7feffffffffffffaf31000005f900000800000009000000040000000600000004000000000000800800000005000000e00000017f00000100000000ffffff0074756e6c300000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000020001100000000000000000000000000000d000f80000000000000000000000000000000000000000000000000038006f776e657200"/426, @ANYRES32=r12, @ANYRES32=r10, @ANYRES32=r15, @ANYRES32=r11, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r18 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r22 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r21, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r23}, 0x18, 0x0) r24 = getegid() r25 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r26 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r25, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r27}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r28}}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r4, r5, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r10, r18}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r19, r20, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r23, r24, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r27, r28, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r29 = socket(0x10, 0x4000000000000002, 0xc) write(r29, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000840)='/dev/rfkill\x00', 0x2000, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000880)='/dev/btrfs-control\x00', 0x541000, 0x0) r30 = socket(0x10, 0x4000000000000002, 0xc) write(r30, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r31 = socket(0x10, 0x4000000000000002, 0xc) write(r31, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) syz_open_dev$sndpcmc(&(0x7f00000008c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x800) r32 = getpid() sched_setattr(r32, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)) r33 = socket$nl_xfrm(0x10, 0x3, 0x6) r34 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r34, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r33, 0x0, r35) r36 = socket(0x10, 0x4000000000000002, 0xc) write(r36, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r38 = dup(r37) ioctl$PERF_EVENT_IOC_ENABLE(r38, 0x8912, 0x400200) r39 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r39, &(0x7f0000000300), 0x12) r40 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r40, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r40, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r40, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r40, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r40, &(0x7f0000000080)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e11bf746b048e9a94b61db6b4c41bd5a5259e62506cda287b857aacc858a00a60f818b2292c594e6707bfab893045fca422a6c99f5f450f79c1d464019ba3855d48ab458d233ff1fe27afb17f", 0xffffffffffffff72, 0x2a0400d6, 0x0, 0xfffffecb) [ 301.119739][T13880] fuse: Bad value for 'fd' 09:34:47 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c288000000000000000086f16000140000303a0000000000000000000200000000000000ff0200000000000000000000000000010100907800090400600000000000f7ff00000000000000000000fffffffffffc00000000000000000000ffffffffffff"], 0x0) r0 = socket(0x10, 0x4000000000000002, 0xc) write(r0, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r1 = semget$private(0x0, 0x2000000010a, 0x0) semop(r1, &(0x7f0000000100)=[{0x0, 0xfffffffffffefffc}], 0x1) semop(r1, &(0x7f0000000040)=[{0x0, 0x316f}, {0x0, 0xff}], 0x2) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r3 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r4}}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r6 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r7 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r7, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r9}, 0x18, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r11 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r11) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r12, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r13, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r11, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r13}}, 0x18) r14 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r14) r15 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r15, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r15, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r16, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r14, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r16}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r11, @ANYRES32=r9, @ANYRES32=r14, @ANYRES32=r10, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r17 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r20, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r22}, 0x18, 0x0) r23 = getegid() r24 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r25 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r24, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r26}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r27}}) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r3, r4, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r9, r17}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r18, r19, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r22, r23, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r26, r27, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) r28 = socket$nl_xfrm(0x10, 0x3, 0x6) r29 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r28, 0x0, r30) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r31}}) r32 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r32, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r32, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r32, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) [ 301.149943][T13880] fuse: Bad value for 'fd' 09:34:47 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @local, 0x1, 0x1, [@multicast1]}, 0x14) 09:34:47 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r4 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB="f6d040b04b59c1080420ce79a2e2b3994c97b85d4fa9b26a74821f722687526491cc51067444475b3fbd777463f6189dba679cec43bcdeb9a8321d07b76ce392a565aa1357587cffb5c0bc4e9f36ea4092a8e4ec4f4f3eede465e04d810c4eccfb42fe2485c5b828787fed2649086f276010068f6aa1d799ac9bd11bba04ce8e2de0d596a38c"]) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r7 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r12 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r12) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r13, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r14, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r12, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r14}}, 0x18) r15 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r15) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r16, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r16, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r17, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r15, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r17}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000009800f8000000000000000000000000000000000000000000000000006000534554000000000000000000000000000000000000000000000000000000001000000400000001000000ff000000f5f7feffffffffffffaf31000005f900000800000009000000040000000600000004000000000000800800000005000000e00000017f00000100000000ffffff0074756e6c300000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000020001100000000000000000000000000000d000f80000000000000000000000000000000000000000000000000038006f776e657200"/426, @ANYRES32=r12, @ANYRES32=r10, @ANYRES32=r15, @ANYRES32=r11, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r18 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r22 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r21, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r23}, 0x18, 0x0) r24 = getegid() r25 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r26 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r25, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r27}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r28}}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r4, r5, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r10, r18}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r19, r20, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r23, r24, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r27, r28, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r29 = socket(0x10, 0x4000000000000002, 0xc) write(r29, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000840)='/dev/rfkill\x00', 0x2000, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000880)='/dev/btrfs-control\x00', 0x541000, 0x0) r30 = socket(0x10, 0x4000000000000002, 0xc) write(r30, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r31 = socket(0x10, 0x4000000000000002, 0xc) write(r31, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) syz_open_dev$sndpcmc(&(0x7f00000008c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x800) r32 = getpid() sched_setattr(r32, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)) r33 = socket$nl_xfrm(0x10, 0x3, 0x6) r34 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r34, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r33, 0x0, r35) socket(0x10, 0x4000000000000002, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r37 = dup(r36) ioctl$PERF_EVENT_IOC_ENABLE(r37, 0x8912, 0x400200) r38 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r38, &(0x7f0000000300), 0x12) r39 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r39, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r39, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r39, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r39, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r39, &(0x7f0000000080)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e11bf746b048e9a94b61db6b4c41bd5a5259e62506cda287b857aacc858a00a60f818b2292c594e6707bfab893045fca422a6c99f5f450f79c1d464019ba3855d48ab458d233ff1fe27afb17f", 0xffffffffffffff72, 0x2a0400d6, 0x0, 0xfffffecb) 09:34:47 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xc8}, 0x1c) socket$inet6(0xa, 0x80003, 0x80) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ioctl(r1, 0xe0, &(0x7f0000000100)="0805b5055e0bcfe84740719309ce0b925e114f8cb4219c426b805658e95d78fc0dc7d9183f80c002f67c6b1ae086be4c8515331afb7ac9f072aa8a77f187e8df127929fed7637779de564b288cf8345da1640097f6c69d65d354f0601eb65ed7c56022030000006ef130d8c05e3324328c14e3440d6701c92abc148d84a386107cb4646011ac0507f30e9ff5d3c535f6d161f8218a4c042d9cbed79d16b28b7b04581328ff3e") bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) write(0xffffffffffffffff, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x4, 0x7, 0x2, 0x2000, &(0x7f0000018000/0x2000)=nil}) [ 301.494293][T13887] fuse: Bad value for 'fd' [ 301.536853][T13887] fuse: Bad value for 'fd' 09:34:47 executing program 4: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r4 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB="f6d040b04b59c1080420ce79a2e2b3994c97b85d4fa9b26a74821f722687526491cc51067444475b3fbd777463f6189dba679cec43bcdeb9a8321d07b76ce392a565aa1357587cffb5c0bc4e9f36ea4092a8e4ec4f4f3eede465e04d810c4eccfb42fe2485c5b828787fed2649086f276010068f6aa1d799ac9bd11bba04ce8e2de0d596a38c"]) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r7 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r12 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r12) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r13, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r14, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r12, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r14}}, 0x18) r15 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r15) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r16, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r16, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r17, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r15, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r17}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000009800f8000000000000000000000000000000000000000000000000006000534554000000000000000000000000000000000000000000000000000000001000000400000001000000ff000000f5f7feffffffffffffaf31000005f900000800000009000000040000000600000004000000000000800800000005000000e00000017f00000100000000ffffff0074756e6c300000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000020001100000000000000000000000000000d000f80000000000000000000000000000000000000000000000000038006f776e657200"/426, @ANYRES32=r12, @ANYRES32=r10, @ANYRES32=r15, @ANYRES32=r11, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r18 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r22 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r21, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r23}, 0x18, 0x0) r24 = getegid() r25 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r26 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r25, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r27}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r28}}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r4, r5, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r10, r18}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r19, r20, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r23, r24, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r27, r28, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r29 = socket(0x10, 0x4000000000000002, 0xc) write(r29, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000840)='/dev/rfkill\x00', 0x2000, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000880)='/dev/btrfs-control\x00', 0x541000, 0x0) r30 = socket(0x10, 0x4000000000000002, 0xc) write(r30, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r31 = socket(0x10, 0x4000000000000002, 0xc) write(r31, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) syz_open_dev$sndpcmc(&(0x7f00000008c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x800) r32 = getpid() sched_setattr(r32, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)) r33 = socket$nl_xfrm(0x10, 0x3, 0x6) r34 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r34, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r33, 0x0, r35) r36 = socket(0x10, 0x4000000000000002, 0xc) write(r36, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$md(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/md0\x00', 0x10002, 0x0) socket(0x10, 0x4000000000000002, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r38 = dup(r37) ioctl$PERF_EVENT_IOC_ENABLE(r38, 0x8912, 0x400200) r39 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r39, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r39, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r39, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r39, &(0x7f0000000080)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e11bf746b048e9a94b61db6b4c41bd5a5259e62506cda287b857aacc858a00a60f818b2292c594e6707bfab893045fca422a6c99f5f450f79c1d464019ba3855d48ab458d233ff1fe27afb17f", 0xffffffffffffff72, 0x2a0400d6, 0x0, 0xfffffecb) [ 301.582030][T13897] fuse: Bad value for 'fd' 09:34:47 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) rt_sigprocmask(0x0, &(0x7f0000000000)={0xfffefffffffffffa}, 0x0, 0x8) r2 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x17, 0x4, @tid=r2}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) ppoll(0x0, 0x0, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f00000000c0), 0x8) 09:34:47 executing program 2: msgsnd(0x0, &(0x7f0000000040)={0x3}, 0x8, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='L'], 0x1, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000700)) 09:34:47 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c288000000000000000086f16000140000303a0000000000000000000200000000000000ff0200000000000000000000000000010100907800090400600000000000f7ff00000000000000000000fffffffffffc00000000000000000000ffffffffffff"], 0x0) r0 = socket(0x10, 0x4000000000000002, 0xc) write(r0, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r1 = semget$private(0x0, 0x2000000010a, 0x0) semop(r1, &(0x7f0000000100)=[{0x0, 0xfffffffffffefffc}], 0x1) semop(r1, &(0x7f0000000040)=[{0x0, 0x316f}, {0x0, 0xff}], 0x2) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r3 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r4}}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r6 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r7 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r7, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r9}, 0x18, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r11 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r11) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r12, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r13, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r11, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r13}}, 0x18) r14 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r14) r15 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r15, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r15, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r16, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r14, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r16}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r11, @ANYRES32=r9, @ANYRES32=r14, @ANYRES32=r10, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r17 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r20, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r22}, 0x18, 0x0) r23 = getegid() r24 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r25 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r24, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r26}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r27}}) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r3, r4, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r9, r17}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r18, r19, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r22, r23, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r26, r27, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) r28 = socket$nl_xfrm(0x10, 0x3, 0x6) r29 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r28, 0x0, r30) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r31}}) r32 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r32, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r32, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) [ 301.717386][T13905] fuse: Bad value for 'fd' [ 301.735082][T13897] fuse: Bad value for 'fd' 09:34:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x2, &(0x7f00000001c0)=[{0x15}, {0x6, 0x0, 0x0, 0x50000}]}) [ 301.869266][T13905] fuse: Bad value for 'fd' [ 301.915293][T13912] fuse: Bad value for 'fd' [ 301.928135][T13912] fuse: Bad value for 'fd' 09:34:48 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r4 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB="f6d040b04b59c1080420ce79a2e2b3994c97b85d4fa9b26a74821f722687526491cc51067444475b3fbd777463f6189dba679cec43bcdeb9a8321d07b76ce392a565aa1357587cffb5c0bc4e9f36ea4092a8e4ec4f4f3eede465e04d810c4eccfb42fe2485c5b828787fed2649086f276010068f6aa1d799ac9bd11bba04ce8e2de0d596a38c"]) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r7 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r12 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r12) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r13, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r14, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r12, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r14}}, 0x18) r15 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r15) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r16, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r16, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r17, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r15, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r17}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000009800f8000000000000000000000000000000000000000000000000006000534554000000000000000000000000000000000000000000000000000000001000000400000001000000ff000000f5f7feffffffffffffaf31000005f900000800000009000000040000000600000004000000000000800800000005000000e00000017f00000100000000ffffff0074756e6c300000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000020001100000000000000000000000000000d000f80000000000000000000000000000000000000000000000000038006f776e657200"/426, @ANYRES32=r12, @ANYRES32=r10, @ANYRES32=r15, @ANYRES32=r11, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r18 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r22 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r21, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r23}, 0x18, 0x0) r24 = getegid() r25 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r26 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r25, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r27}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r28}}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r4, r5, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r10, r18}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r19, r20, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r23, r24, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r27, r28, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r29 = socket(0x10, 0x4000000000000002, 0xc) write(r29, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000840)='/dev/rfkill\x00', 0x2000, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000880)='/dev/btrfs-control\x00', 0x541000, 0x0) r30 = socket(0x10, 0x4000000000000002, 0xc) write(r30, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r31 = socket(0x10, 0x4000000000000002, 0xc) write(r31, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) syz_open_dev$sndpcmc(&(0x7f00000008c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x800) r32 = getpid() sched_setattr(r32, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)) r33 = socket$nl_xfrm(0x10, 0x3, 0x6) r34 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r34, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r33, 0x0, r35) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r37 = dup(r36) ioctl$PERF_EVENT_IOC_ENABLE(r37, 0x8912, 0x400200) r38 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r38, &(0x7f0000000300), 0x12) r39 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r39, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r39, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r39, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r39, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r39, &(0x7f0000000080)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e11bf746b048e9a94b61db6b4c41bd5a5259e62506cda287b857aacc858a00a60f818b2292c594e6707bfab893045fca422a6c99f5f450f79c1d464019ba3855d48ab458d233ff1fe27afb17f", 0xffffffffffffff72, 0x2a0400d6, 0x0, 0xfffffecb) 09:34:48 executing program 4: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r4 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB="f6d040b04b59c1080420ce79a2e2b3994c97b85d4fa9b26a74821f722687526491cc51067444475b3fbd777463f6189dba679cec43bcdeb9a8321d07b76ce392a565aa1357587cffb5c0bc4e9f36ea4092a8e4ec4f4f3eede465e04d810c4eccfb42fe2485c5b828787fed2649086f276010068f6aa1d799ac9bd11bba04ce8e2de0d596a38c"]) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r7 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r12 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r12) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r13, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r14, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r12, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r14}}, 0x18) r15 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r15) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r16, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r16, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r17, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r15, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r17}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r12, @ANYRES32=r10, @ANYRES32=r15, @ANYRES32=r11, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r18 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r22 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r21, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r23}, 0x18, 0x0) r24 = getegid() r25 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r26 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r25, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r27}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r28}}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r4, r5, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r10, r18}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r19, r20, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r23, r24, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r27, r28, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r29 = socket(0x10, 0x4000000000000002, 0xc) write(r29, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000840)='/dev/rfkill\x00', 0x2000, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000880)='/dev/btrfs-control\x00', 0x541000, 0x0) r30 = socket(0x10, 0x4000000000000002, 0xc) write(r30, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r31 = socket(0x10, 0x4000000000000002, 0xc) write(r31, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) syz_open_dev$sndpcmc(&(0x7f00000008c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x800) r32 = getpid() sched_setattr(r32, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)) r33 = socket$nl_xfrm(0x10, 0x3, 0x6) r34 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r34, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r33, 0x0, r35) r36 = socket(0x10, 0x4000000000000002, 0xc) write(r36, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$md(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/md0\x00', 0x10002, 0x0) socket(0x10, 0x4000000000000002, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r38 = dup(r37) ioctl$PERF_EVENT_IOC_ENABLE(r38, 0x8912, 0x400200) r39 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r39, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r39, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r39, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r39, &(0x7f0000000080)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e11bf746b048e9a94b61db6b4c41bd5a5259e62506cda287b857aacc858a00a60f818b2292c594e6707bfab893045fca422a6c99f5f450f79c1d464019ba3855d48ab458d233ff1fe27afb17f", 0xffffffffffffff72, 0x2a0400d6, 0x0, 0xfffffecb) 09:34:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x1800) 09:34:48 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xc8}, 0x1c) socket$inet6(0xa, 0x80003, 0x80) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ioctl(r1, 0xe0, &(0x7f0000000100)="0805b5055e0bcfe84740719309ce0b925e114f8cb4219c426b805658e95d78fc0dc7d9183f80c002f67c6b1ae086be4c8515331afb7ac9f072aa8a77f187e8df127929fed7637779de564b288cf8345da1640097f6c69d65d354f0601eb65ed7c56022030000006ef130d8c05e3324328c14e3440d6701c92abc148d84a386107cb4646011ac0507f30e9ff5d3c535f6d161f8218a4c042d9cbed79d16b28b7b04581328ff3e") bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81004e22a31b00000028925aa80020007b00090080000efffeffe809000000ff0000f03ac710c8000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x4, 0x7, 0x2, 0x2000, &(0x7f0000018000/0x2000)=nil}) [ 302.139902][T13931] fuse: Bad value for 'fd' 09:34:48 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c288000000000000000086f16000140000303a0000000000000000000200000000000000ff0200000000000000000000000000010100907800090400600000000000f7ff00000000000000000000fffffffffffc00000000000000000000ffffffffffff"], 0x0) r0 = socket(0x10, 0x4000000000000002, 0xc) write(r0, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r1 = semget$private(0x0, 0x2000000010a, 0x0) semop(r1, &(0x7f0000000100)=[{0x0, 0xfffffffffffefffc}], 0x1) semop(r1, &(0x7f0000000040)=[{0x0, 0x316f}, {0x0, 0xff}], 0x2) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r3 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r4}}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r6 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r7 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r7, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r9}, 0x18, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r11 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r11) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r12, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r13, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r11, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r13}}, 0x18) r14 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r14) r15 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r15, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r15, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r16, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r14, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r16}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000009800f8000000000000000000000000000000000000000000000000006000534554000000000000000000000000000000000000000000000000000000001000000400000001000000ff000000f5f7feffffffffffffaf31000005f900000800000009000000040000000600000004000000000000800800000005000000e00000017f00000100000000ffffff0074756e6c300000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000020001100000000000000000000000000000d000f80000000000000000000000000000000000000000000000000038006f776e657200"/426, @ANYRES32=r11, @ANYRES32=r9, @ANYRES32=r14, @ANYRES32=r10, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r17 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r20, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r22}, 0x18, 0x0) r23 = getegid() r24 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r25 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r24, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r26}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r27}}) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r3, r4, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r9, r17}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r18, r19, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r22, r23, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r26, r27, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) r28 = socket$nl_xfrm(0x10, 0x3, 0x6) r29 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r28, 0x0, r30) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r31}}) r32 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r32, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) 09:34:48 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x10, 0x803, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="3400000010000104000009040000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000140012000c00010062726964676500000300020092ab29e6bc90313f5c14a8d5d4534e466f18e765b4fd2a0e0ffabd5f884b8215627962f7a4aab6691329692afb3fdcc3e7378871f430fe0e63a139f8432b7c88d952fec2b4b0543063914575e89dce08917ef4c83982304f91f231dc1ecf62c4bf0541ff2b5060b6a4d69b9403c96422fd8632e43e946636599dedd725bcd83c8971198e43e29e4b1c15388e01dee5bf7c4e128ff5b5c146c15db0684e76186c1d4209d8b4158f7b359d8efa69231277e09c47884e9fb0b010687409fc6fa73c91c9504b4460a91a865e0897f10dc1c1e0edc0d560f18478d67cc5cf8dbb0ee5003f6cc7185e99bc93bcb9eb76abba12076a8d076c853092edf73f4224c4e770006630b3a7e43c7e4c90ce6a20fac946584d406aa1cc75103f746d1f026456e44c9a39c62eecdb8bb82ca275e24c5c9095cbc8a6701a2447f9f6e6e4a372717366f176f0e4df46e9e28ede8a00e2a8b3dc"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x219, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x1ff}}, @IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x40}}, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000040)={{0x4b, 0x76, 0x1, 0x1f, 0x3, 0x4}}) r2 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)}], 0x4, 0x0) tkill(r2, 0x3d) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = userfaultfd(0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x120, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [{{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}]}, 0x120}, 0x1, 0x0, 0x0, 0x20000004}, 0x40000) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x2}) [ 302.233892][T13935] fuse: Bad value for 'fd' [ 302.284244][T13931] fuse: Bad value for 'fd' 09:34:48 executing program 2: unshare(0x2000400) r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) ioctl$VIDIOC_DBG_G_CHIP_INFO(r0, 0xc0c85666, 0x0) [ 302.344606][T13952] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 302.346328][T13935] fuse: Bad value for 'fd' [ 302.368231][T13952] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.5'. [ 302.436984][T13961] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 302.479265][T13948] fuse: Bad value for 'fd' [ 302.538992][T13955] fuse: Bad value for 'fd' 09:34:48 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xc8}, 0x1c) socket$inet6(0xa, 0x80003, 0x80) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ioctl(r1, 0xe0, &(0x7f0000000100)="0805b5055e0bcfe84740719309ce0b925e114f8cb4219c426b805658e95d78fc0dc7d9183f80c002f67c6b1ae086be4c8515331afb7ac9f072aa8a77f187e8df127929fed7637779de564b288cf8345da1640097f6c69d65d354f0601eb65ed7c56022030000006ef130d8c05e3324328c14e3440d6701c92abc148d84a386107cb4646011ac0507f30e9ff5d3c535f6d161f8218a4c042d9cbed79d16b28b7b04581328ff3e") bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81004e22a31b00000028925aa80020007b00090080000efffeffe809000000ff0000f03ac710c8000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x4, 0x7, 0x2, 0x2000, &(0x7f0000018000/0x2000)=nil}) 09:34:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x46) r1 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x2) 09:34:48 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0014f9f407000904000a00000000000000000000000800060000000000", 0x24) 09:34:48 executing program 2: r0 = eventfd(0x0) ioctl$int_in(r0, 0x5421, 0x0) 09:34:48 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r4 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB="f6d040b04b59c1080420ce79a2e2b3994c97b85d4fa9b26a74821f722687526491cc51067444475b3fbd777463f6189dba679cec43bcdeb9a8321d07b76ce392a565aa1357587cffb5c0bc4e9f36ea4092a8e4ec4f4f3eede465e04d810c4eccfb42fe2485c5b828787fed2649086f276010068f6aa1d799ac9bd11bba04ce8e2de0d596a38c"]) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r7 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r12 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r12) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r13, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r14, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r12, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r14}}, 0x18) r15 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r15) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r16, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r16, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r17, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r15, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r17}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r12, @ANYRES32=r10, @ANYRES32=r15, @ANYRES32=r11, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r18 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r22 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r21, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r23}, 0x18, 0x0) r24 = getegid() r25 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r26 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r25, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r27}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r28}}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r4, r5, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r10, r18}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r19, r20, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r23, r24, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r27, r28, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r29 = socket(0x10, 0x4000000000000002, 0xc) write(r29, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000840)='/dev/rfkill\x00', 0x2000, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000880)='/dev/btrfs-control\x00', 0x541000, 0x0) r30 = socket(0x10, 0x4000000000000002, 0xc) write(r30, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r31 = socket(0x10, 0x4000000000000002, 0xc) write(r31, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) syz_open_dev$sndpcmc(&(0x7f00000008c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x800) r32 = getpid() sched_setattr(r32, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)) socket$nl_xfrm(0x10, 0x3, 0x6) r33 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r33, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r35 = dup(r34) ioctl$PERF_EVENT_IOC_ENABLE(r35, 0x8912, 0x400200) r36 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r36, &(0x7f0000000300), 0x12) r37 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r37, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r37, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r37, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r37, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r37, &(0x7f0000000080)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e11bf746b048e9a94b61db6b4c41bd5a5259e62506cda287b857aacc858a00a60f818b2292c594e6707bfab893045fca422a6c99f5f450f79c1d464019ba3855d48ab458d233ff1fe27afb17f", 0xffffffffffffff72, 0x2a0400d6, 0x0, 0xfffffecb) 09:34:48 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c288000000000000000086f16000140000303a0000000000000000000200000000000000ff0200000000000000000000000000010100907800090400600000000000f7ff00000000000000000000fffffffffffc00000000000000000000ffffffffffff"], 0x0) r0 = socket(0x10, 0x4000000000000002, 0xc) write(r0, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r1 = semget$private(0x0, 0x2000000010a, 0x0) semop(r1, &(0x7f0000000100)=[{0x0, 0xfffffffffffefffc}], 0x1) semop(r1, &(0x7f0000000040)=[{0x0, 0x316f}, {0x0, 0xff}], 0x2) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r3 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r4}}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r6 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r7 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r7, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r9}, 0x18, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r11 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r11) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r12, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r13, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r11, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r13}}, 0x18) r14 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r14) r15 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r15, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r15, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r16, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r14, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r16}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000009800f8000000000000000000000000000000000000000000000000006000534554000000000000000000000000000000000000000000000000000000001000000400000001000000ff000000f5f7feffffffffffffaf31000005f900000800000009000000040000000600000004000000000000800800000005000000e00000017f00000100000000ffffff0074756e6c300000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000020001100000000000000000000000000000d000f80000000000000000000000000000000000000000000000000038006f776e657200"/426, @ANYRES32=r11, @ANYRES32=r9, @ANYRES32=r14, @ANYRES32=r10, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r17 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r20, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r22}, 0x18, 0x0) r23 = getegid() r24 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r25 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r24, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r26}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r27}}) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r3, r4, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r9, r17}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r18, r19, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r22, r23, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r26, r27, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) r28 = socket$nl_xfrm(0x10, 0x3, 0x6) r29 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r28, 0x0, r30) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r31}}) socket$inet(0x2, 0x4000000000000001, 0x0) 09:34:48 executing program 4: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r4 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB="f6d040b04b59c1080420ce79a2e2b3994c97b85d4fa9b26a74821f722687526491cc51067444475b3fbd777463f6189dba679cec43bcdeb9a8321d07b76ce392a565aa1357587cffb5c0bc4e9f36ea4092a8e4ec4f4f3eede465e04d810c4eccfb42fe2485c5b828787fed2649086f276010068f6aa1d799ac9bd11bba04ce8e2de0d596a38c"]) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r7 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r12 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r12) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r13, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r14, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r12, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r14}}, 0x18) r15 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r15) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r16, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r16, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r17, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r15, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r17}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r12, @ANYRES32=r10, @ANYRES32=r15, @ANYRES32=r11, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r18 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r22 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r21, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r23}, 0x18, 0x0) r24 = getegid() r25 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r26 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r25, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r27}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r28}}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r4, r5, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r10, r18}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r19, r20, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r23, r24, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r27, r28, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r29 = socket(0x10, 0x4000000000000002, 0xc) write(r29, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000840)='/dev/rfkill\x00', 0x2000, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000880)='/dev/btrfs-control\x00', 0x541000, 0x0) r30 = socket(0x10, 0x4000000000000002, 0xc) write(r30, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r31 = socket(0x10, 0x4000000000000002, 0xc) write(r31, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) syz_open_dev$sndpcmc(&(0x7f00000008c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x800) r32 = getpid() sched_setattr(r32, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)) r33 = socket$nl_xfrm(0x10, 0x3, 0x6) r34 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r34, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r33, 0x0, r35) r36 = socket(0x10, 0x4000000000000002, 0xc) write(r36, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$md(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/md0\x00', 0x10002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r38 = dup(r37) ioctl$PERF_EVENT_IOC_ENABLE(r38, 0x8912, 0x400200) r39 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r39, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r39, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r39, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r39, &(0x7f0000000080)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e11bf746b048e9a94b61db6b4c41bd5a5259e62506cda287b857aacc858a00a60f818b2292c594e6707bfab893045fca422a6c99f5f450f79c1d464019ba3855d48ab458d233ff1fe27afb17f", 0xffffffffffffff72, 0x2a0400d6, 0x0, 0xfffffecb) [ 302.897566][T13981] fuse: Bad value for 'fd' 09:34:49 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) getpid() r0 = syz_open_procfs(0x0, 0x0) ioctl$TCSETX(0xffffffffffffffff, 0x5433, &(0x7f0000000080)={0x0, 0x0, [0x0, 0x0, 0x0, 0xfffe]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3c, 0x0, &(0x7f0000000540)="2b18724ea7b35a3ba76b662f5cc21117dfbd91d9510a0aaaca10d63c660bd7bab52c44a9386a0253c0ba289433cab68ea46d9a2f45568fb6e23b7d89"}) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x800000, 0x0) chdir(&(0x7f0000000380)='./file0\x00') r1 = getpid() r2 = open(0x0, 0x8000, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000000)) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) syz_open_dev$dri(0x0, 0x0, 0x0) r3 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001cc0)={0x8, "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", 0x1000}, 0x1006) sendfile(r3, r3, &(0x7f0000000240), 0x2008000fffffffe) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='trusted.overlay.upper\x00', &(0x7f0000000300)={0x0, 0xfb, 0x1c, 0x2, 0x0, "582e87fa537d97115988df97db273151", "1cc2027fa35ecf"}, 0x1c, 0x2) creat(&(0x7f00000000c0)='./file0\x00', 0x0) [ 302.948903][T13981] fuse: Bad value for 'fd' [ 303.006086][T13990] fuse: Bad value for 'fd' [ 303.014473][T13990] fuse: Bad value for 'fd' 09:34:49 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xc8}, 0x1c) socket$inet6(0xa, 0x80003, 0x80) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ioctl(r1, 0xe0, &(0x7f0000000100)="0805b5055e0bcfe84740719309ce0b925e114f8cb4219c426b805658e95d78fc0dc7d9183f80c002f67c6b1ae086be4c8515331afb7ac9f072aa8a77f187e8df127929fed7637779de564b288cf8345da1640097f6c69d65d354f0601eb65ed7c56022030000006ef130d8c05e3324328c14e3440d6701c92abc148d84a386107cb4646011ac0507f30e9ff5d3c535f6d161f8218a4c042d9cbed79d16b28b7b04581328ff3e") bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81004e22a31b00000028925aa80020007b00090080000efffeffe809000000ff0000f03ac710c8000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x4, 0x7, 0x2, 0x2000, &(0x7f0000018000/0x2000)=nil}) 09:34:49 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_int(r2, 0x1, 0x1, &(0x7f000059dffc), &(0x7f0000000080)=0x4) 09:34:49 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r4 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB="f6d040b04b59c1080420ce79a2e2b3994c97b85d4fa9b26a74821f722687526491cc51067444475b3fbd777463f6189dba679cec43bcdeb9a8321d07b76ce392a565aa1357587cffb5c0bc4e9f36ea4092a8e4ec4f4f3eede465e04d810c4eccfb42fe2485c5b828787fed2649086f276010068f6aa1d799ac9bd11bba04ce8e2de0d596a38c"]) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r7 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r12 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r12) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r13, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r14, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r12, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r14}}, 0x18) r15 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r15) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r16, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r16, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r17, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r15, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r17}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r12, @ANYRES32=r10, @ANYRES32=r15, @ANYRES32=r11, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r18 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r22 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r21, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r23}, 0x18, 0x0) r24 = getegid() r25 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r26 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r25, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r27}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r28}}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r4, r5, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r10, r18}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r19, r20, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r23, r24, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r27, r28, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r29 = socket(0x10, 0x4000000000000002, 0xc) write(r29, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000840)='/dev/rfkill\x00', 0x2000, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000880)='/dev/btrfs-control\x00', 0x541000, 0x0) r30 = socket(0x10, 0x4000000000000002, 0xc) write(r30, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r31 = socket(0x10, 0x4000000000000002, 0xc) write(r31, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) syz_open_dev$sndpcmc(&(0x7f00000008c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x800) r32 = getpid() sched_setattr(r32, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r34 = dup(r33) ioctl$PERF_EVENT_IOC_ENABLE(r34, 0x8912, 0x400200) r35 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r35, &(0x7f0000000300), 0x12) r36 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r36, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r36, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r36, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r36, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r36, &(0x7f0000000080)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e11bf746b048e9a94b61db6b4c41bd5a5259e62506cda287b857aacc858a00a60f818b2292c594e6707bfab893045fca422a6c99f5f450f79c1d464019ba3855d48ab458d233ff1fe27afb17f", 0xffffffffffffff72, 0x2a0400d6, 0x0, 0xfffffecb) [ 303.199209][T13999] fuse: Bad value for 'fd' 09:34:49 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c288000000000000000086f16000140000303a0000000000000000000200000000000000ff0200000000000000000000000000010100907800090400600000000000f7ff00000000000000000000fffffffffffc00000000000000000000ffffffffffff"], 0x0) r0 = socket(0x10, 0x4000000000000002, 0xc) write(r0, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r1 = semget$private(0x0, 0x2000000010a, 0x0) semop(r1, &(0x7f0000000100)=[{0x0, 0xfffffffffffefffc}], 0x1) semop(r1, &(0x7f0000000040)=[{0x0, 0x316f}, {0x0, 0xff}], 0x2) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r3 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r4}}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r6 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r7 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r7, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r9}, 0x18, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r11 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r11) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r12, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r13, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r11, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r13}}, 0x18) r14 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r14) r15 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r15, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r15, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r16, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r14, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r16}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r11, @ANYRES32=r9, @ANYRES32=r14, @ANYRES32=r10, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r17 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r20, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r22}, 0x18, 0x0) r23 = getegid() r24 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r25 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r24, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r26}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r27}}) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r3, r4, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r9, r17}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r18, r19, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r22, r23, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r26, r27, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) r28 = socket$nl_xfrm(0x10, 0x3, 0x6) r29 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r28, 0x0, r30) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r31}}) 09:34:49 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_int(r2, 0x1, 0x1, &(0x7f000059dffc), &(0x7f0000000080)=0x4) [ 303.363936][T14005] fuse: Bad value for 'fd' 09:34:49 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xc8}, 0x1c) socket$inet6(0xa, 0x80003, 0x80) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ioctl(r1, 0xe0, &(0x7f0000000100)="0805b5055e0bcfe84740719309ce0b925e114f8cb4219c426b805658e95d78fc0dc7d9183f80c002f67c6b1ae086be4c8515331afb7ac9f072aa8a77f187e8df127929fed7637779de564b288cf8345da1640097f6c69d65d354f0601eb65ed7c56022030000006ef130d8c05e3324328c14e3440d6701c92abc148d84a386107cb4646011ac0507f30e9ff5d3c535f6d161f8218a4c042d9cbed79d16b28b7b04581328ff3e") writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81004e22a31b00000028925aa80020007b00090080000efffeffe809000000ff0000f03ac710c8000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x4, 0x7, 0x2, 0x2000, &(0x7f0000018000/0x2000)=nil}) 09:34:49 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_int(r2, 0x1, 0x1, &(0x7f000059dffc), &(0x7f0000000080)=0x4) [ 303.418654][T14014] fuse: Bad value for 'fd' 09:34:49 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_int(r2, 0x1, 0x1, &(0x7f000059dffc), &(0x7f0000000080)=0x4) [ 303.522735][T14014] fuse: Bad value for 'fd' [ 303.568955][T14022] fuse: Bad value for 'fd' 09:34:49 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r4 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB="f6d040b04b59c1080420ce79a2e2b3994c97b85d4fa9b26a74821f722687526491cc51067444475b3fbd777463f6189dba679cec43bcdeb9a8321d07b76ce392a565aa1357587cffb5c0bc4e9f36ea4092a8e4ec4f4f3eede465e04d810c4eccfb42fe2485c5b828787fed2649086f276010068f6aa1d799ac9bd11bba04ce8e2de0d596a38c"]) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r7 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r12 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r12) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r13, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r14, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r12, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r14}}, 0x18) r15 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r15) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r16, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r16, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r17, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r15, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r17}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r12, @ANYRES32=r10, @ANYRES32=r15, @ANYRES32=r11, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r18 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r22 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r21, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r23}, 0x18, 0x0) r24 = getegid() r25 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r26 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r25, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r27}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r28}}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r4, r5, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r10, r18}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r19, r20, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r23, r24, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r27, r28, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r29 = socket(0x10, 0x4000000000000002, 0xc) write(r29, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000840)='/dev/rfkill\x00', 0x2000, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000880)='/dev/btrfs-control\x00', 0x541000, 0x0) r30 = socket(0x10, 0x4000000000000002, 0xc) write(r30, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r31 = socket(0x10, 0x4000000000000002, 0xc) write(r31, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) syz_open_dev$sndpcmc(&(0x7f00000008c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x800) r32 = getpid() sched_setattr(r32, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r34 = dup(r33) ioctl$PERF_EVENT_IOC_ENABLE(r34, 0x8912, 0x400200) r35 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r35, &(0x7f0000000300), 0x12) r36 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r36, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r36, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r36, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r36, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r36, &(0x7f0000000080)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e11bf746b048e9a94b61db6b4c41bd5a5259e62506cda287b857aacc858a00a60f818b2292c594e6707bfab893045fca422a6c99f5f450f79c1d464019ba3855d48ab458d233ff1fe27afb17f", 0xffffffffffffff72, 0x2a0400d6, 0x0, 0xfffffecb) [ 303.646828][T14022] fuse: Bad value for 'fd' [ 303.859840][T14039] fuse: Bad value for 'fd' [ 303.912447][T14039] fuse: Bad value for 'fd' 09:34:50 executing program 4: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r4 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB="f6d040b04b59c1080420ce79a2e2b3994c97b85d4fa9b26a74821f722687526491cc51067444475b3fbd777463f6189dba679cec43bcdeb9a8321d07b76ce392a565aa1357587cffb5c0bc4e9f36ea4092a8e4ec4f4f3eede465e04d810c4eccfb42fe2485c5b828787fed2649086f276010068f6aa1d799ac9bd11bba04ce8e2de0d596a38c"]) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r7 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r12 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r12) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r13, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r14, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r12, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r14}}, 0x18) r15 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r15) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r16, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r16, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r17, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r15, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r17}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r12, @ANYRES32=r10, @ANYRES32=r15, @ANYRES32=r11, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r18 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r22 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r21, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r23}, 0x18, 0x0) r24 = getegid() r25 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r26 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r25, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r27}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r28}}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r4, r5, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r10, r18}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r19, r20, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r23, r24, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r27, r28, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r29 = socket(0x10, 0x4000000000000002, 0xc) write(r29, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000840)='/dev/rfkill\x00', 0x2000, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000880)='/dev/btrfs-control\x00', 0x541000, 0x0) r30 = socket(0x10, 0x4000000000000002, 0xc) write(r30, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r31 = socket(0x10, 0x4000000000000002, 0xc) write(r31, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) syz_open_dev$sndpcmc(&(0x7f00000008c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x800) r32 = getpid() sched_setattr(r32, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)) r33 = socket$nl_xfrm(0x10, 0x3, 0x6) r34 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r34, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r33, 0x0, r35) r36 = socket(0x10, 0x4000000000000002, 0xc) write(r36, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r38 = dup(r37) ioctl$PERF_EVENT_IOC_ENABLE(r38, 0x8912, 0x400200) r39 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r39, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r39, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r39, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r39, &(0x7f0000000080)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e11bf746b048e9a94b61db6b4c41bd5a5259e62506cda287b857aacc858a00a60f818b2292c594e6707bfab893045fca422a6c99f5f450f79c1d464019ba3855d48ab458d233ff1fe27afb17f", 0xffffffffffffff72, 0x2a0400d6, 0x0, 0xfffffecb) 09:34:50 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c288000000000000000086f16000140000303a0000000000000000000200000000000000ff0200000000000000000000000000010100907800090400600000000000f7ff00000000000000000000fffffffffffc00000000000000000000ffffffffffff"], 0x0) r0 = socket(0x10, 0x4000000000000002, 0xc) write(r0, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r1 = semget$private(0x0, 0x2000000010a, 0x0) semop(r1, &(0x7f0000000100)=[{0x0, 0xfffffffffffefffc}], 0x1) semop(r1, &(0x7f0000000040)=[{0x0, 0x316f}, {0x0, 0xff}], 0x2) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r3 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r4}}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r6 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r7 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r7, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r9}, 0x18, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r11 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r11) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r12, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r13, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r11, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r13}}, 0x18) r14 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r14) r15 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r15, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r15, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r16, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r14, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r16}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r11, @ANYRES32=r9, @ANYRES32=r14, @ANYRES32=r10, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r17 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r20, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r22}, 0x18, 0x0) r23 = getegid() r24 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r25 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r24, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r26}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r27}}) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r3, r4, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r9, r17}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r18, r19, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r22, r23, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r26, r27, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) r28 = socket$nl_xfrm(0x10, 0x3, 0x6) r29 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r28, 0x0, r30) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)) [ 304.054140][T14050] fuse: Bad value for 'fd' [ 304.118736][T14050] fuse: Bad value for 'fd' [ 304.200299][T14053] fuse: Bad value for 'fd' 09:34:50 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) getpid() r0 = syz_open_procfs(0x0, 0x0) ioctl$TCSETX(0xffffffffffffffff, 0x5433, &(0x7f0000000080)={0x0, 0x0, [0x0, 0x0, 0x0, 0xfffe]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3c, 0x0, &(0x7f0000000540)="2b18724ea7b35a3ba76b662f5cc21117dfbd91d9510a0aaaca10d63c660bd7bab52c44a9386a0253c0ba289433cab68ea46d9a2f45568fb6e23b7d89"}) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x800000, 0x0) chdir(&(0x7f0000000380)='./file0\x00') r1 = getpid() r2 = open(0x0, 0x8000, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000000)) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) syz_open_dev$dri(0x0, 0x0, 0x0) r3 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001cc0)={0x8, "5f5539ae7383df635d7eb9f00cde999ef4e1d4fbae589edcbcd64ae9781d89f20a7c347bd734db9d80a3e9ee0d0f04fe5305dacf9e656dc623d0d8abb05b81ebf7fa83533ebfe364612ee7d5571be6e3af5eccf0e26370ff66a26e95f4b7b1206b9d9a70fe612b356ec5074716b0e71eb9f60ac1c5e653c9a7de0de9a5f8c8047f77ece27201fc36e2ca04338864356e123b3b96be97afa5d6698e6f08a657f7ad07b42df05dfca83247581434b575e2d4419e52f1103e9e3ddc440a98f9caeace71f8affb3cfc62e4b428403787ff063d2923a50c0410f191c7923b77c51fea54cc7f2b8adcd2a5e1f53495c168736a160f28435b70f6e40df8523c2deaef8b70f13bc408d1d6eb05dbcae35f0c12cb00b8d589c0dda912acf9315852e1cbb85857f9421cd623fc5046448db22eec3c07358c4778c73a2495bf3452b18d8e904ed88ae250a99edb20b78fc923ccc841847a4f6d514320309afe2f0a075e50096c7a8cd4da2d88791d01a10cea10a97d32e8bb05a5e2bf52be5fffa3fb26953a0fadac598644cf0297d01d5c1ed9f2123ba789fa650b0d140a478903cc23a5b5c2a2a52f19bdd40039ac0291f648f1f991e272c52669f7843e73b3be22103fe0a88d5d405b9ecea5d602be0b5466d18d8a971b69a8e80e48621103a6bc6ee3a7b70b199005241779f22fa2cc159988eaf2d53c858ec06ab56acc232b587ffee3a5cb29f5641b2189fb1617d1a652e42511fe2e447a2636f18ceabc261126200193eb9f309f80aa204a93883bf6fb247ade866685f300295f8735e18d1d81365dbd2bddfa1779c59effed803bbe0a68302b1ab0f0d00892138ad24d52d653d92897bd28c2f031a77eae54ef3ce9a1fc44ea41763b2d780a454f68ea1a297302b4fa6664923a818040f5a74e0db3ff24e940e97d4abff40af2d36f7bceb8a0c5e90dbefbc8ba496f6e42f11ce11fb20655138f9387938abc3aa3a742f749a8695d972c537127519f654945bac96f0a2ef9d6b24f2226ae677684e3eb63041d6b5105777a8e6aa41ff11366448c0af1ddf5e3f2a1d828b4c9ede3809eab736c9035f2a7032ce38b699dfdc3e158e1ce62d325441e1b05a3ba5f663f20b0cb703cb2960aad298177881aa6b52bf4ae112c5d2bb691ac34b0723be7ddcfff0015e578475db1f062c5a50b54bbcba2f591eb4d6de66f386b0d5dd3975229ad25ae95d82266dfb9c1a6f497ef54b6ac5ee81edae16c47e89f9a435377dfac411db459559ce483921251745b8b94f69d4815b009ea86aedc5a75a516ff2afaff9a418f73c2cacbcdf45dd02ba962399f9b81e149635c2b4c0bda790a6d72fc243f6fbc73d0a0636db51c03d93b44b42c07f2269b465231f953e6a45dc549e9b5ef05443da7820cd667f5b0ff47a13f0a3df630a6f98f72e09978b829389d6a11afb0a7a0988822bb95fcb50399e51295f464662118646d2996da0fa710b082036820ae0a60828479bad4489061244b74179cfec74ab273551190c0eb2ca95be86391b8e469454796d04b29646b8aaae49889ffd84e83e33fb0cd7b10d778e72422f474911897dbd4548d9658e9af23cfff0ad4a7d750ab59e0f8988082ab7ac8d27eeab1c5809de6694aba8ee6ff1ba23d422f38dc026a77933cb0fc916d22131f7f736e35c881c5551f13a5037f65b9090372bb8e73bb9cd686715afef6b40ff275a978078c1e1c7db358285e5caee5c53cb4a7b446db91e5c0615342265edd9f09a72002aae56c7ad4269a0513569db514ee852724cdcccb72e8836fc270f7aa03e03e65f4572c2909e6fb1b557e89c3b505ba2f2b10b545513758abdbdc5b3e5ec1fe4d6bd5947b354058eccb79f10e971a85bdafa5aa27224acc734d884f9282ed033fc540defa3181d451713565d940879cd70a1d704b9a390de509351d5129bff18051b0c7ca196a78d3b8d0c8f384c79ad637b2e1770fecfc980960ef403cbc6bb284792cd169133f35aea028d9ffdc1668572dd197db86a26cb6fe1bb822bb76968ef2cd3c384704b75d0f17a50bcce054a400edd3b2f2abf72d2d8a679fdc94216d2d7d43ca1e60aeb5a313f8104f8ae54e75beb6c106cf080b9ecc9a1f91508b37d9ede25a1bede738c3a7f3501391a7b1863fe120ea26c4ff13f1de4588b150f3f2c12a9b9d92e6a8610c788c4d449a91416307a313536e1779bef88028d65a9398c5d1492b729d5f08e34e64fa07507f64297a1f9305a2d68169f653d5c107c9860ca0d822916eb357c646c229e792b1a5da56b35ab971bb82e41581e11f24f9c6b26c019dd2f2f89f2a82b74bd856ed7b46a2d9c07b2856bc39e9a28f271c5bb06db5bfa04d21e37e778b3e03071d25da8bbc91543fe8909603ba92e3455cb0edfe1dc040f12c169a97a5b8fb09f97acda29ab8491e7c9f81320b1a9de5773078557a6a0bdc5a1bfd2d953c47b3e5ccc70d76dc4ba10c297d7591e2c2150b8235de09714fedcf23aedb0ec9586e52f6af6c299256ad5a0a4ce22666be48592977dc5ff5c5eea529b81df4510016240b8fc8489bf59c899bb75481220554d0b9aebf1660cb72b01dfc3ffaac27dc1d36247e86339c6d99fc3ca8edf585fdb236ecdffda1b99819f873367ee5d8fde5d596517f895c9154deab01ca26008edbeadecfe33cae750ff044469a1b3b104b35af0c04a35a48aecf54dd8844b598432b81f67ce232ad46a247cad103274cd7c206d890008b149aaa3310f9794243cc5e04d4bd3e66a5b01ef67044412eba507a20399856cd26fb6233ebc064aa7b5ba94198bc05301dd74d6875b6d3b4731c2a11f0656767a3e6ba0a3d6951a7f9385ff99876891b8150ac5257756ef92a6c3854ccba8f13bca3cd3e66fdc93feefc44c3eba570970e0a6921f1eef24713ed5a174b8e52a0bc1bd3b420bdd0e521835289d29267fca4512caeaf64d1adeba2457864801d30d37e4eea965f8cfdb314f62307d8a12084a65da330f800862cae3876cdffe8c77d982ce9527b069628f0d796c0ec1c1b423ab6eb248e176a9b201d4de572f7901d8d88ae3dc6c3f196a4e3fb81552f16f7a7b7b3a242824b0618a855fc150fe8d484c80b3e1ea6c42f165dcfa7b0b292f9c7f27179d32260d4f472385a8818f7d76133030cf1256153b4162c8c3a3629c01e9b8cb5a30b3d0068d7f0e3727d8159739386511746fad1cfcc98c7af05b489876432957c6d59c51f12ebb62acac90311e6b00cea58b355db5a36718dfb8140d23e64e41ef9d33969cae75ea3ef8f14ad8c9b2d0c8bd7bf4366b091b5992ffbd71800495c0484cbee4b5fffaede0808cdcfa2409227e6b96dd82481d6d00bfff72c29f860b7fa4fa9c3634d9a2e4f7a8ef240c997b749e0562514d5c2c5d66da75149dea37b1cbb347fa0df5be2b9a5ddf20a6d47936b3b55cedc64453e69413a89c8a9eaeda00fccc96281b4f29db0f3e45fa098c77ffe3c0488529ecfa801cdf7fe8a23f6a3aa04acaf4e300c44e6d873f43b9fd4b13cbed2411c97378e07c7a6799d272d36ac8964233130947ed88f727915fa58a4812ceacd6cc6a52bc7fcba5e57543e93d293d5a428c73b194f33ba752b0ebeb0262423e7a8f490707a220857f44e191304cffb93cfc75b217ca306292549c8742fe3aa62a464d40c666115015201c0fef3e9555615f91c3d15b6e1556a9b04febc2ae7e3d689ca5f58b51f2717ae8c5153f2c2a4df11ea8cafcc369327c2a0a6f7946daf09be323d59e4b0e42ebcdeca373a6d70a3286382f1405b7107af899da00dbd52324657870bd18ca26f3ef47e0e81cd335c827512e88f24202836e7a1b505f0d03a23d577430d971458a11ff42e36b2d2883b664d402eb7497a90ba1f94829b6d9c6b4c4f7e9dc49882520a6fd2590cb8b41328541b9076e43f6019c3da9084e57960478c268f4215bb98455fbd2981e7e37caf7aaf9008f87cfe196da930637c55da5a34e142a433494e6f92a5985d7e6fc0ec68d2ad25144919af6dc81afc88cd05f01b401730bccc3086c9dd06d38ed522e52e7ffae7671898fb91cec0821c061aaea6c47ae877d2d7f5ca1ecf159e0ea152ce713f652c116f62e12cad293331db922a5fed311ab22096d90fc17ccc53f84d46eae680def0b9949e0d9debff263d575e590941a5ce0b33548beb6dbc01104f6054da73cc349625adece6a54e092d8d740915b91d81df30374a78693d6b69724f05354d61ac0febff4a544b88954d11d3f4927895edf6ad755313227ac87f24f12d70a831df16bd45c4a03570fdf27d698fa5581fce2d002890a3f2059a6bfdf77f0aeee3ad8318449bc1b2d486b225b148a78e921c73a2c37256dfb1ad611e410d5436e0d31d00ab5177da7915a74ef3307927c23c764f5cf62c3e2db86284c9abb39045b625d507f5c8d440557b4dad2a39593fbb572cce25a364aae44134fdd97ef0148690881bee42b6bd929f12cdf07996597a2a8366b12841f8fb8dfc0ece651756637b95c6bdb92320302805b4a700e7d3dfb0b8878862f400f8437a6c153b5fab40d30af07e73cf4345cb6fa81574018a7bc0e8789fae8b8560f4b93d413fa8e0e0218527ccb82873fc9da6cc34b6197c1d8bd9223ab7c4efb1f8cf021450037f4576934d83116655c120062fc3b912176fd395ccc792d492f2730465f8b4c68155b6ceb52e80742d2970e24004171f4685cd78467a4e943a0fecff66dffff10922d69236460dc37c1df9b19dded1ecb932dd8dd2045d2f8e8d3dfb6a83a65d6623553a2aed7a12b78effeeaa58eec84cdefc84923177afb7bd04f6fc3d3332d63ed5c5d6fe8820b9853e7615407eb23962f5232db44bc0267e7f07e47b158de0732a974b80aeb00ffeeca83d26fe21e487ea4472cd9048f942155784af8f68006cdb4286480a7ffa1ba6e93fe7fdb33283359d28bf9311dee59899e0e77aa113fadda21526c8e2bd60f21e182b735a5b0177fb95e948857c6c4ae391b2b4950a35b129e7bf25b7eb2c0857290c55f5d28b78ca1f39f0cd676610805b0a378647ae958182b26de1ddbf80e80d7ab1d2476086ed192e98bee0969bc0e8765278cb5570ccc29ac6d7298821bff4f85895deffcf4ce54a69878cfb41eade0d8703cbcff02352733ace2d800ba68b0fdcc52b94247ecacddf80ad228cf76eb547d276d0f6402054e34c3569e2b53ea3cbc54e49e099372cde3acd1ba47f836a765f855763a175a58ec4d6cecc72375da2d8c956c2868e77bfdb697182b554f0b743d7095cf13a3ba1d19e7590c281bd09ce235898a9682aacb5633b4fa4c3bdd71139c20c518b6a7651a47df7658a5a7ed41b3e7e43543d68c1dd4a5d01ec7e42cabdd6963db84f0d69b5a471ff8b929a8774baee39b14ab325af2ea7756c656c0135a59568499208341333d6b896cf0cc10108970e20313df241d179bd2a4d2392b269e6aeb9d2570bba7e3c67f49e90cf95562f93077a5fb588225724d444fcd8da55921dcff7b0be49ac0171ae98209e729f65bcebe447ccc0a185719f3fd55d1ae263daac4a420da91d05cdfc85d48e5743483dbb6fe81e5c216948953d95d5e725db17df44f05a57c6cc425e55572f9163e536a6d2d51d5213c937f6ddba08fc1f90ec73088a766a685f2c0d43b80422d48eef23b2ea588ea26b8dffb4f0df0cf91d6ea8f14a663ba2b165e4427010742fe63905d62b9dcf2385dce09fe75e4746d5c9c402ee77bfc9f39a28eb9f2751a81b090a499706accafbf5ae1afa9af350fd7481bb", 0x1000}, 0x1006) sendfile(r3, r3, &(0x7f0000000240), 0x2008000fffffffe) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='trusted.overlay.upper\x00', &(0x7f0000000300)={0x0, 0xfb, 0x1c, 0x2, 0x0, "582e87fa537d97115988df97db273151", "1cc2027fa35ecf"}, 0x1c, 0x2) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 09:34:50 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xc8}, 0x1c) socket$inet6(0xa, 0x80003, 0x80) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ioctl(r1, 0xe0, &(0x7f0000000100)="0805b5055e0bcfe84740719309ce0b925e114f8cb4219c426b805658e95d78fc0dc7d9183f80c002f67c6b1ae086be4c8515331afb7ac9f072aa8a77f187e8df127929fed7637779de564b288cf8345da1640097f6c69d65d354f0601eb65ed7c56022030000006ef130d8c05e3324328c14e3440d6701c92abc148d84a386107cb4646011ac0507f30e9ff5d3c535f6d161f8218a4c042d9cbed79d16b28b7b04581328ff3e") writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81004e22a31b00000028925aa80020007b00090080000efffeffe809000000ff0000f03ac710c8000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x4, 0x7, 0x2, 0x2000, &(0x7f0000018000/0x2000)=nil}) 09:34:50 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000180)=""/109, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000080)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000006c0)=0x5) 09:34:50 executing program 4: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r4 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB="f6d040b04b59c1080420ce79a2e2b3994c97b85d4fa9b26a74821f722687526491cc51067444475b3fbd777463f6189dba679cec43bcdeb9a8321d07b76ce392a565aa1357587cffb5c0bc4e9f36ea4092a8e4ec4f4f3eede465e04d810c4eccfb42fe2485c5b828787fed2649086f276010068f6aa1d799ac9bd11bba04ce8e2de0d596a38c"]) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r7 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r12 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r12) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r13, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r14, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r12, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r14}}, 0x18) r15 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r15) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r16, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r16, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r17, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r15, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r17}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000009800f8000000000000000000000000000000000000000000000000006000534554000000000000000000000000000000000000000000000000000000001000000400000001000000ff000000f5f7feffffffffffffaf31000005f900000800000009000000040000000600000004000000000000800800000005000000e00000017f00000100000000ffffff0074756e6c300000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000020001100000000000000000000000000000d000f80000000000000000000000000000000000000000000000000038006f776e657200"/426, @ANYRES32=r12, @ANYRES32=r10, @ANYRES32=r15, @ANYRES32=r11, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r18 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r22 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r21, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r23}, 0x18, 0x0) r24 = getegid() r25 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r26 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r25, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r27}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r28}}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r4, r5, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r10, r18}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r19, r20, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r23, r24, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r27, r28, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r29 = socket(0x10, 0x4000000000000002, 0xc) write(r29, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000840)='/dev/rfkill\x00', 0x2000, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000880)='/dev/btrfs-control\x00', 0x541000, 0x0) r30 = socket(0x10, 0x4000000000000002, 0xc) write(r30, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r31 = socket(0x10, 0x4000000000000002, 0xc) write(r31, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) syz_open_dev$sndpcmc(&(0x7f00000008c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x800) r32 = getpid() sched_setattr(r32, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)) r33 = socket$nl_xfrm(0x10, 0x3, 0x6) r34 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r34, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r33, 0x0, r35) socket(0x10, 0x4000000000000002, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r37 = dup(r36) ioctl$PERF_EVENT_IOC_ENABLE(r37, 0x8912, 0x400200) r38 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r38, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r38, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r38, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r38, &(0x7f0000000080)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e11bf746b048e9a94b61db6b4c41bd5a5259e62506cda287b857aacc858a00a60f818b2292c594e6707bfab893045fca422a6c99f5f450f79c1d464019ba3855d48ab458d233ff1fe27afb17f", 0xffffffffffffff72, 0x2a0400d6, 0x0, 0xfffffecb) 09:34:50 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r4 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB="f6d040b04b59c1080420ce79a2e2b3994c97b85d4fa9b26a74821f722687526491cc51067444475b3fbd777463f6189dba679cec43bcdeb9a8321d07b76ce392a565aa1357587cffb5c0bc4e9f36ea4092a8e4ec4f4f3eede465e04d810c4eccfb42fe2485c5b828787fed2649086f276010068f6aa1d799ac9bd11bba04ce8e2de0d596a38c"]) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r7 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r8, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r10}, 0x18, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r12 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r12) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r13, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r14, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r12, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r14}}, 0x18) r15 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r15) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r16, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r16, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r17, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r15, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r17}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000d8030000f0010000f8000000f8000000f8000000f0010000400300004003000040030000400300004003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="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"/426, @ANYRES32=r12, @ANYRES32=r10, @ANYRES32=r15, @ANYRES32=r11, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r18 = getgid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r22 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r21, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r23}, 0x18, 0x0) r24 = getegid() r25 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r26 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r25, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r27}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r28}}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)={0x3e0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x3ff, 0x0, 0x80000001, 0xfff, {0x1, 0x3f, 0x7, 0x3f, 0x1, 0x1000, 0xbe, 0x2, 0x92c3, 0x8, 0x200, r4, r5, 0x200, 0xffffffb7}}, {0x3, 0xffffffffffffff81, 0xa, 0xfffffffc, 'mountinfo\x00'}}, {{0x2, 0x2, 0x100000000, 0x4, 0x81, 0x2, {0x1, 0x3, 0x0, 0x6, 0x401, 0x5, 0x2, 0x2, 0xab, 0x1, 0x5, r10, r18}}, {0x0, 0x10000, 0xa, 0x9, 'mountinfo\x00'}}, {{0xffffffffffffffc0, 0x2, 0xfff, 0x9, 0x1, 0x9, {0x2, 0x8621, 0x4, 0x9, 0xfffffffffffffffa, 0x40, 0x6, 0x5, 0x82a5, 0x7ff, 0x6, r19, r20, 0xfb}}, {0x2, 0x7, 0xa, 0x80000000, 'mountinfo\x00'}}, {{0x0, 0x3, 0x4, 0x4, 0x1, 0x3, {0x2, 0x75e8cf92, 0x0, 0x80000001, 0x1, 0xa8, 0x7, 0xa2cf, 0x3, 0xfffff2c4, 0x6, r23, r24, 0x3, 0x1b}}, {0x1, 0x462, 0xa, 0x7f, 'mountinfo\x00'}}, {{0x1, 0x2, 0xfffffffffffffffd, 0x4, 0x8, 0x400, {0x0, 0x40, 0x80000, 0x6, 0x40, 0x7fffffff, 0xdd3, 0x8000, 0x8, 0x0, 0x2, r27, r28, 0x1ff, 0x3}}, {0x3, 0xfffffffffffff800, 0x0, 0x400}}, {{0x5, 0x1, 0x8, 0x5d4, 0x2, 0x4, {0x3, 0x6, 0x80000000, 0x5f6c, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4, 0x7ff, 0xffffffffffffffff, 0x0, 0x800, 0x2}}, {0x3, 0x6, 0x0, 0x6}}]}, 0x3e0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r29 = socket(0x10, 0x4000000000000002, 0xc) write(r29, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000840)='/dev/rfkill\x00', 0x2000, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000880)='/dev/btrfs-control\x00', 0x541000, 0x0) r30 = socket(0x10, 0x4000000000000002, 0xc) write(r30, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) r31 = socket(0x10, 0x4000000000000002, 0xc) write(r31, &(0x7f0000000000)="130000000104ff00fd43ff7f00000000f30501", 0x13) syz_open_dev$sndpcmc(&(0x7f00000008c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x800) r32 = getpid() sched_setattr(r32, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r34 = dup(r33) ioctl$PERF_EVENT_IOC_ENABLE(r34, 0x8912, 0x400200) r35 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r35, &(0x7f0000000300), 0x12) r36 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r36, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r36, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r36, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r36, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r36, &(0x7f0000000080)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e11bf746b048e9a94b61db6b4c41bd5a5259e62506cda287b857aacc858a00a60f818b2292c594e6707bfab893045fca422a6c99f5f450f79c1d464019ba3855d48ab458d233ff1fe27afb17f", 0xffffffffffffff72, 0x2a0400d6, 0x0, 0xfffffecb) [ 304.457735][T14063] ===================================================== [ 304.464723][T14063] BUG: KMSAN: uninit-value in __list_del_entry_valid+0x194/0x410 [ 304.472429][T14063] CPU: 0 PID: 14063 Comm: vhost-14060 Not tainted 5.5.0-rc1-syzkaller #0 [ 304.480826][T14063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 304.490872][T14063] Call Trace: [ 304.494153][T14063] dump_stack+0x1c9/0x220 [ 304.498479][T14063] kmsan_report+0x128/0x220 [ 304.502975][T14063] __msan_warning+0x57/0xa0 [ 304.507466][T14063] __list_del_entry_valid+0x194/0x410 [ 304.512838][T14063] kcov_remote_start+0x13e/0x2e0 [ 304.517764][T14063] vhost_worker+0x373/0x690 [ 304.522272][T14063] kthread+0x4b5/0x4f0 [ 304.526326][T14063] ? vhost_dev_set_owner+0xd80/0xd80 [ 304.531602][T14063] ? kthread_blkcg+0xf0/0xf0 [ 304.536188][T14063] ret_from_fork+0x35/0x40 [ 304.540591][T14063] [ 304.542904][T14063] Uninit was created at: [ 304.547130][T14063] kmsan_save_stack_with_flags+0x3c/0x90 [ 304.552746][T14063] kmsan_alloc_page+0x133/0x320 [ 304.557583][T14063] __alloc_pages_nodemask+0x1421/0x5fd0 [ 304.563112][T14063] alloc_pages_current+0x68d/0x9a0 [ 304.568292][T14063] __vmalloc_node_range+0x8c9/0x1270 [ 304.573563][T14063] vmalloc+0x106/0x120 [ 304.577616][T14063] kcov_remote_start+0x18e/0x2e0 [ 304.582536][T14063] vhost_worker+0x373/0x690 [ 304.587023][T14063] kthread+0x4b5/0x4f0 [ 304.591071][T14063] ret_from_fork+0x35/0x40 [ 304.595463][T14063] ===================================================== [ 304.602372][T14063] Disabling lock debugging due to kernel taint [ 304.608501][T14063] Kernel panic - not syncing: panic_on_warn set ... [ 304.615088][T14063] CPU: 0 PID: 14063 Comm: vhost-14060 Tainted: G B 5.5.0-rc1-syzkaller #0 [ 304.624867][T14063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 304.634903][T14063] Call Trace: [ 304.638183][T14063] dump_stack+0x1c9/0x220 [ 304.642513][T14063] panic+0x3c9/0xc1e [ 304.646411][T14063] kmsan_report+0x215/0x220 [ 304.650903][T14063] __msan_warning+0x57/0xa0 [ 304.655394][T14063] __list_del_entry_valid+0x194/0x410 [ 304.660766][T14063] kcov_remote_start+0x13e/0x2e0 [ 304.665689][T14063] vhost_worker+0x373/0x690 [ 304.670197][T14063] kthread+0x4b5/0x4f0 [ 304.674263][T14063] ? vhost_dev_set_owner+0xd80/0xd80 [ 304.679536][T14063] ? kthread_blkcg+0xf0/0xf0 [ 304.684113][T14063] ret_from_fork+0x35/0x40 [ 304.689785][T14063] Kernel Offset: 0x24c00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 304.701409][T14063] Rebooting in 86400 seconds..